CVEs published April 18, 2015
4 CVEs were published on April 18, 2015: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 4
- CVE-2015-0967Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML v
- CVE-2015-0968Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code
- CVE-2015-0969SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.
- CVE-2015-0970Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary u