Archive

December 2015

Vulnerabilities first published in this month (UTC), newest first.

← November 2015 2015 / December January 2016 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low —

CVE-2015-8476

SMTP Injection in PHPMailer

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand funct…

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Dec 16, 2015
Low 2.8

CVE-2015-8213

Django settings leak in date template filter

The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…

python-django django python-django Debian Ubuntu PyPI

Dec 7, 2015
Low 3.1

CVE-2015-8124

Symfony Session Fixation Vulnerability

Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.

symfony/symfony symfony symfony/security-http symfony/security Debian Packagist

Dec 7, 2015