Archive

10 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /10 April 2015 →

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

Unscored —

CVE-2015-0271

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remo…

Mar 10, 2015
Medium —

CVE-2015-0201

Moderate severity vulnerability that affects org.springframework:spring-core

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

org.springframework:spring-core Maven

Mar 10, 2015
Unscored —

CVE-2015-2217

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2.8 allow remote attacke…

Mar 10, 2015
Unscored —

CVE-2015-2183 Public exploit

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execu…

Mar 10, 2015
Unscored —

CVE-2015-2184 Public exploit

ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls t…

Mar 10, 2015
Unscored —

CVE-2014-8112

389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when…

389-ds-base Debian

Mar 10, 2015
Unscored —

CVE-2014-8105

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog"…

389-ds-base Debian

Mar 10, 2015
Unscored —

CVE-2014-9566 Public exploit EPSS 47%

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwi…

Mar 10, 2015