Skip to content
OpenAdvisories

Archive

August 2015

Vulnerabilities first published in this month (UTC), newest first.

← July 2015 2015 / August September 2015 →
  1. 118
  2. 2 
  3. 318
  4. 432
  5. 53
  6. 61
  7. 71
  8. 810
  9. 9 
  10. 10 
  11. 1113
  12. 1220
  13. 138
  14. 1455
  15. 1540
  16. 16132
  17. 174
  18. 1850
  19. 1919
  20. 2029
  21. 21 
  22. 2215
  23. 2314
  24. 2445
  25. 258
  26. 2612
  27. 2716
  28. 284
  29. 295
  30. 303
  31. 3144
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2015-3221 Public exploit EPSS 11%

    OpenStack Neutron Improper Input Validation vulnerability

    OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

    neutron neutron Debian PyPI
  • Medium —
    CVE-2015-5161 Public exploit

    ZendXml and Zend Framework contain XXE and XEE Vulnerabilities

    The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external e…

    zendframework/zendframework1 zendframework/zendframework zendframework/zendxml Packagist
  • Medium —
    CVE-2015-1830 Public exploit EPSS 84%

    Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

    org.apache.activemq:activemq-client Maven
  • Medium —
    CVE-2015-5531 Public exploit EPSS 95%

    Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

    org.elasticsearch:elasticsearch Maven
  • Medium 6.6
    CVE-2015-1769 Exploited Public exploit

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…

    KEV May 25, 2022