Skip to content
OpenAdvisories

Archive

August 2015

Vulnerabilities first published in this month (UTC), newest first.

← July 2015 2015 / August September 2015 →
  1. 118
  2. 2 
  3. 318
  4. 432
  5. 53
  6. 61
  7. 71
  8. 810
  9. 9 
  10. 10 
  11. 1113
  12. 1220
  13. 138
  14. 1455
  15. 1540
  16. 16132
  17. 174
  18. 1850
  19. 1919
  20. 2029
  21. 21 
  22. 2215
  23. 2314
  24. 2445
  25. 258
  26. 2612
  27. 2716
  28. 284
  29. 295
  30. 303
  31. 3144
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2015-5964

    Denial-of-service possibility in logout() view by filling session store

    The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attacker…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-5963

    Django denial of service via empty session record creation

    contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a …

    python-django django python-django Debian Ubuntu PyPI
  • High —
    CVE-2014-3612

    Improper Authentication in Apache WSS4J

    The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an una…

    activemq activemq org.apache.activemq:activemq-broker org.apache.activemq:activemq-jaas Debian Ubuntu Maven
  • High 7.0
    CVE-2015-6564

    Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-O…

    openssh openssh Debian Ubuntu
  • High —
    CVE-2014-1972

    Apache Tapestry Unsafe Object Storage

    Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.

    org.apache.tapestry:tapestry-core Maven
  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu
  • High 8.8
    CVE-2015-2502 Exploited EPSS 51%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-1642 Exploited EPSS 53%

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted docum…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2014-3576 Public exploit EPSS 13%

    Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

    activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  • High 7.5
    CVE-2015-3908

    Ansible does not verify that the server hostname matches a domain name in certificates

    Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certif…

    ansible ansible ansible Debian Ubuntu PyPI
  • High 7.4
    CVE-2015-3246 Exploited Public exploit

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mo…

    libuser libuser Debian Ubuntu
    KEV Aug 26, 2026
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 8.1
    CVE-2015-5600 Public exploit

    The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processi…

    openssh openssh Debian Ubuntu