Archive
March 2015
Vulnerabilities first published in this month (UTC), newest first.
453 results · Feed
-
Unscored —CVE-2015-0100 EPSS 16%
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2015-1623 EPSS 22%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 201…
-
Unscored —CVE-2015-1627 EPSS 11%
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…
-
Unscored —CVE-2015-1622 EPSS 16%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2015-1626 EPSS 16%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-1634 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative …
-
Unscored —CVE-2015-1632 EPSS 12%
Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, Share…
-
Unscored —CVE-2015-1624 EPSS 16%
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unsp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative …
-
Unscored —CVE-2015-1625 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1067 EPSS 20%
Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restric…
-
Unscored —
The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remo…
-
Medium —
Moderate severity vulnerability that affects org.springframework:spring-core
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2.8 allow remote attacke…
-
Unscored —CVE-2015-2183 Public exploit
Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execu…
-
Unscored —CVE-2015-2184 Public exploit
ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls t…
-
Unscored —
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when…
-
Unscored —
389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog"…
-
Unscored —
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwi…
-
Unscored —
libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 inc…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via director…
-
Unscored —CVE-2014-7893 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7897 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7898 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7895 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7894 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7892 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7889 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7891 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7890 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —CVE-2014-7888 EPSS 10%
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extensi…
-
High —CVE-2015-0254 EPSS 12%
XXE in Apache Standard Taglibs
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.