Archive
March 2015
Vulnerabilities first published in this month (UTC), newest first.
453 results · Feed
-
Unscored —
A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the installation path via u…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4…
-
Unscored —
IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 doe…
-
Unscored —
The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requireme…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4…
-
Unscored —
The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and priva…
-
Unscored —
The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.…
-
Unscored —
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iF…
-
Unscored —
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iF…
-
Unscored —CVE-2015-2292 Public exploit
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin b…
-
Unscored —CVE-2015-2314 Public exploit
SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary …
-
Unscored —CVE-2015-2315 Public exploit
Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to injec…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress S…
-
Unscored —
Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC m…
-
Unscored —
The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to a…
-
Unscored —
Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC mess…
-
Unscored —
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.
-
Unscored —
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to ob…
-
Unscored —
The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replac…
-
Unscored —
The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the…
-
Unscored —
Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to …
-
Unscored —
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.…
-
Unscored —CVE-2014-7822 Public exploit
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restricti…
-
Unscored —
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an ina…
-
Unscored —
The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL…
-
Unscored —
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NU…
-
Unscored —
Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to ar…
-
Unscored —
Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1…
-
Unscored —
Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics…
-
Unscored —
Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execu…
-
Unscored —
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users …
-
Unscored —
The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentica…
-
Unscored —
Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote …
-
Unscored —
HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging…
-
Unscored —
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated at…
-
Unscored —
Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact a…