Skip to content
OpenAdvisories

Archive

16 July 2015

Vulnerabilities first published on this day (UTC), newest first.

← June 2015 2015 / July /16 August 2015 →
  1. 117
  2. 29
  3. 375
  4. 47
  5. 55
  6. 639
  7. 73
  8. 822
  9. 936
  10. 1018
  11. 11 
  12. 12 
  13. 131
  14. 1488
  15. 1548
  16. 16172
  17. 17 
  18. 185
  19. 192
  20. 2022
  21. 218
  22. 226
  23. 2323
  24. 244
  25. 251
  26. 2610
  27. 271
  28. 28 
  29. 2910
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

172 results · Feed

  • Unscored —
    CVE-2015-0725

    Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videosca…

  • Unscored —
    CVE-2015-4528

    Cross-site scripting (XSS) vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated us…

  • Unscored —
    CVE-2015-4529

    Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum …

  • Unscored —
    CVE-2015-4460 Public exploit

    Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box befo…

  • Unscored —
    CVE-2015-4266

    The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly re…

  • Unscored —
    CVE-2015-4276

    Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command pa…

  • Unscored —
    CVE-2015-4278

    Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a de…

  • Unscored —
    CVE-2015-4275

    The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.592…

  • Unscored —
    CVE-2015-4274

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 1…

  • Unscored —
    CVE-2015-5386

    Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administ…

  • Unscored —
    CVE-2015-5529 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inje…

  • Unscored —
    CVE-2015-5528

    Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating So…

  • Unscored —
    CVE-2015-5530 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers …

  • High —
    CVE-2015-1831

    Incomplete exclude pattern in Apache Struts

    The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2015-4637

    The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configu…

  • Unscored —
    CVE-2015-3621

    Untrusted search path vulnerability in SAP Enterprise Central Component (ECC) allows local users to gain privileges via…

  • Unscored —
    CVE-2015-3259

    Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2015-3449

    The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install …

  • Unscored —
    CVE-2015-5357

    The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 1…

  • Unscored —
    CVE-2015-5360

    IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47…

  • Unscored —
    CVE-2015-5080

    The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10…

  • Unscored —
    CVE-2015-5363

    The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12…

  • Unscored —
    CVE-2015-0443

    Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote …

  • Unscored —
    CVE-2015-0445

    Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote …

  • Unscored —
    CVE-2015-0446

    Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote …

  • Unscored —
    CVE-2015-0467

    Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Pr…

  • Unscored —
    CVE-2015-0468

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows…

  • Unscored —
    CVE-2015-0444

    Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote …

  • Unscored —
    CVE-2015-1926

    Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.…

  • Unscored —
    CVE-2015-4737

    Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticate…

    percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  • Unscored —
    CVE-2015-4779

    Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and …

  • Unscored —
    CVE-2015-4729

    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integri…

  • Unscored —
    CVE-2015-4755

    Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to…

  • Unscored —
    CVE-2015-4727

    Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect conf…

  • Unscored —
    CVE-2015-4783

    Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and …

  • Unscored —
    CVE-2015-4787

    Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and …

  • Unscored —
    CVE-2015-4736

    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity,…

  • Unscored —
    CVE-2015-4746

    Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain…

  • Unscored —
    CVE-2015-4765

    Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 1…

  • Unscored —
    CVE-2015-4782

    Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and …