Skip to content
OpenAdvisories

Archive

29 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /29 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2015-7859

    The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attacker…

  • Unscored —
    CVE-2015-7899

    The com_content component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to ob…

  • Medium —
    CVE-2015-7713

    OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

    OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

    nova nova nova Debian Ubuntu PyPI
  • Unscored —
    CVE-2015-7858 Public exploit EPSS 86%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Unscored —
    CVE-2015-7857 Public exploit EPSS 94%

    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.…

  • Unscored —
    CVE-2015-7297 Public exploit Scanner template EPSS 100%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Unscored —
    CVE-2015-3230

    389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference w…

    389-ds-base 389-ds-base Debian Ubuntu
  • Unscored —
    CVE-2015-5955

    ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote insta…

  • Critical 9.8
    CVE-2015-5285 Public exploit

    Kallithea CRLF injection vulnerability

    CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

    kallithea PyPI
  • Unscored —
    CVE-2015-5292

    Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Servi…

    sssd Debian
  • Unscored —
    CVE-2015-4997

    IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted req…

  • Unscored —
    CVE-2015-4994

    Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote atta…

  • Unscored —
    CVE-2015-6006

    The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attac…

  • Unscored —
    CVE-2015-2901

    Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute …

  • Unscored —
    CVE-2015-2900 Public exploit

    The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to…

  • Unscored —
    CVE-2015-2898

    Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to e…

  • Unscored —
    CVE-2015-2899

    Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.…

  • Unscored —
    CVE-2015-5040

    Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote atta…

  • Unscored —
    CVE-2015-5668

    SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2015-5669

    Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequen…

  • Unscored —
    CVE-2015-5671

    Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arb…

  • Unscored —
    CVE-2015-5670

    Cross-site scripting (XSS) vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inje…