Skip to content
OpenAdvisories

Archive

21 December 2015

Vulnerabilities first published on this day (UTC), newest first.

← November 2015 2015 / December /21 January 2016 →
  1. 12
  2. 219
  3. 38
  4. 4 
  5. 56
  6. 632
  7. 717
  8. 822
  9. 958
  10. 1079
  11. 1172
  12. 125
  13. 139
  14. 1411
  15. 1523
  16. 1638
  17. 1715
  18. 185
  19. 193
  20. 20 
  21. 2116
  22. 221
  23. 2313
  24. 2410
  25. 25 
  26. 262
  27. 2711
  28. 2830
  29. 299
  30. 3016
  31. 3133
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2015-4545

    EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated adminis…

  • Unscored —
    CVE-2015-7937

    Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices a…

  • Unscored —
    CVE-2015-7919 EPSS 22%

    SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of ser…

  • Unscored —
    CVE-2015-7906

    LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash back…

  • Unscored —
    CVE-2015-7413

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allow…

  • Unscored —
    CVE-2015-7907

    Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas …

  • Unscored —
    CVE-2015-7908

    Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to disco…

  • High 7.3
    CVE-2015-1772

    Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows re…

    org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  • High 7.3
    CVE-2015-1836

    High severity vulnerability that affects org.apache.hbase:hbase

    Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a …

    org.apache.hbase:hbase Maven
  • Unscored —
    CVE-2015-4998

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27…

  • Unscored —
    CVE-2015-4993

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27…

  • Unscored —
    CVE-2015-6480

    The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allow…

  • Unscored —
    CVE-2015-6481

    The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root passwo…

  • Unscored —
    CVE-2015-8458

    Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat …

  • Unscored —
    CVE-2015-5001

    IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8…

  • Unscored —
    CVE-2015-6934

    Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vC…