Skip to content
OpenAdvisories

Archive

19 August 2015

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —
    CVE-2015-1830 Public exploit EPSS 84%

    Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

  • Unscored —
    CVE-2015-6522 Public exploit EPSS 74%

    SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arb…

  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…