Skip to content
OpenAdvisories

Archive

25 August 2015

Vulnerabilities first published on this day (UTC), newest first.

← July 2015 2015 / August /25 September 2015 →
  1. 118
  2. 2 
  3. 318
  4. 432
  5. 53
  6. 61
  7. 71
  8. 810
  9. 9 
  10. 10 
  11. 1113
  12. 1220
  13. 138
  14. 1455
  15. 1540
  16. 16132
  17. 174
  18. 1850
  19. 1919
  20. 2029
  21. 21 
  22. 2215
  23. 2314
  24. 2445
  25. 258
  26. 2612
  27. 2716
  28. 284
  29. 295
  30. 303
  31. 3144
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium —
    CVE-2015-4020

    RubyGems Improper Input Validation vulnerability

    RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a doma…

    rubygems-update RubyGems
  • Medium —
    CVE-2015-5161 Public exploit

    ZendXml and Zend Framework contain XXE and XEE Vulnerabilities

    The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external e…

    zendframework/zendframework1 zendframework/zendframework zendframework/zendxml Packagist
  • Unscored —
    CVE-2015-5949 EPSS 13%

    VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…

    vlc Debian
  • Unscored —
    CVE-2012-2150

    xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain se…

    xfsprogs xfsprogs Debian Ubuntu
  • Unscored —
    CVE-2015-6262

    Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote att…

  • Unscored —
    CVE-2015-3269

    Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.3541…

  • Unscored —
    CVE-2015-5786

    Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2015-5785

    Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…