Skip to content
OpenAdvisories

Archive

19 August 2015

Vulnerabilities first published on this day (UTC), newest first.

← July 2015 2015 / August /19 September 2015 →
  1. 118
  2. 2 
  3. 318
  4. 432
  5. 53
  6. 61
  7. 71
  8. 810
  9. 9 
  10. 10 
  11. 1113
  12. 1220
  13. 138
  14. 1455
  15. 1540
  16. 16132
  17. 174
  18. 1850
  19. 1919
  20. 2029
  21. 21 
  22. 2215
  23. 2314
  24. 2445
  25. 258
  26. 2612
  27. 2716
  28. 284
  29. 295
  30. 303
  31. 3144
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2015-4296

    Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial…

  • Unscored —
    CVE-2015-4323

    Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.4…

  • Unscored —
    CVE-2015-4310

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2015-4277

    The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty s…

  • Medium —
    CVE-2015-1830 Public exploit EPSS 84%

    Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

    org.apache.activemq:activemq-client Maven
  • Unscored —
    CVE-2015-4299

    Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenti…

  • Unscored —
    CVE-2015-4298

    Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows rem…

  • Unscored —
    CVE-2015-4308

    The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote a…

  • Unscored —
    CVE-2015-4322

    Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privilege…

  • Unscored —
    CVE-2015-4301

    Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang)…

  • Unscored —
    CVE-2015-4324

    Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.…

  • Unscored —
    CVE-2015-6523

    Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attacke…

  • Unscored —
    CVE-2015-6255

    Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attac…

  • Unscored —
    CVE-2015-6522 Public exploit EPSS 74%

    SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arb…

  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu
  • Medium 6.5
    CVE-2015-5163

    OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file

    The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.

    glance glance Debian PyPI
  • Unscored —
    CVE-2015-4302

    The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system polic…

  • Unscored —
    CVE-2015-4297

    Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect …

  • High 8.8
    CVE-2015-2502 Exploited EPSS 51%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Apr 13, 2022