# CVEs published 2015-03-27

22 CVEs were published on March 27, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2184](https://cve.now/CVE-2013-2184.md): Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the (no CVSS)
- [CVE-2014-3619](https://cve.now/CVE-2014-3619.md): The \_\_socket\_proto\_state\_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000 (no CVSS)
- [CVE-2014-8121](https://cve.now/CVE-2014-8121.md): DB\_LOOKUP in nss\_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly (no CVSS)
- [CVE-2014-9712](https://cve.now/CVE-2014-9712.md): Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files an (no CVSS)
- [CVE-2015-2157](https://cve.now/CVE-2015-2157.md): The (1) ssh2\_load\_userkey and (2) ssh2\_save\_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory (no CVSS)
- [CVE-2015-2757](https://cve.now/CVE-2015-2757.md): The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users (no CVSS)
- [CVE-2015-2758](https://cve.now/CVE-2015-2758.md): The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users (no CVSS)
- [CVE-2015-2759](https://cve.now/CVE-2015-2759.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Pa (no CVSS)
- [CVE-2015-2760](https://cve.now/CVE-2015-2760.md): Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9 (no CVSS)
- [CVE-2015-2761](https://cve.now/CVE-2015-2761.md): Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remot (no CVSS)
- [CVE-2015-2762](https://cve.now/CVE-2015-2762.md): Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentica (no CVSS)
- [CVE-2015-2763](https://cve.now/CVE-2015-2763.md): Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703. (no CVSS)
- [CVE-2015-2764](https://cve.now/CVE-2015-2764.md): Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2015-2765](https://cve.now/CVE-2015-2765.md): The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified (no CVSS)
- [CVE-2015-2766](https://cve.now/CVE-2015-2766.md): The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force atta (no CVSS)
- [CVE-2015-2767](https://cve.now/CVE-2015-2767.md): Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled." (no CVSS)
- [CVE-2015-2768](https://cve.now/CVE-2015-2768.md): Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inj (no CVSS)
- [CVE-2015-2769](https://cve.now/CVE-2015-2769.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allo (no CVSS)
- [CVE-2015-2770](https://cve.now/CVE-2015-2770.md): Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote a (no CVSS)
- [CVE-2015-2771](https://cve.now/CVE-2015-2771.md): The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers t (no CVSS)
- [CVE-2015-2772](https://cve.now/CVE-2015-2772.md): SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2015-2773](https://cve.now/CVE-2015-2773.md): SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.