Skip to content
OpenAdvisories

Archive

18 November 2015

Vulnerabilities first published on this day (UTC), newest first.

← October 2015 2015 / November /18 December 2015 →
  1. 1 
  2. 214
  3. 310
  4. 413
  5. 523
  6. 622
  7. 72
  8. 819
  9. 924
  10. 1014
  11. 1167
  12. 129
  13. 136
  14. 148
  15. 152
  16. 1613
  17. 1721
  18. 1817
  19. 1915
  20. 203
  21. 219
  22. 223
  23. 233
  24. 2418
  25. 2519
  26. 265
  27. 272
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2015-8090

    The Web Server component in TIBCO LogLogic Unity before 1.1.1 allows remote authenticated users to gain privileges, and…

  • Unscored —
    CVE-2015-8051

    The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vect…

  • Unscored —
    CVE-2015-8053

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote a…

  • Unscored —
    CVE-2015-8052

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote a…

  • Unscored —
    CVE-2015-5255

    Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x befor…

  • Unscored —
    CVE-2015-7942

    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it st…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-7941

    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8035

    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-de…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8023

    The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x befo…

    strongswan strongswan Debian Ubuntu
  • Medium —
    CVE-2015-5253

    Improper Access Control in Apache CXF

    The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

    org.apache.cxf:cxf-rt-rs-security-sso-saml Maven
  • Unscored —
    CVE-2015-5999 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before …

  • Critical 9.8
    CVE-2015-4852 Exploited Public exploit EPSS 95%

    The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

    openjdk-8 libcommons-collections3-java Ubuntu
    KEV Nov 3, 2021
  • Unscored —
    CVE-2015-6372

    Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating …

  • Unscored —
    CVE-2015-6373

    Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower …

  • Unscored —
    CVE-2015-6847

    The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a lo…

  • Unscored —
    CVE-2015-6357 Public exploit

    The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certifi…

  • Unscored —
    CVE-2015-6330

    Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote a…