Skip to content
OpenAdvisories

Archive

2 November 2015

Vulnerabilities first published on this day (UTC), newest first.

← October 2015 2015 / November /2 December 2015 →
  1. 1 
  2. 214
  3. 310
  4. 413
  5. 523
  6. 622
  7. 72
  8. 819
  9. 924
  10. 1014
  11. 1167
  12. 129
  13. 136
  14. 148
  15. 152
  16. 1613
  17. 1721
  18. 1817
  19. 1915
  20. 203
  21. 219
  22. 223
  23. 233
  24. 2418
  25. 2519
  26. 265
  27. 272
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium —
    CVE-2015-1775

    Apache Ambari SSRF Vulnerability

    Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

    org.apache.ambari:ambari Maven
  • Unscored —
    CVE-2015-6031

    Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150…

    miniupnpc miniupnpc Debian Ubuntu
  • Unscored —
    CVE-2015-3270

    Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges vi…

  • Unscored —
    CVE-2015-3186

    Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator use…

  • Unscored —
    CVE-2015-8036

    Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote S…

  • Unscored —
    CVE-2015-8038 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befo…

  • Unscored —
    CVE-2015-8037 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befo…

  • Unscored —
    CVE-2015-8040

    The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2015-8039

    Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave m…

  • Unscored —
    CVE-2015-5308

    Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remo…

  • Unscored —
    CVE-2015-5470 EPSS 11%

    The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth)…

    pdns-recursor pdns-recursor pdns Debian Ubuntu
  • Medium —
    CVE-2015-5210

    Apache Ambari Open Redirect

    Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

    org.apache.ambari:ambari Maven
  • Unscored —
    CVE-2015-5534 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the au…

  • Unscored —
    CVE-2015-5291

    Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2…