CVEs published in May 2012
423 vulnerabilities, 87 critical, 2 exploited.
request-tracker3.8Debianrequest-tracker3.8 - regressionNo score- symantec endpoint protectionThe Network Threat Protection module in the Manager component in Symantec Endpoint Protection ...5.0 Medium
- grboardMultiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow...7.5 High
- grboardGR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain...6.4 Medium
- bestpractical rtSQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x...6.5 Medium
- bestpractical rtBest Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable...3.5 Low
- bestpractical rtBest Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the...6.8 Medium
- linux kernel** DISPUTED ** Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi...5.5 Medium
- bestpractical rtMultiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before...6.8 Medium
- bestpractical rtBest Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated...4.0 Medium
- bestpractical rtMultiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8...4.3 Medium
- bestpractical rtThe vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4...5.0 Medium
- symantec endpoint protectionThe Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before...9.3 High
- symantec endpoint protectionDirectory traversal vulnerability in the Manager service in the management console in Symantec...5.8 Medium
- symantec endpoint protection, network access control +1 moreBuffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec...7.2 High
- tornadoweb tornadoTornado CRLF injection vulnerability5.0 Medium
- netweblogic login with ajaxCross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login...4.3 Medium
- schneider-electric kerweb, kerwin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and...4.3 Medium
- atlassian jira, gliffy, atlassian confluence server +2 moreThe Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does...6.4 Medium
- tm software tempo, tempo6.3.0, tempo6.3.2 +2 moreThe TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for...4.0 Medium
- atlassian bamboo, confluence, crowd +4 more +6 moreAtlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;...9.1 Critical
- xelex mobiletrackThe Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which...2.6 Low
- xelex mobiletrackThe Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS...7.6 High
- linux kernelInteger overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915...4.9 Medium
- linux kernelInteger overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer...4.9 Medium
- simple php agenda php agendaSQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to...7.5 High
- hypermethod elearning serverPHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G...7.5 High
- hypermethod elearning serverSQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote...7.5 High
- drupalThe request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote...5.0 Medium
- mark pilgrim feedparserfeedparser denial of service vulnerability5.0 Medium
- user photo photoCross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php...4.3 Medium
- cheveretoDirectory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers...5.0 Medium
- cheveretoCross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote...4.3 Medium
- hp business service managementHP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files,...10.0 High
- geoff davies contact formsThe Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently...3.5 Low
- drupal, nancy wichmann glossary +1 moreCross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal...4.3 Medium
- johan cwiklinski galetteSQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3...7.5 High
- skincrafterBuffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005...10.0 High
- lunascape ilunascape androidThe iLunascape application 1.0.4.0 and earlier for Android does not properly implement the...5.0 Medium
- symantec web gatewayThe file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3...10.0 High
- symantec web gatewayThe file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3...6.4 Medium
- symantec web gatewayThe management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access...10.0 High
- symantec web gatewayMultiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway...4.3 Medium
- typo3TYPO3 Sensitive Information Disclosure via escapeStrForLike method4.3 Medium
- typo3TYPO3 SQL Injection vulnerability6.0 Medium
- typo3Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in...5.0 Medium
- typo3TYPO3 Directory Traversal vulnerability4.0 Medium
- typo3TYPO3 Cross-Site Scripting vulnerability in the Install Tool3.5 Low
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object3.5 Low
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality2.6 Low
- Show moreLoading…