Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

← August 2015 2015 / September October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-6938

    Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

    Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was o…

    notebook ipython ipython Debian PyPI
  • Medium —
    CVE-2015-6830 Public exploit EPSS 10%

    phpMyAdmin ReCaptcha bypass

    libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct resp…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Medium —
    CVE-2015-3241

    OpenStack Nova instance migration process does not stop when instance is deleted

    OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by r…

    nova nova nova Debian Ubuntu PyPI
  • Medium 4.3
    CVE-2015-5250

    Denial of Service in OpenShift Origin

    The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

    github.com/openshift/origin Go
  • Medium —
    CVE-2015-5612

    October CMS XSS In Caption Tag of Profile

    Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

    october/october Packagist