CVEs published in March 2015
430 vulnerabilities, 48 critical, 1 exploited.
- dokuwikiDokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the...6.5 Medium
- ninjaforms ninja formsMultiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for...4.3 Medium
- magic hills wonderplugin audio playerMultiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in...4.3 Medium
- ninjaforms ninja formsUnspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown...7.5 High
- photocati media photocratiSQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows...7.5 High
- services single sign-on server helper project single sign-on server helperOpen redirect vulnerability in the Services single sign-on server helper ...5.8 Medium
- netcatNetCat 5.01 and earlier allows remote attackers to obtain the installation path via the...5.0 Medium
- maroyaka relay novel project relay novelCross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote...4.3 Medium
- maroyaka image album project image albumCross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote...4.3 Medium
- maroyaka simple board project simple boardCross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote...4.3 Medium
- libarchive, canonical ubuntu linux, opensuse +2 moreAbsolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote...6.4 Medium
- dlguardDLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index...5.0 Medium
- fortinet fortimailCross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the...4.3 Medium
linuxUbuntulinux vulnerabilitiesNo score- sharelatexCommon LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows...6.5 Medium
- sharelatexAbsolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid...3.5 Low
- cisco network analysis module firmwareCross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM)...4.3 Medium
- wonderplugin audio playerMultiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for...6.5 Medium
- beehive forum forumMultiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4...4.3 Medium
- entity api project apiCross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal...3.5 Low
- web-dorado spider calendarSQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers...7.5 High
- wp media cleaner project media cleanerMultiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for...4.3 Medium
- digitalnature fusionUnrestricted file upload vulnerability in the fusion_options function in functions.php in the...6.5 Medium
- bestwebsoft google captchaThe BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote...5.0 Medium
- bestwebsoft captchaThe BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the...5.0 Medium
- hp xp7 global link manager software, xp p9000 replication manager, xp p9000 tiered storage manager +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition...4.3 Medium
- automount project automount, opensuse, redhat enterprise linux desktop +3 more +5 moreautomount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's...4.4 Medium
- ibm notes traveler companionThe IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as...4.3 Medium
- winace unaceInteger overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a...4.3 Medium
- gnu gnupg, libgcrypt, debian linux +2 moreThe mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to...5.9 Medium