Archive
March 2015
Vulnerabilities first published in this month (UTC), newest first.
453 results · Feed
-
Critical 9.8
Dulwich Buffer Overflow when handling pack files
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
-
Unscored —
Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) vi…
-
Unscored —
FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitr…
-
Unscored —
FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbit…
-
Unscored —
The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption…
-
Unscored —
eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary fi…
-
Unscored —
Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remo…
-
Unscored —
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remo…
-
Critical 9.8
Dulwich Arbitrary code execution via commit with directory path starting with .git
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.
-
Critical 9.8
Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.
-
Unscored —
Cross-site scripting (XSS) vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the duwasai flashy theme 1.3 and earlier for WordPress allows remote attack…
-
Unscored —
Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authentica…
-
Unscored —
Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obt…
-
Unscored —
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 al…
-
Unscored —CVE-2014-7876 EPSS 13%
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Ma…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hi…
-
Unscored —
Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000…
-
Unscored —
Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platfo…
-
Unscored —CVE-2014-9708 EPSS 56%
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer d…
-
Unscored —
The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows rem…
-
Unscored —
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to e…
-
Unscored —
MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 s…
-
Unscored —
The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when …
-
Unscored —
The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary post…
-
Unscored —
The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote …
-
Unscored —
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory …
-
Unscored —
DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allow…
-
Unscored —CVE-2015-2789 Public exploit
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6…
-
High —
Slim vulnerable to PHP object injection
Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.
-
Unscored —
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x bef…
-
Unscored —
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate …
-
Unscored —
Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP…
-
Unscored —
Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32…
-
Unscored —
The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and …
-
Unscored —CVE-2015-2301 EPSS 15%
Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before…
-
Unscored —CVE-2015-2787 EPSS 12%
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…
-
Unscored —CVE-2015-2331 EPSS 27%
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extensi…
-
Unscored —
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 spec…
-
Unscored —CVE-2014-9709 EPSS 15%
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allo…