Skip to content
OpenAdvisories

Archive

3 April 2015

Vulnerabilities first published on this day (UTC), newest first.

← March 2015 2015 / April /3 May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2015-0613

    The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.…

  • Unscored —
    CVE-2015-0614

    The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.…

  • Unscored —
    CVE-2015-0616

    The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.…

  • Unscored —
    CVE-2015-0612

    The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.…

  • Unscored —
    CVE-2015-0615

    The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(…

  • High —
    CVE-2015-0225

    Improper Neutralization of Special Elements used in a Command in Apache Cassandra

    The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI req…

    org.apache.cassandra:apache-cassandra Maven
  • Unscored —
    CVE-2015-2841 Public exploit

    Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictio…

  • Unscored —
    CVE-2015-2840

    Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allo…

  • Unscored —
    CVE-2015-2838 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote…

  • Unscored —
    CVE-2015-2839

    The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error messa…

  • Unscored —
    CVE-2015-0683

    Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information vi…

  • Unscored —
    CVE-2015-0995

    Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to …

  • Unscored —
    CVE-2015-0994

    Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by u…

  • Unscored —
    CVE-2015-0993

    Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to…

  • Unscored —
    CVE-2015-0903

    Buffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earlier allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2015-0992

    Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensiti…

  • Unscored —
    CVE-2015-0902

    The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protecti…

  • Unscored —
    CVE-2015-0976

    Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2015-0682

    Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visit…

  • Unscored —
    CVE-2015-0991

    Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message…

  • Unscored —
    CVE-2015-0684

    SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) all…

  • High 7.5
    CVE-2015-0666 Exploited EPSS 40%

    Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2015-0990

    Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privile…

  • Unscored —
    CVE-2014-8390

    Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malform…

  • Critical 9.0
    CVE-2014-5405

    Hospira MedNet Use of Hard-coded Password

    Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

    Hospira MedNet
  • Medium 6.8
    CVE-2014-5400

    Hospira MedNet Password in Configuration File

    The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

    Hospira MedNet
  • Medium 6.8
    CVE-2014-5403

    Hospira MedNet Use of Hard-coded Cryptographic Key

    Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

    Hospira MedNet
  • Unscored —
    CVE-2015-0686

    The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is…

  • Unscored —
    CVE-2015-0687

    The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (…

  • Unscored —
    CVE-2015-0685

    Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attacker…