Skip to content
OpenAdvisories

Archive

December 2015

Vulnerabilities first published in this month (UTC), newest first.

← November 2015 2015 / December January 2016 →
  1. 12
  2. 219
  3. 38
  4. 4 
  5. 56
  6. 632
  7. 717
  8. 822
  9. 958
  10. 1079
  11. 1172
  12. 125
  13. 139
  14. 1411
  15. 1523
  16. 1638
  17. 1715
  18. 185
  19. 193
  20. 20 
  21. 2116
  22. 221
  23. 2313
  24. 2410
  25. 25 
  26. 262
  27. 2711
  28. 2830
  29. 299
  30. 3016
  31. 3133
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2015-2913

    OrientDB Server Community Edition uses insufficiently random values to generate session IDs

    server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it …

    com.orientechnologies:orientdb-server Maven
  • Medium 6.1
    CVE-2015-2918

    OrientDB Studio web management interface is vulnerable to clickjacking attacks

    The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

    com.orientechnologies:orientdb-studio Maven
  • Medium —
    CVE-2015-7499

    Heap-based buffer overflow in nokogiri

    Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems