Skip to content
OpenAdvisories

Archive

15 February 2016

Vulnerabilities first published on this day (UTC), newest first.

← January 2016 2016 / February /15 March 2016 →
  1. 121
  2. 2 
  3. 312
  4. 42
  5. 52
  6. 66
  7. 720
  8. 827
  9. 94
  10. 1071
  11. 111
  12. 1214
  13. 1314
  14. 146
  15. 1530
  16. 1613
  17. 1727
  18. 1814
  19. 196
  20. 209
  21. 214
  22. 2227
  23. 236
  24. 243
  25. 257
  26. 262
  27. 278
  28. 2812
  29. 2912
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-8795

    Improper Neutralization of Input During Web Page Generation in Apache Solr

    Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp…

    org.apache.solr:solr-core Maven
  • Medium 6.1
    CVE-2015-8797

    Improper Neutralization of Input During Web Page Generation in Apache Solr

    Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI.

    org.apache.solr:solr-core Maven
  • Medium 6.1
    CVE-2015-8796

    Apache Solr Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL.

    org.apache.solr:solr Maven