Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
March

CVEs published in March 2015

430 vulnerabilities, 48 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe Windows Registry Virtualization feature in the kernel in Microsoft Windows Vista SP2, Windows...CVE-2015-00737.2 HighMarch 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-0056EPSS 15.5%9.3 HighMarch 11, 2015
microsoft internet explorer, vbscript +1 morevbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11...CVE-2015-0032EPSS 22.3%9.3 HighMarch 11, 2015
microsoft windows server 2008, windows server 2012, windows 2003 server +2 moreThe NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1,...CVE-2015-0005EPSS 18.6%4.3 MediumMarch 11, 2015
gdm SUSESecurity update for gdmSUSE-SU-2015:0803-1Fix availableNo scoreMarch 11, 2015
apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1...CVE-2015-1067EPSS 19.6%4.3 MediumMarch 11, 2015
gosa Debiangosa - regression updateDLA-115-2Fix availableNo scoreMarch 11, 2015
pngcrush project pngcrushOff-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84...CVE-2015-2158Fix available7.8 HighMarch 10, 2015
myupb ultimate php boardMultiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2...CVE-2015-22174.3 MediumMarch 10, 2015
ajsquare zeuscartZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to...CVE-2015-2184Public exploit5.0 MediumMarch 10, 2015
zeuscartMultiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote...CVE-2015-2183Public exploit7.5 HighMarch 10, 2015
redhat openstackThe log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard...CVE-2015-0271Fix available4.0 MediumMarch 10, 2015
pivotal software spring frameworkModerate severity vulnerability that affects org.springframework:spring-coreCVE-2015-0201Fix available5.0 MediumMarch 10, 2015
solarwinds orion ip address manager, orion netflow traffic analyzer, orion network configuration manager +5 more +7 moreMultiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx...CVE-2014-9566Public exploitEPSS 46.7%7.5 HighMarch 10, 2015
fedoraproject 389 directory server, fedora +1 more389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores ...CVE-2014-8112Fix available4.0 MediumMarch 10, 2015
fedoraproject 389 directory server, fedora +1 more389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access...CVE-2014-8105Fix available5.0 MediumMarch 10, 2015
apache mod-gnutlsThe authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate...CVE-2015-2091Fix available5.0 MediumMarch 10, 2015
xen, fedoraproject fedora +1 moreXen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM...CVE-2015-2152Fix available1.9 LowMarch 9, 2015
xen, debian linux, fedoraproject fedora +2 moreThe x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for...CVE-2015-2151Fix available7.2 HighMarch 9, 2015
xen, debian linux, fedoraproject fedora +2 moreThe HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data...CVE-2015-2045Fix available2.1 LowMarch 9, 2015
xenThe emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly...CVE-2015-2044Fix available2.1 LowMarch 9, 2015
firefox Ubuntufirefox regressionUSN-2505-2Fix availableNo scoreMarch 9, 2015
libssh2, debian linux, fedoraproject fedora +2 moreThe kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of...CVE-2015-1782Fix available6.8 MediumMarch 9, 2015
webshophun webshop hunMultiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers...CVE-2015-22444.3 MediumMarch 9, 2015
webshophun webshop hunDirectory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have...CVE-2015-22437.5 HighMarch 9, 2015
webshophun webshop hunMultiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute...CVE-2015-22427.5 HighMarch 9, 2015
phpmyadmin, fedoraproject fedora +1 morelibraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3...CVE-2015-2206Fix available5.0 MediumMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7898EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7897EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7895EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7894EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7893EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7892EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7891EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7890EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7889EPSS 10.3%10.0 HighMarch 9, 2015
hp ole point of sale driverThe OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote...CVE-2014-7888EPSS 10.3%10.0 HighMarch 9, 2015
cfdbplugin contact form dbCross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form...CVE-2015-18746.8 MediumMarch 9, 2015
apache xerces-c\+\+, debian linux, fedoraproject fedora +2 moreinternal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial...CVE-2015-0252Public exploitFix availableEPSS 38.7%5.0 MediumMarch 9, 2015
webgate embedded standard protocol sdkMultiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers...CVE-2015-2097Public exploitEPSS 22.9%7.5 HighMarch 9, 2015
webgateinc edvr managerUse-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX...CVE-2015-20966.8 MediumMarch 9, 2015
webgateinc edvr managerHeap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX...CVE-2015-20956.8 MediumMarch 9, 2015
webgateinc winrdsStack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS...CVE-2015-2094Public exploitEPSS 14.0%7.5 HighMarch 9, 2015
webgateinc webeyeaudioStack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control...CVE-2015-20936.8 MediumMarch 9, 2015
agilent technologies feature extractionThe AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows...CVE-2015-20927.5 HighMarch 9, 2015
ptc creo viewHeap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to...CVE-2015-20617.5 HighMarch 9, 2015
theforeman foreman, redhat openstack +1 moreSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...CVE-2014-3691Fix available7.5 HighMarch 9, 2015
google chromeGoogle Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider...CVE-2015-2239Fix available4.3 MediumMarch 9, 2015
google chromeArray index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi...CVE-2015-1232Fix available7.5 HighMarch 9, 2015
google chromeThe DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc...CVE-2015-1226Fix available5.0 MediumMarch 9, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open