Skip to content
OpenAdvisories

Archive

13 August 2015

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —
    CVE-2015-4666 Public exploit Scanner template EPSS 16%

    Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attac…

  • Unscored —
    CVE-2015-4665 Public exploit

    Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers…

  • Critical 9.8
    CVE-2015-3253 EPSS 41%

    Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy

    The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

  • Unscored —
    CVE-2015-2321 Public exploit

    Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attac…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attack…

  • Unscored —

    The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitr…

  • Unscored —

    Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute ar…

  • Unscored —

    BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a c…