CVEs published April 17, 2015
11 CVEs were published on April 17, 2015: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 11
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- python-keystoneclient · keystonemiddleware
- 1
- swift
- 1
High 1
Medium, low and unrated 10
- CVE-2015-0845Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remo
- CVE-2015-1318The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport
- CVE-2015-1852The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verificatpython-keystoneclient · keystonemiddleware
- CVE-2015-1856OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest versswift
- CVE-2015-0530Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2
- CVE-2015-0691A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary comman
- CVE-2015-0695Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group vi
- CVE-2015-0700Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Se
- CVE-2015-0937Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEA
- CVE-2015-0938search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intende