# CVEs published 2015-03-09

52 CVEs were published on March 9, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7888](https://cve.now/CVE-2014-7888.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7889](https://cve.now/CVE-2014-7889.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7890](https://cve.now/CVE-2014-7890.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7891](https://cve.now/CVE-2014-7891.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7892](https://cve.now/CVE-2014-7892.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7893](https://cve.now/CVE-2014-7893.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7894](https://cve.now/CVE-2014-7894.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7895](https://cve.now/CVE-2014-7895.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7897](https://cve.now/CVE-2014-7897.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve (no CVSS)
- [CVE-2014-7898](https://cve.now/CVE-2014-7898.md): The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via un (no CVSS)
- [CVE-2015-2206](https://cve.now/CVE-2015-2206.md): libraries/select\_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid languag (no CVSS)
- [CVE-2015-2242](https://cve.now/CVE-2015-2242.md): Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (no CVSS)
- [CVE-2015-2243](https://cve.now/CVE-2015-2243.md): Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences (no CVSS)
- [CVE-2015-2244](https://cve.now/CVE-2015-2244.md): Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2015-1874](https://cve.now/CVE-2015-1874.md): Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8 (no CVSS)
- [CVE-2014-3691](https://cve.now/CVE-2014-3691.md): Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which all (no CVSS)
- [CVE-2014-9472](https://cve.now/CVE-2014-9472.md): The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a den (no CVSS)
- [CVE-2015-0254](https://cve.now/CVE-2015-0254.md): Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a cr (no CVSS, org.apache.taglibs:taglibs-standard · org.apache.taglibs:ta…)
- [CVE-2015-1165](https://cve.now/CVE-2015-1165.md): RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs a (no CVSS)
- [CVE-2015-1464](https://cve.now/CVE-2015-1464.md): RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL. (no CVSS)
- [CVE-2015-2061](https://cve.now/CVE-2015-2061.md): Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving s (no CVSS)
- [CVE-2015-2063](https://cve.now/CVE-2015-2063.md): Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which (no CVSS)
- [CVE-2015-2092](https://cve.now/CVE-2015-2092.md): The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2015-2093](https://cve.now/CVE-2015-2093.md): Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2015-2094](https://cve.now/CVE-2015-2094.md): Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2015-2095](https://cve.now/CVE-2015-2095.md): Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote (no CVSS)
- [CVE-2015-2096](https://cve.now/CVE-2015-2096.md): Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows rem (no CVSS)
- [CVE-2015-2097](https://cve.now/CVE-2015-2097.md): Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified (no CVSS)
- [CVE-2011-5319](https://cve.now/CVE-2011-5319.md): content/renderer/device\_sensors/device\_motion\_event\_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-r (no CVSS)
- [CVE-2014-9689](https://cve.now/CVE-2014-9689.md): content/renderer/device\_sensors/device\_orientation\_event\_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to h (no CVSS)
- [CVE-2015-1213](https://cve.now/CVE-2015-1213.md): The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.7 (no CVSS)
- [CVE-2015-1214](https://cve.now/CVE-2015-1214.md): Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google (no CVSS)
- [CVE-2015-1215](https://cve.now/CVE-2015-1215.md): The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or po (no CVSS)
- [CVE-2015-1216](https://cve.now/CVE-2015-1216.md): Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bin (no CVSS)
- [CVE-2015-1217](https://cve.now/CVE-2015-1217.md): The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in (no CVSS)
- [CVE-2015-1218](https://cve.now/CVE-2015-1218.md): Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attac (no CVSS)
- [CVE-2015-1219](https://cve.now/CVE-2015-1219.md): Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.22 (no CVSS)
- [CVE-2015-1220](https://cve.now/CVE-2015-1220.md): Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used i (no CVSS)
- [CVE-2015-1221](https://cve.now/CVE-2015-1221.md): Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2015-1222](https://cve.now/CVE-2015-1222.md): Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service\_worker/service\_worker\_s (no CVSS)
- [CVE-2015-1223](https://cve.now/CVE-2015-1223.md): Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome befor (no CVSS)
- [CVE-2015-1224](https://cve.now/CVE-2015-1224.md): The VpxVideoDecoder::VpxDecode function in media/filters/vpx\_video\_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0. (no CVSS)
- [CVE-2015-1225](https://cve.now/CVE-2015-1225.md): PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecif (no CVSS)
- [CVE-2015-1226](https://cve.now/CVE-2015-1226.md): The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger\_api.cc in Google Chrome before 41.0.2272.76 does no (no CVSS)
- [CVE-2015-1227](https://cve.now/CVE-2015-1227.md): The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory (no CVSS)
- [CVE-2015-1228](https://cve.now/CVE-2015-1228.md): The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does n (no CVSS)
- [CVE-2015-1229](https://cve.now/CVE-2015-1229.md): net/http/proxy\_client\_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP (no CVSS)
- [CVE-2015-1230](https://cve.now/CVE-2015-1230.md): The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name (no CVSS)
- [CVE-2015-1231](https://cve.now/CVE-2015-1231.md): Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2015-1232](https://cve.now/CVE-2015-1232.md): Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi\_manager\_usb.cc in Google Chrome before 41.0.2272.7 (no CVSS)
- [CVE-2015-2238](https://cve.now/CVE-2015-2238.md): Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a (no CVSS)
- [CVE-2015-2239](https://cve.now/CVE-2015-2239.md): Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.