Archive

7 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /7 April 2015 →

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

Unscored —

CVE-2015-0894

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote at…

Mar 7, 2015
Unscored —

CVE-2015-0895

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPr…

Mar 7, 2015
Unscored —

CVE-2015-1594

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 b…

Mar 7, 2015
Unscored —

CVE-2015-1597

The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in…

Mar 7, 2015
Unscored —

CVE-2015-1595

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP addre…

Mar 7, 2015
Unscored —

CVE-2015-1598

The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically …

Mar 7, 2015
Unscored —

CVE-2015-1596

The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, w…

Mar 7, 2015
Unscored —

CVE-2015-1599

The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restriction…

Mar 7, 2015
High 7.5

CVE-2015-2177 Public exploit EPSS 34%

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via cra…

Mar 7, 2015
Unscored —

CVE-2014-9369

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service …

Mar 7, 2015