Skip to content
OpenAdvisories

Archive

19 August 2015

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —
    CVE-2015-1830 Public exploit EPSS 84%

    Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

  • Medium 6.5

    OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file

    The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.