Skip to content
OpenAdvisories

Archive

24 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /24 April 2015 →
  1. 1 
  2. 25
  3. 310
  4. 45
  5. 59
  6. 611
  7. 710
  8. 87
  9. 952
  10. 108
  11. 1148
  12. 1220
  13. 1325
  14. 1412
  15. 151
  16. 1610
  17. 177
  18. 1837
  19. 1918
  20. 208
  21. 213
  22. 221
  23. 238
  24. 2422
  25. 2512
  26. 2624
  27. 2722
  28. 283
  29. 2912
  30. 3023
  31. 3120
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Medium —
    CVE-2015-0250 EPSS 17%

    Improper Input Validation in Apache Batik

    XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

    batik batik org.apache.xmlgraphics:batik Debian Ubuntu Maven
  • Unscored —
    CVE-2015-0252 Public exploit EPSS 39%

    internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentati…

    xerces-c xerces-c Debian Ubuntu
  • Unscored —
    CVE-2015-0261

    Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-0282

    GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the cer…

    gnutls26 Ubuntu
  • Unscored —
    CVE-2015-1388

    The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access…

  • Unscored —
    CVE-2015-2153 Public exploit EPSS 18%

    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers …

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2154

    The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2265

    The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execu…

    cups-filters cups-filters Debian Ubuntu
  • Unscored —
    CVE-2015-2155

    The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly exe…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2284 Public exploit EPSS 73%

    userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privil…

  • Unscored —
    CVE-2015-0158

    Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 through 8.…

  • Unscored —
    CVE-2015-0199

    The mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.…

  • Unscored —
    CVE-2015-0197

    IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local u…

  • Unscored —
    CVE-2015-0198

    IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cip…

  • Unscored —
    CVE-2015-0105

    Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.…

  • Unscored —
    CVE-2015-0103

    Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 thr…

  • Unscored —
    CVE-2015-0818

    Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to by…

    firefox Ubuntu
  • Unscored —
    CVE-2015-0817

    The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1…

    firefox Ubuntu
  • Unscored —
    CVE-2015-0527

    EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batc…

  • Unscored —
    CVE-2015-0137

    IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certif…

  • Unscored —
    CVE-2015-0136

    powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command…

  • Unscored —
    CVE-2015-0106

    Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1…