Skip to content
OpenAdvisories

Archive

25 November 2015

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2015-5317 Exploited EPSS 23%

    Jenkins discloses project names via fingerprints

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

    KEV May 12, 2023
  • High 8.1

    Injection vulnerability that affects ironic-discoverd

    OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.