CVEs published in March 2015
430 vulnerabilities, 48 critical, 1 exploited.
- opensslThe ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that...4.3 Medium
- opensslThe ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa...4.3 Medium
- opensslThe dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate...5.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerability3.5 Low
- moodleMoodle allows attackers to bypass a forced-password-change requirement4.0 Medium
- moodleMoodle does not consider the moodle/tag:flag capability4.0 Medium
- moodleMoodle allows attackers to obtain sensitive course information4.3 Medium
- moodleMoodle XSS Vulnerability3.5 Low
- moodleMoodle allows attackers to cause a denial of service6.8 Medium
- moodleMoodle allows attackers to extract archives to arbitrary directories4.0 Medium
- moodleMoodle allows attackers to obtain sensitive personal-contact and unread-message-count information4.0 Medium
- extplorerMultiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote...4.3 Medium
- cisco content services switch 11500 firmwareThe Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and...5.0 Medium
- cisco anyconnect secure mobility clientThe IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local...4.3 Medium
- apple safari, iphone os +1 moreThe user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x...5.0 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, itunes +1 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +2 more +4 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- mybbA JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the...5.0 Medium
- mybbCross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB ...6.8 Medium
- mybbCross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard)...4.3 Medium
- mybbCross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4...4.3 Medium
- mybbMultiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka...3.5 Low
- ibm libertyThe Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not...4.3 Medium
- ibm api managementThe developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access...5.5 Medium
- ibm content collectorIBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3...2.1 Low
- ibm rational doors next generation, rational requirements composer +1 moreThe XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2...7.8 High
- ibm rational quality managerCross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1...3.5 Low
- ibm rational doors next generation, rational requirements composer +1 moreCross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7...3.5 Low
- ibm rational quality managerCross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1...3.5 Low
- ibm rational collaborative lifecycle management, rational doors next generation, rational quality manager +2 more +4 moreIBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x...4.0 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational quality manager +2 more +4 moreIBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x...5.5 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows...6.8 Medium
- apache batik, canonical ubuntu linux, redhat jboss enterprise brms platform +2 moreImproper Input Validation in Apache Batik6.4 Medium
- file project file, php, debian linux +2 morereadelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...7.5 High
- wpmlCross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows...4.3 Medium
- wpmlSQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers...7.5 High
- yoast wordpress seoMultiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table...6.8 Medium
- Show moreLoading…