CVEs published April 17, 2015
11 CVEs were published on April 17, 2015: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 11
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- keystonemiddleware · python-keystoneclient
- 1
- swift
- 1
High 1
Medium, low and unrated 10
- CVE-2015-0845Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows…
- CVE-2015-1318The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted…
- CVE-2015-1852The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification…keystonemiddleware · python-keystoneclient
- CVE-2015-1856OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest…swift
- CVE-2015-0530Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before…
- CVE-2015-0691A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary…
- CVE-2015-0695Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group…
- CVE-2015-0700Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control…
- CVE-2015-0937Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before…
- CVE-2015-0938search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass…