Archive

18 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /18 April 2015 →

All Critical High Medium Low Exploited only Public exploit

37 results · Feed

Unscored —

CVE-2015-0896

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrar…

extplorer Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-0664

The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbit…

Mar 18, 2015
Unscored —

CVE-2015-0667

The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attac…

Mar 18, 2015
Unscored —

CVE-2015-1073

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1078

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1083

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1068

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1084

The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not di…

Mar 18, 2015
Unscored —

CVE-2015-1069

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1082

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1077

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1072

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1076

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1074

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1075

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1080

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1079

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1071

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1081

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Unscored —

CVE-2015-1070

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execut…

qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu

Mar 18, 2015
Medium —

CVE-2015-2296

Python Requests Session Fixation

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

requests requests requests Debian Ubuntu PyPI

Mar 18, 2015
Unscored —

CVE-2015-2152

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when …

xen xen Debian Ubuntu

Mar 18, 2015
Unscored —

CVE-2014-8169

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environme…

autofs Debian

Mar 18, 2015
Unscored —

CVE-2015-2149

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka MyBulletinBoard) before …

Mar 18, 2015
Unscored —

CVE-2015-2335

A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the installation path via u…

Mar 18, 2015
Unscored —

CVE-2015-2334

Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) be…

Mar 18, 2015
Unscored —

CVE-2015-2333

Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote …

Mar 18, 2015
Unscored —

CVE-2015-2332

Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attacke…

Mar 18, 2015
Unscored —

CVE-2015-0124

Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4…

Mar 18, 2015
Unscored —

CVE-2015-0146

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 doe…

Mar 18, 2015
Unscored —

CVE-2015-0132

The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requireme…

Mar 18, 2015
Unscored —

CVE-2015-0128

Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4…

Mar 18, 2015
Unscored —

CVE-2015-0149

The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and priva…

Mar 18, 2015
Unscored —

CVE-2015-0178

The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applic…

Mar 18, 2015
Unscored —

CVE-2015-0125

Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.…

Mar 18, 2015
Unscored —

CVE-2014-6131

IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iF…

Mar 18, 2015
Unscored —

CVE-2014-6129

IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iF…

Mar 18, 2015