Skip to content
OpenAdvisories

Archive

November 2015

Vulnerabilities first published in this month (UTC), newest first.

← October 2015 2015 / November December 2015 →
  1. 1 
  2. 214
  3. 310
  4. 413
  5. 523
  6. 622
  7. 72
  8. 819
  9. 924
  10. 1014
  11. 1167
  12. 129
  13. 136
  14. 148
  15. 152
  16. 1613
  17. 1721
  18. 1817
  19. 1915
  20. 203
  21. 219
  22. 223
  23. 233
  24. 2418
  25. 2519
  26. 265
  27. 272
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2015-5317 Exploited EPSS 23%

    Jenkins discloses project names via fingerprints

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

    org.jenkins-ci.main:jenkins-core Maven
    KEV May 12, 2023
  • High 8.1
    CVE-2015-5306

    Injection vulnerability that affects ironic-discoverd

    OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

    ironic-inspector ironic-inspector python-ironic-inspector-client Debian PyPI
  • High 8.1
    CVE-2015-7809

    Twig remote code execution in templates

    The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.

    twig/twig Packagist