Skip to content
OpenAdvisories

Archive

16 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /16 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2015-7683

    Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administr…

  • Unscored —
    CVE-2015-7856

    OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access …

  • Unscored —
    CVE-2015-7682

    Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for Wo…

  • Unscored —
    CVE-2015-7377 Scanner template

    Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for …

  • Low —
    CVE-2015-1808

    Jenkins Vulnerable to Denial of Service (DoS)

    Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1810

    Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

    The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1812

    Jenkins Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1806

    Jenkins allows for Privilege Escalation by Remote Authenticated Users

    The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Low —
    CVE-2015-1813

    Jenkins allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2015-1807

    Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with…

  • Medium —
    CVE-2015-1814

    Jenkins allows for Privilege Escalation by Remote Authenticated Users

    The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2015-5742

    VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log fil…

  • Unscored —
    CVE-2014-6451

    J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2014-6450

    Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/…

  • Unscored —
    CVE-2014-6449

    Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X…

  • Unscored —
    CVE-2015-4948

    netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain p…

  • Unscored —
    CVE-2015-6333

    Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involv…

  • Unscored —
    CVE-2015-6003

    Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP i…

  • Unscored —
    CVE-2015-6334

    Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial o…

  • Unscored —
    CVE-2015-5660

    Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authent…

    extplorer Ubuntu
  • Unscored —
    CVE-2013-7445

    The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu