31 March 2015

20 results · Feed

• Critical 9.8
  CVE-2015-0838

  Dulwich Buffer Overflow when handling pack files

  Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

  dulwich dulwich Debian PyPI
  Mar 31, 2015
• Unscored —
  CVE-2015-2684

  Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) vi…

  Mar 31, 2015
• Unscored —
  CVE-2015-2753

  FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitr…

  freexl freexl Debian Ubuntu
  Mar 31, 2015
• Unscored —
  CVE-2015-2754

  FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbit…

  freexl freexl Debian Ubuntu
  Mar 31, 2015
• Unscored —
  CVE-2015-2776

  The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption…

  freexl freexl Debian Ubuntu
  Mar 31, 2015
• Unscored —
  CVE-2014-2027

  eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary fi…

  Mar 31, 2015
• Unscored —
  CVE-2014-2830

  Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remo…

  cifs-utils Debian
  Mar 31, 2015
• Unscored —
  CVE-2014-9707 Public exploit EPSS 28%

  EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remo…

  Mar 31, 2015
• Critical 9.8
  CVE-2014-9706

  Dulwich Arbitrary code execution via commit with directory path starting with .git

  The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

  dulwich dulwich Debian PyPI
  Mar 31, 2015
• Critical 9.8
  CVE-2014-9462

  Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command

  The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.

  mercurial mercurial mercurial Debian Ubuntu PyPI
  Mar 31, 2015
• Unscored —
  CVE-2015-0900

  Cross-site scripting (XSS) vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through…

  Mar 31, 2015
• Unscored —
  CVE-2015-0901

  Cross-site scripting (XSS) vulnerability in the duwasai flashy theme 1.3 and earlier for WordPress allows remote attack…

  Mar 31, 2015
• Unscored —
  CVE-2015-2108

  Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authentica…

  Mar 31, 2015
• Unscored —
  CVE-2015-2109

  Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obt…

  Mar 31, 2015
• Unscored —
  CVE-2015-2106

  Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 al…

  Mar 31, 2015
• Unscored —
  CVE-2014-7876 EPSS 13%

  Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Ma…

  Mar 31, 2015
• Unscored —
  CVE-2015-0985

  Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hi…

  Mar 31, 2015
• Unscored —
  CVE-2015-0984

  Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000…

  Mar 31, 2015
• Unscored —
  CVE-2014-9209

  Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platfo…

  Mar 31, 2015
• Unscored —
  CVE-2014-9708 EPSS 56%

  Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer d…

  Mar 31, 2015