Skip to content
OpenAdvisories

Archive

4 November 2015

Vulnerabilities first published on this day (UTC), newest first.

← October 2015 2015 / November /4 December 2015 →
  1. 1 
  2. 214
  3. 310
  4. 413
  5. 523
  6. 622
  7. 72
  8. 819
  9. 924
  10. 1014
  11. 1167
  12. 129
  13. 136
  14. 148
  15. 152
  16. 1613
  17. 1721
  18. 1817
  19. 1915
  20. 203
  21. 219
  22. 223
  23. 233
  24. 2418
  25. 2519
  26. 265
  27. 272
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2015-7253

    The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted ser…

  • Unscored —
    CVE-2015-7244

    The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently …

  • Unscored —
    CVE-2015-7650

    Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015…

  • Unscored —
    CVE-2015-4927

    The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 befo…

  • Unscored —
    CVE-2015-6030

    HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 us…

  • Unscored —
    CVE-2015-6867

    The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers t…

  • Unscored —
    CVE-2015-6356

    Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to in…

  • Unscored —
    CVE-2015-6355

    The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain p…

  • Unscored —
    CVE-2015-6029

    HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier f…

  • Unscored —
    CVE-2015-2902

    HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-…

  • Unscored —
    CVE-2015-2903

    The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for…

  • Unscored —
    CVE-2015-5021

    IBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to bypass intended job-exec…

  • Unscored —
    CVE-2015-5673

    eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper …