CVEs published in March 2015
430 vulnerabilities, 48 critical, 1 exploited.
- ibm general parallel file systemThe mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5...4.9 Medium
- ibm general parallel file systemIBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before...10.0 High
- ibm general parallel file systemIBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before...7.2 High
- ibm business process managerCross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process...4.3 Medium
opensslDebianopenssl - regression updateNo score- emc documentum xcelerated management systemEMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service...2.1 Low
- ibm powervcIBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware...4.3 Medium
- ibm powervcpowervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an...2.1 Low
- ibm business process manager, websphere application server +1 moreCross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5...4.3 Medium
- ibm business process managerCross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager ...4.3 Medium
- ibm business process managerMultiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process...3.5 Low
- asus rt-g32 firmwareMultiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0...4.3 Medium
- metalgenix genixcmsCross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote...6.8 Medium
- genixcmsMultiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers...7.5 High
- genixcmsMultiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow...4.3 Medium
- ocportalMultiple cross-site scripting (XSS) vulnerabilities in ocPortal before 9.0.17 allow remote...3.5 Low
- asus rt-g32 firmwareCross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6...6.8 Medium
- s9y serendipityCross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity...3.5 Low
- codologic codoforumThe sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory...5.0 Medium
- libtiff, debian linux +1 moreThe NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of...6.5 Medium
- inetc project inetcThe Inetc plugin for Nullsoft Scriptable Install System (NSIS), as used in CERT/CC Failure...4.3 Medium
tzdataDebiantzdata - new upstream versionNo score- the tor project torTor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection...7.5 High
- the tor project torbuf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected...7.5 High
- mozilla firefox, firefox esr, seamonkey +2 moreMozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow...7.5 High
- mozilla firefox, firefox esr, seamonkey +2 moreThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...6.8 Medium
- futomi mp form mail cgifutomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to...7.5 High
- cisco spa300 firmware, spa500 firmware, spa 301 1 line ip phone +12 more +14 moreThe default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does...6.4 Medium
- cisco iosThe Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S...6.4 Medium
- mongodb, fedoraproject fedora +1 moreMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Medium
- mercurial, opensuse +1 moreMercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command7.5 High
- projectsendSQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote...6.5 Medium
- vastal phpvidSQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote...7.5 High
- web-dorado ecommerce wdMultiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component...7.5 High
- cisco videoscape delivery system for internet streamerThe DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2...5.0 Medium
- cisco webex meetings serverCross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings...4.3 Medium
- php, apple mac os x, oracle linux +8 more +10 moreThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...6.8 Medium
- drupal, debian linux +1 moreOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before...6.1 Medium
- drupal, debian linux +1 moreOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers...6.1 Medium
- drupal, debian linux +1 moreDrupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the...3.5 Low
- php, apple mac os x, opensuse +6 more +8 moreThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...5.0 Medium
- nih libzip, php, debian linux +2 more +4 moreInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...7.5 High
- mybbThe cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding...7.5 High
- alkacon opencmsAlkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters4.3 Medium
- mikrotik routerosCross-site request forgery (CSRF) vulnerability in MikroTik RouterOS 5.0 and earlier allows...6.8 Medium
- superwebmailerCross-site scripting (XSS) vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190...4.3 Medium
- fortinet single sign onStack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build...7.5 High
- opensslThe ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when...2.6 Low
- opensslThe sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to...5.0 Medium
- opensslThe multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0...5.0 Medium
- Show moreLoading…