Latest CVE Feed
-
9.0
HIGHCVE-2015-0635
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) response... Read more
- EPSS Score: %0.13
- Published: Mar. 26, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-2703
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via the (1) ws-userip in the ws-encdata parameter to cve-bin/moreBlockInfo... Read more
- EPSS Score: %0.66
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-2702
Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an emai... Read more
- EPSS Score: %0.50
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-2701
Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/.... Read more
Affected Products : cs-cart- EPSS Score: %0.86
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
3.5
LOWCVE-2015-2559
Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.... Read more
- EPSS Score: %0.27
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-2317
The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control ... Read more
- EPSS Score: %3.15
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-2316
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input... Read more
- EPSS Score: %2.27
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.... Read more
- EPSS Score: %2.02
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-9711
Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 ... Read more
- EPSS Score: %0.74
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-0138
GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.... Read more
Affected Products : tivoli_directory_server- EPSS Score: %0.56
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-8925
Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests th... Read more
Affected Products : rational_clearquest- EPSS Score: %0.15
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2014-8923
The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security Identity Manager on Windows, when certain log and trace levels are configured, store t... Read more
- EPSS Score: %0.12
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
1.2
LOWCVE-2014-6134
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sens... Read more
- EPSS Score: %0.12
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-2284
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.... Read more
Affected Products : firewall_security_manager- EPSS Score: %80.89
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2015-2265
The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an in... Read more
- EPSS Score: %5.77
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2015-2155
The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.... Read more
- EPSS Score: %4.98
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-2154
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.... Read more
Affected Products : tcpdump- EPSS Score: %1.90
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-2153
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU)... Read more
Affected Products : tcpdump- EPSS Score: %13.98
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2015-1388
The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.... Read more
Affected Products : arubaos- EPSS Score: %0.25
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-0282
GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.... Read more
Affected Products : gnutls- EPSS Score: %0.27
- Published: Mar. 24, 2015
- Modified: Apr. 12, 2025