Archive
March 2015
Vulnerabilities first published in this month (UTC), newest first.
453 results · Feed
-
Unscored —
Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dis…
-
Unscored —
epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size…
-
Unscored —
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not …
-
Unscored —
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote at…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPr…
-
Unscored —
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 b…
-
Unscored —
The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in…
-
Unscored —
The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP addre…
-
Unscored —
The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically …
-
Unscored —
The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, w…
-
Unscored —
The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restriction…
-
High 7.5
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via cra…
-
Unscored —
Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service …
-
Unscored —
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not p…
-
Unscored —
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 …
-
Unscored —
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 …
-
Unscored —CVE-2015-1637 EPSS 13%
Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 S…
-
Unscored —
Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, ak…
-
Unscored —
The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) …
-
Unscored —
The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon …
-
Unscored —
The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+…
-
Unscored —
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-refer…
-
Unscored —
Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaS…
-
Unscored —
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat,…
-
Unscored —CVE-2015-2218 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the W…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remo…
-
Unscored —
Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack ve…
-
Unscored —
NetCat 5.01 and earlier allows remote attackers to obtain the installation path via the redirect_url parameter to netsh…
-
Unscored —CVE-2015-2216 Public exploit
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exe…
-
Unscored —
Open redirect vulnerability in the Services single sign-on server helper (services_sso_server_helper) module for Drupal…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitra…
-
Unscored —
DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMa…
-
Unscored —
Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted,…
-
Unscored —
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attacke…
-
Unscored —
Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Word…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote att…