CVEs published February 28, 2015
9 CVEs were published on February 28, 2015: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- dns-sync
- 1
- org.mindrot:jbcrypt
- 1
Medium, low and unrated 9
- CVE-2015-0655Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remot
- CVE-2015-0884Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows
- CVE-2015-0885checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.
- CVE-2015-0886Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to org.mindrot:jbcrypt
- CVE-2015-0887npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 rou
- CVE-2015-0888KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.
- CVE-2015-0889KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vect
- CVE-2014-9676The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows r
- CVE-2014-9682The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in thdns-sync