12 March 2015

20 results · Feed

• Unscored —
  CVE-2015-2237 Public exploit

  Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary…

  Mar 12, 2015
• Unscored —
  CVE-2015-2275 Public exploit

  Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to …

  Mar 12, 2015
• Unscored —
  CVE-2015-2045

  The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which all…

  xen xen Debian Ubuntu
  Mar 12, 2015
• Unscored —
  CVE-2015-2044

  The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which …

  xen xen Debian Ubuntu
  Mar 12, 2015
• Unscored —
  CVE-2015-2150

  Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, w…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 12, 2015
• Medium 6.1
  CVE-2015-2241

  Django Cross-site Scripting Vulnerability

  Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrat…

  python-django django Debian PyPI
  Mar 12, 2015
• Unscored —
  CVE-2015-2285 Public exploit

  The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubunt…

  Mar 12, 2015
• Unscored —
  CVE-2015-2208 Public exploit EPSS 61%

  The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via sh…

  Mar 12, 2015
• Unscored —
  CVE-2015-2151

  The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register o…

  xen xen Debian Ubuntu
  Mar 12, 2015
• Unscored —
  CVE-2015-0524

  SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE)…

  Mar 12, 2015
• Unscored —
  CVE-2015-0521

  Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration…

  Mar 12, 2015
• Unscored —
  CVE-2015-0522

  Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration…

  Mar 12, 2015
• Unscored —
  CVE-2015-0523

  EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow re…

  Mar 12, 2015
• Unscored —
  CVE-2015-0525

  The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote at…

  Mar 12, 2015
• Unscored —
  CVE-2015-1065

  Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-mi…

  Mar 12, 2015
• Unscored —
  CVE-2015-1066

  Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to execute arbitrary code in a p…

  Mar 12, 2015
• Unscored —
  CVE-2015-1061

  IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbi…

  Mar 12, 2015
• Unscored —
  CVE-2015-1064

  Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement …

  Mar 12, 2015
• Unscored —
  CVE-2015-1062

  MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which …

  Mar 12, 2015
• Unscored —
  CVE-2015-1063

  CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference an…

  Mar 12, 2015