Archive
14 August 2015
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Medium —
Nokogiri vulnerable to libxml XML Entity Expansion
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
-
Unscored —
Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting t…
-
Unscored —
Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to …
-
Unscored —
Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier…
-
Unscored —
OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumptio…
-
Unscored —
Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and c…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to…
-
Unscored —CVE-2015-5696 Public exploit
Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.
-
High 7.5
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
-
Unscored —
GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-mi…
-
Unscored —CVE-2015-2448 EPSS 18%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2015-2443 EPSS 24%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2015-2445 EPSS 13%
Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, …
-
Unscored —CVE-2015-2442 EPSS 16%
Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of…
-
Unscored —CVE-2015-2450 EPSS 18%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-2447 EPSS 24%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-2441 EPSS 19%
Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of…
-
Unscored —CVE-2015-2452 EPSS 16%
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-2449 EPSS 16%
Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a …
-
Unscored —
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-2446 EPSS 16%
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2015-2451 EPSS 18%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Lin…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…
-
Unscored —
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR…