Archive
16 December 2015
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Unscored —
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arb…
-
Unscored —CVE-2015-8358 Public exploit
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators …
-
Unscored —CVE-2015-8357 Public exploit
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users …
-
High —CVE-2015-8566 Public exploit
Joomla! Framework Remote Code Injection Vulnerability
The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.
-
Unscored —CVE-2015-7214 Public exploit
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy vi…