# CVEs published 2015-03-18

37 CVEs were published on March 18, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0664](https://cve.now/CVE-2015-0664.md): The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory (no CVSS)
- [CVE-2015-0667](https://cve.now/CVE-2015-0667.md): The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intend (no CVSS)
- [CVE-2015-0896](https://cve.now/CVE-2015-0896.md): Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2015-1068](https://cve.now/CVE-2015-1068.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1069](https://cve.now/CVE-2015-1069.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1070](https://cve.now/CVE-2015-1070.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1071](https://cve.now/CVE-2015-1071.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1072](https://cve.now/CVE-2015-1072.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1073](https://cve.now/CVE-2015-1073.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1074](https://cve.now/CVE-2015-1074.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1075](https://cve.now/CVE-2015-1075.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1076](https://cve.now/CVE-2015-1076.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1077](https://cve.now/CVE-2015-1077.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1078](https://cve.now/CVE-2015-1078.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1079](https://cve.now/CVE-2015-1079.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1080](https://cve.now/CVE-2015-1080.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1081](https://cve.now/CVE-2015-1081.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1082](https://cve.now/CVE-2015-1082.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1083](https://cve.now/CVE-2015-1083.md): WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1084](https://cve.now/CVE-2015-1084.md): The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistent (no CVSS)
- [CVE-2014-8169](https://cve.now/CVE-2014-8169.md): automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values in (no CVSS)
- [CVE-2015-2152](https://cve.now/CVE-2015-2152.md): Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration dis (no CVSS)
- [CVE-2015-2296](https://cve.now/CVE-2015-2296.md): The resolve\_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks vi (no CVSS, requests)
- [CVE-2015-2149](https://cve.now/CVE-2015-2149.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka MyBulletinBoard) before 1.8.4 allow remote au (no CVSS)
- [CVE-2015-2332](https://cve.now/CVE-2015-2332.md): Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2015-2333](https://cve.now/CVE-2015-2333.md): Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject a (no CVSS)
- [CVE-2015-2334](https://cve.now/CVE-2015-2334.md): Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows rem (no CVSS)
- [CVE-2015-2335](https://cve.now/CVE-2015-2335.md): A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors. (no CVSS)
- [CVE-2014-6129](https://cve.now/CVE-2014-6129.md): IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5. (no CVSS)
- [CVE-2014-6131](https://cve.now/CVE-2014-6131.md): IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5. (no CVSS)
- [CVE-2015-0124](https://cve.now/CVE-2015-0124.md): Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x b (no CVSS)
- [CVE-2015-0125](https://cve.now/CVE-2015-0125.md): Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requ (no CVSS)
- [CVE-2015-0128](https://cve.now/CVE-2015-0128.md): Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x b (no CVSS)
- [CVE-2015-0132](https://cve.now/CVE-2015-0132.md): The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and (no CVSS)
- [CVE-2015-0146](https://cve.now/CVE-2015-0146.md): IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle (no CVSS)
- [CVE-2015-0149](https://cve.now/CVE-2015-0149.md): The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows (no CVSS)
- [CVE-2015-0178](https://cve.now/CVE-2015-0178.md): The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applications, which allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.