Skip to content
OpenAdvisories

Archive

17 August 2015

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Unscored —

    The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an…

  • Unscored —

    The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Desti…

  • Medium —
    CVE-2015-5531 Public exploit Scanner template EPSS 95%

    Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in Vid…