Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

← August 2015 2015 / September October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    CVE-2015-6584

    DataTable Vulnerable to Cross-Site Scripting

    Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

    datatables.js datatables datatables/datatables Debian npm Packagist
  • High 7.8
    CVE-2015-2545 Exploited EPSS 86%

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a …

    KEV Mar 3, 2022
  • High 8.2
    CVE-2015-2546 Exploited · Ransomware Public exploit EPSS 10%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

    KEV Mar 15, 2022
  • High —
    CVE-2015-5688 Scanner template

    Directory Traversal in geddy

    Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

    geddy npm