Skip to content
OpenAdvisories

Archive

29 September 2015

Vulnerabilities first published on this day (UTC), newest first.

← August 2015 2015 / September /29 October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2015-0299

    Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users…

  • Unscored —
    CVE-2015-7604

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x b…

  • Unscored —
    CVE-2015-7602 Public exploit EPSS 62%

    Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (…

  • Unscored —
    CVE-2015-7319

    SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar p…

  • Unscored —
    CVE-2015-7603 Public exploit EPSS 61%

    Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via…

  • Critical 9.8
    CVE-2015-7337

    Improper Input Validation in Jupyter Notebook

    The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

    notebook ipython PyPI
  • Unscored —
    CVE-2015-7320

    Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appoin…

  • Unscored —
    CVE-2015-7601 Public exploit EPSS 59%

    Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ../…

  • Unscored —
    CVE-2015-5076

    Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arb…

  • Unscored —
    CVE-2015-5074 Public exploit

    Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php…

  • Unscored —
    CVE-2015-5075 Public exploit

    Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the auth…

  • Unscored —
    CVE-2015-0852

    Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial o…

    freeimage freeimage Debian Ubuntu
  • Unscored —
    CVE-2015-5442

    Unspecified vulnerability in HP Software Update before 5.005.002.002 allows local users to gain privileges via unknown …

  • Unscored —
    CVE-2015-5711

    TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot …

  • Unscored —
    CVE-2015-5435

    Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2.22 allows remote auth…

  • Unscored —
    CVE-2015-5950

    The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93…

    nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 nvidia-graphics-drivers nvidia-graphics-drivers-340-updates Debian Ubuntu