# CVEs published 2015-03-13 25 CVEs were published on March 13, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-0332](https://cve.now/CVE-2015-0332.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0333](https://cve.now/CVE-2015-0333.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0334](https://cve.now/CVE-2015-0334.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0335](https://cve.now/CVE-2015-0335.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0336](https://cve.now/CVE-2015-0336.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0337](https://cve.now/CVE-2015-0337.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows rem (no CVSS) - [CVE-2015-0338](https://cve.now/CVE-2015-0338.md): Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 (no CVSS) - [CVE-2015-0339](https://cve.now/CVE-2015-0339.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att (no CVSS) - [CVE-2015-0340](https://cve.now/CVE-2015-0340.md): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows rem (no CVSS) - [CVE-2015-0341](https://cve.now/CVE-2015-0341.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before (no CVSS) - [CVE-2015-0342](https://cve.now/CVE-2015-0342.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before (no CVSS) - [CVE-2015-1782](https://cve.now/CVE-2015-1782.md): The kex\_agree\_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified (no CVSS) - [CVE-2015-2091](https://cve.now/CVE-2015-2091.md): The authentication hook (mgs\_hook\_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify req (no CVSS) - [CVE-2014-6144](https://cve.now/CVE-2014-6144.md): Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, an (no CVSS) - [CVE-2014-6214](https://cve.now/CVE-2014-6214.md): Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attac (no CVSS) - [CVE-2015-0122](https://cve.now/CVE-2015-0122.md): Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x bef (no CVSS) - [CVE-2015-0123](https://cve.now/CVE-2015-0123.md): Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x bef (no CVSS) - [CVE-2015-0129](https://cve.now/CVE-2015-0129.md): Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote aut (no CVSS) - [CVE-2015-0133](https://cve.now/CVE-2015-0133.md): IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privi (no CVSS) - [CVE-2015-0139](https://cve.now/CVE-2015-0139.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticate (no CVSS) - [CVE-2015-0177](https://cve.now/CVE-2015-0177.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web (no CVSS) - [CVE-2015-0652](https://cve.now/CVE-2015-0652.md): The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8. (no CVSS) - [CVE-2015-0653](https://cve.now/CVE-2015-0653.md): The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8 (no CVSS) - [CVE-2015-0654](https://cve.now/CVE-2015-0654.md): Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7 (no CVSS) - [CVE-2015-2264](https://cve.now/CVE-2015-2264.md): Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32\_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32\_vc100- (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-03-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.