# CVEs published 2015-03-29

12 CVEs were published on March 29, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7437](https://cve.now/CVE-2013-7437.md): Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, (no CVSS)
- [CVE-2013-7438](https://cve.now/CVE-2013-7438.md): Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a (no CVSS)
- [CVE-2015-2785](https://cve.now/CVE-2015-2785.md): The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbi (no CVSS)
- [CVE-2015-2786](https://cve.now/CVE-2015-2786.md): Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications (no CVSS)
- [CVE-2014-5427](https://cve.now/CVE-2014-5427.md): Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonW (no CVSS)
- [CVE-2014-5428](https://cve.now/CVE-2014-5428.md): Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and D (no CVSS)
- [CVE-2014-9205](https://cve.now/CVE-2014-9205.md): Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8. (no CVSS)
- [CVE-2015-0528](https://cve.now/CVE-2015-0528.md): The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 all (no CVSS)
- [CVE-2015-0996](https://cve.now/CVE-2015-0996.md): Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hard (no CVSS)
- [CVE-2015-0997](https://cve.now/CVE-2015-0997.md): Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 provide an HMI (no CVSS)
- [CVE-2015-0998](https://cve.now/CVE-2015-0998.md): Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit clear (no CVSS)
- [CVE-2015-0999](https://cve.now/CVE-2015-0999.md): Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartex (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.