Skip to content
OpenAdvisories

Archive

July 2015

Vulnerabilities first published in this month (UTC), newest first.

← June 2015 2015 / July August 2015 →
  1. 117
  2. 29
  3. 375
  4. 47
  5. 55
  6. 639
  7. 73
  8. 822
  9. 936
  10. 1018
  11. 11 
  12. 12 
  13. 131
  14. 1488
  15. 1548
  16. 16172
  17. 17 
  18. 185
  19. 192
  20. 2022
  21. 218
  22. 226
  23. 2323
  24. 244
  25. 251
  26. 2610
  27. 271
  28. 28 
  29. 2910
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

635 results · Feed

  • Unscored —
    CVE-2015-2376 EPSS 16%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3…

  • Unscored —
    CVE-2015-2412 EPSS 18%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka…

  • Unscored —
    CVE-2015-2403 EPSS 13%

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2015-2375 EPSS 14%

    Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server…

  • Unscored —
    CVE-2015-2421 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …

  • Unscored —
    CVE-2015-2413 EPSS 15%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafte…

  • Unscored —
    CVE-2015-2397 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-2408 EPSS 21%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-2380 EPSS 14%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to …

  • Unscored —
    CVE-2015-2390 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-2374

    The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows S…

  • Unscored —
    CVE-2015-2414 EPSS 15%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via v…

  • Unscored —
    CVE-2015-2372 EPSS 20%

    vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, all…

  • Unscored —
    CVE-2015-2415 EPSS 14%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow re…

  • Unscored —
    CVE-2015-2373 EPSS 38%

    The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows …

  • Unscored —
    CVE-2015-1927

    The default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0 before 8.0.0.11, and 8…

  • Unscored —
    CVE-2015-1946

    IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebS…

  • Unscored —
    CVE-2015-1936

    The administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when…

  • Unscored —
    CVE-2015-4268

    Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1…

  • Unscored —
    CVE-2015-4270

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote a…

  • Unscored —
    CVE-2015-3007

    The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3…

  • High 7.5
    CVE-2015-5145

    Django ReDoS in validators.URLValidator

    validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

    django PyPI
  • High 7.5
    CVE-2015-5144

    Django Vulnerable to HTTP Response Splitting Attack

    Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1)…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-5143

    Django Denial-of-service by filling session store

    The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

    python-django django python-django Debian Ubuntu PyPI
  • Unscored —
    CVE-2015-5362

    The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, …

  • Unscored —
    CVE-2015-5358

    Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9…

  • Unscored —
    CVE-2015-5359

    Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9…

  • High 8.5
    CVE-2015-1561 Public exploit

    Centreon Command Injection

    The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute …

    centreon/centreon Packagist
  • Unscored —
    CVE-2015-1560 Public exploit

    SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethi…

  • Unscored —
    CVE-2015-3258

    Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70…

    cups cups-filters cups-filters Debian Ubuntu
  • Unscored —
    CVE-2015-3279

    Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a de…

    cups cups-filters cups-filters Debian Ubuntu
  • High —
    CVE-2015-5147

    redcarpet Buffer Overflow vulnerability

    Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

    redcarpet RubyGems
  • Unscored —
    CVE-2015-5521

    Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2015-5520 Public exploit

    Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allo…

  • Unscored —
    CVE-2015-5397

    Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote att…

  • Unscored —
    CVE-2015-5519

    Cross-site scripting (XSS) vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to …

  • Unscored —
    CVE-2015-1944

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows…

  • Unscored —
    CVE-2015-1917

    Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 throug…

  • Unscored —
    CVE-2015-1887

    IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attacke…

  • Unscored —
    CVE-2015-4272

    Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerl…