Skip to content
OpenAdvisories

Archive

March 2015

Vulnerabilities first published in this month (UTC), newest first.

← February 2015 2015 / March April 2015 →
  1. 1 
  2. 25
  3. 310
  4. 45
  5. 59
  6. 611
  7. 710
  8. 87
  9. 952
  10. 108
  11. 1148
  12. 1220
  13. 1325
  14. 1412
  15. 151
  16. 1610
  17. 177
  18. 1837
  19. 1918
  20. 208
  21. 213
  22. 221
  23. 238
  24. 2422
  25. 2512
  26. 2624
  27. 2722
  28. 283
  29. 2912
  30. 3023
  31. 3120
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Unscored —
    CVE-2014-9707 Public exploit EPSS 28%

    EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remo…

  • Unscored —
    CVE-2015-1815 Public exploit EPSS 16%

    The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to e…

  • Unscored —
    CVE-2015-2791 Public exploit EPSS 13%

    The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary post…

  • Unscored —
    CVE-2015-2790 Public exploit EPSS 25%

    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory …

  • Unscored —
    CVE-2015-2789 Public exploit

    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6…

  • Unscored —
    CVE-2015-0273 Public exploit EPSS 43%

    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-2682 Public exploit EPSS 11%

    Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via…

  • Unscored —
    CVE-2015-2746 Public exploit EPSS 25%

    The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITO…

  • Unscored —
    CVE-2015-2701 Public exploit

    Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication o…

  • Unscored —
    CVE-2015-0252 Public exploit EPSS 39%

    internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentati…

    xerces-c xerces-c Debian Ubuntu
  • Unscored —
    CVE-2015-2153 Public exploit EPSS 18%

    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers …

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2284 Public exploit EPSS 73%

    userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privil…

  • Unscored —
    CVE-2015-2678 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to injec…

  • Unscored —
    CVE-2015-2680 Public exploit

    Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack t…

  • Unscored —
    CVE-2015-2679 Public exploit

    Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2014-9261 Public exploit

    The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which…

  • Unscored —
    CVE-2015-2562 Public exploit EPSS 38%

    Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! all…

  • Unscored —
    CVE-2015-2564 Public exploit

    SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to…

  • Unscored —
    CVE-2015-2281 Public exploit EPSS 10%

    Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote atta…

  • Unscored —
    CVE-2015-2292 Public exploit

    Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin b…

  • Unscored —
    CVE-2015-2314 Public exploit

    SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2015-2315 Public exploit

    Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to injec…

  • Unscored —
    CVE-2014-7822 Public exploit

    The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restricti…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2014-7884 Public exploit EPSS 12%

    Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated at…

  • Unscored —
    CVE-2015-0336 Public exploit EPSS 70%

    Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-2237 Public exploit

    Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2015-2275 Public exploit

    Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to …

  • Unscored —
    CVE-2015-2285 Public exploit

    The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubunt…

  • Unscored —
    CVE-2015-2208 Public exploit EPSS 61%

    The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via sh…

  • Unscored —
    CVE-2015-1875 Public exploit

    SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attacke…

  • Unscored —
    CVE-2015-2182 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2010-5322 Public exploit

    Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2015-0081 Public exploit EPSS 24%

    Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1…

  • Unscored —
    CVE-2015-0096 Public exploit EPSS 71%

    Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 an…

  • Unscored —
    CVE-2015-0097 Public exploit EPSS 41%

    Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 al…

  • Unscored —
    CVE-2015-2183 Public exploit

    Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execu…

  • Unscored —
    CVE-2015-2184 Public exploit

    ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls t…

  • Unscored —
    CVE-2014-9566 Public exploit EPSS 47%

    Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwi…

  • Unscored —
    CVE-2015-2094 Public exploit EPSS 14%

    Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to…

  • Unscored —
    CVE-2015-2097 Public exploit EPSS 23%

    Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary …