Archive

9 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /9 April 2015 →

All Critical High Medium Low Exploited only Public exploit

52 results · Feed

Unscored —

CVE-2015-2206

libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 inc…

phpmyadmin phpmyadmin Debian Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-2244

Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary we…

Mar 9, 2015
Unscored —

CVE-2015-2242

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands v…

Mar 9, 2015
Unscored —

CVE-2015-2243

Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via director…

Mar 9, 2015
Unscored —

CVE-2014-7893 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7897 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7898 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7895 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7894 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7892 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7889 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7891 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7890 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2014-7888 EPSS 10%

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …

Mar 9, 2015
Unscored —

CVE-2015-1874

Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extensi…

Mar 9, 2015
High —

CVE-2015-0254 EPSS 12%

XXE in Apache Standard Taglibs

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.

org.apache.taglibs:taglibs-standard org.apache.taglibs:taglibs-standard-impl jakarta-taglibs-standard Ubuntu Maven

Mar 9, 2015
Unscored —

CVE-2015-1165

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sens…

request-tracker4 Debian

Mar 9, 2015
Unscored —

CVE-2015-1464

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS fe…

request-tracker4 Debian

Mar 9, 2015
Unscored —

CVE-2015-2093

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers …

Mar 9, 2015
Unscored —

CVE-2015-2063

Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in …

unace unace Debian Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-2061

Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code vi…

Mar 9, 2015
Unscored —

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eD…

Mar 9, 2015
Unscored —

CVE-2015-2094 Public exploit EPSS 14%

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to…

Mar 9, 2015
Unscored —

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR …

Mar 9, 2015
Unscored —

CVE-2015-2092

The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute…

Mar 9, 2015
Unscored —

CVE-2015-2097 Public exploit EPSS 23%

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary …

Mar 9, 2015
Unscored —

CVE-2014-3691

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL ce…

Mar 9, 2015
Unscored —

CVE-2014-9472

The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote att…

request-tracker4 Debian

Mar 9, 2015
Unscored —

CVE-2015-1219

Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google …

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1226

The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before…

chromium-browser Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1228

The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1216

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCus…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1223

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used i…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1231

Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service …

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1224

The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Googl…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1229

net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authenti…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1232

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chro…

chromium-browser Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1225

PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-boun…

chromium-browser Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1213

The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chro…

chromium-browser oxide-qt Ubuntu

Mar 9, 2015
Unscored —

CVE-2015-1217

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings …

chromium-browser oxide-qt Ubuntu

Mar 9, 2015