Archive
17 August 2015
Vulnerabilities first published on this day (UTC), newest first.
4 results · Feed
-
Unscored —
The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an…
-
Unscored —
The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Desti…
-
Medium —
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in Vid…