# CVEs published 2015-03-14

12 CVEs were published on March 14, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-5409](https://cve.now/CVE-2014-5409.md): GE Hydran M2 Predictable Value Range from Previous Values (no CVSS, GE Hydran M2, containing the 17046 Ethernet option)
- [CVE-2014-7884](https://cve.now/CVE-2014-7884.md): Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors. (no CVSS)
- [CVE-2014-7885](https://cve.now/CVE-2014-7885.md): Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vect (no CVSS)
- [CVE-2014-9206](https://cve.now/CVE-2014-9206.md): Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devi (no CVSS)
- [CVE-2014-9207](https://cve.now/CVE-2014-9207.md): Untrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before UltimateAccess 3.02 allows local users to gain p (no CVSS)
- [CVE-2015-0660](https://cve.now/CVE-2015-0660.md): Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary (no CVSS)
- [CVE-2015-0978](https://cve.now/CVE-2015-0978.md): Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32\_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32\_vc100- (no CVSS)
- [CVE-2015-0979](https://cve.now/CVE-2015-0979.md): Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute (no CVSS)
- [CVE-2015-0980](https://cve.now/CVE-2015-0980.md): Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote (no CVSS)
- [CVE-2015-0981](https://cve.now/CVE-2015-0981.md): The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or writ (no CVSS)
- [CVE-2015-0982](https://cve.now/CVE-2015-0982.md): Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2015-2107](https://cve.now/CVE-2015-2107.md): HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.