Archive

24 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /24 March 2015 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Unscored —

CVE-2015-2071 Public exploit

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows …

Feb 24, 2015
Unscored —

CVE-2015-2065 Public exploit EPSS 40%

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin …

Feb 24, 2015
Unscored —

CVE-2015-2070 Public exploit

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitr…

Feb 24, 2015
Medium —

CVE-2015-2067 Public exploit Scanner template EPSS 38%

MAGMI plugin for Magento Server Directory Traversal

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

dweeves/magmi Packagist

Feb 24, 2015
Medium —

CVE-2015-2068 Public exploit Scanner template EPSS 14%

MAGMI cross-site scripting (XSS)

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magm…

dweeves/magmi Packagist

Feb 24, 2015
Unscored —

CVE-2015-0555 Public exploit

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remot…

Feb 24, 2015
Unscored —

CVE-2015-0240 Public exploit EPSS 88%

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.…

samba samba Debian Ubuntu

Feb 24, 2015