CVEs published in March 2015
430 vulnerabilities, 48 critical, 1 exploited.
- yoast wordpress seoMultiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress...6.5 Medium
- cisco anyconnect secure mobility clientThe Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows...6.6 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement...6.6 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain...7.2 High
- tcpdump, debian linux, fedoraproject fedora +2 more +4 moreThe force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service ...7.5 High
- tcpdumpThe osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2...5.0 Medium
- tcpdumpThe rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2...5.0 Medium
- tcpdumpInteger signedness error in the mobility_opt_print function in the IPv6 mobility printer in...7.5 High
- linux kernelThe pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux...7.2 High
- linux kernelThe filesystem implementation in the Linux kernel before 3.13 performs certain operations on...4.9 Medium
- python requests, canonical ubuntu linux, mageia project mageia +2 morePython Requests Session Fixation6.8 Medium
- linux kernelThe XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during...7.2 High
- hp operations manager i management packHP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS...6.8 Medium
- schneider-electric pelco ds-nvBuffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows...7.5 High
- scadaengine bacnet opc serverThe SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote...7.5 High
- scadaengine bacnet opc serverFormat string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet...9.0 High
- scadaengine bacnet opc serverHeap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1...9.0 High
- elipse e3Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll...6.9 Medium
- cisco telepresence server softwareCisco Virtual TelePresence Server Software does not properly restrict use of the serial port,...7.2 High
- cimon cmnview, ultimateaccess +1 moreUntrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before...6.9 Medium
- schneider-electric device type managerStack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric...6.9 Medium
- microfocus arcsight enterprise security managerMultiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c...10.0 High
- hp arcsight loggerMultiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and...9.0 High
- ge hydran m2, hydran m2, containing the 17046 ethernet option +1 moreGE Hydran M2 Predictable Value Range from Previous Values6.4
- telerik analytics monitor libraryMultiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll...6.9 Medium
- cisco intrusion prevention systemRace condition in the TLS implementation in MainApp in the management interface in Cisco...7.1 High
- cisco telepresence conductor, expressway software, telepresence video communication server software +2 moreThe management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco...10.0 High
- cisco telepresence conductor, expressway software, telepresence video communication server software +2 moreThe Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication...7.8 High
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote...3.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8...3.5 Low
- ibm websphere commerceIBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary...5.0 Medium
- ibm rational quality managerCross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7...3.5 Low
- ibm rational team concertCross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6...3.5 Low
- ibm rational team concertCross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6...3.5 Low
- ibm websphere portalCross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1...6.8 Medium
- ibm rational quality managerCross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 2.x and 3.x before...3.5 Low
- wotlab community galleryCross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26...4.3 Medium
- betster project betsterMultiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote...7.5 High
- fedoraproject fedora, opensuse, suse opensuse osc +2 moreosc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters...7.5 High
libarchiveMageiaUpdated libarchive packages fix security vulnerabilityNo score- digia qt, fedoraproject fedora, opensuse +2 moreThe BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract...5.0 Medium
- ubuntu upstart, vivid +1 moreThe logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2...7.2 High
- djangoproject djangoDjango Cross-site Scripting Vulnerability4.3 Medium
- avinu phpmoadminThe saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute...7.5 High
- apple mac os xOff-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute...10.0 High
- apple iphone os, mac os x +1 moreMultiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10...5.4 Medium
- apple iphone osSpringboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended...1.9 Low
- apple iphone osCoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL...7.8 High
- apple iphone os, tvos +1 moreMobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk...5.0 Medium
- apple iphone os, mac os x, tvos +2 moreIOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows...9.3 High
- Show moreLoading…