Skip to content
OpenAdvisories

Archive

16 December 2015

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2015-8562 Public exploit Scanner template EPSS 98%

    Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arb…

  • Unscored —
    CVE-2015-8358 Public exploit

    Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators …

  • Unscored —
    CVE-2015-8357 Public exploit

    Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users …

  • High —
    CVE-2015-8566 Public exploit

    Joomla! Framework Remote Code Injection Vulnerability

    The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

  • Unscored —
    CVE-2015-7214 Public exploit

    Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy vi…