CVEs published in May 2013
396 vulnerabilities, 111 critical, 5 exploited.
- php ** DISPUTED ** The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly... 5.0 Medium
- tibco silver mobile The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role... 6.5 Medium
- cisco prime infrastructure Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime... 4.3 Medium
- cisco telepresence system software Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which... 6.8 Medium
- psychostats SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to... 7.5 High
- feedweb Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9... 3.5 Low
- algisinfo aicontactsafe Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla!... 4.3 Medium
- libraw, canonical ubuntu linux, opensuse +2 more Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw... 7.5 High
- linux kernel Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target... 7.9 High
- lockon ec-cube data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not... 5.0 Medium
- lockon ec-cube Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper... 4.3 Medium
- lockon ec-cube Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote... 4.0 Medium
- lockon ec-cube Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0... 4.3 Medium
- cisco nexus 1000v, nx-os +1 more Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a... 5.0 Medium
- cisco nexus 1000v, nx-os +1 more The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509... 5.8 Medium
- cisco nx-os Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet... 5.0 Medium
- cisco nx-os Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX... 5.4 Medium
- cisco nx-os The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module ... 5.0 Medium
- cisco nx-os The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual... 5.8 Medium
- google android, lg optimus g e973 +1 more The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate... 7.2 High
- ibm websphere application server, websphere message broker +1 more IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8... 4.3 Medium
- otrs, otrs itsm +1 more Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1... 6.5 Medium
- gnu gnutls The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote... 5.0 Medium
- redhat livecd-tools Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3,... 7.2 High
- redhat libvirt The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5... 5.0 Medium
- ibm sterling connect The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX... 6.8 Medium
- ibm rational directory server IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2... 5.0 Medium
- ibm websphere datapower b2b appliance xb62, websphere datapower b2b appliance xb62 firmware, websphere datapower integration appliance xi50 +11 more +13 more Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA... 4.3 Medium
- ibm tivoli monitoring Cross-site scripting (XSS) vulnerability in the Tivoli Enterprise Portal browser client in IBM... 4.3 Medium
- ibm infosphere optim data growth for oracle e-business suite The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x... 5.0 Medium
- ibm infosphere optim data growth for oracle e-business suite Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E... 3.5 Low
- ibm infosphere optim data growth for oracle e-business suite SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E... 7.5 High
- ibm infosphere optim data growth for oracle e-business suite Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E... 3.5 Low
- ibm infosphere optim data growth for oracle e-business suite The login page in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x... 5.0 Medium
- ibm infosphere optim data growth for oracle e-business suite IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3... 4.3 Medium
- cisco webex Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the... 5.8 Medium
- spip SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to... 7.5 High
- wireshark, debian linux, opensuse +2 more Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet... 5.0 Medium
- wireshark, debian linux, opensuse +2 more Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a... 7.8 High
- wireshark, debian linux, opensuse +2 more The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC... 5.0 Medium
- wireshark, debian linux, opensuse +2 more epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses... 5.0 Medium
- wireshark, debian linux, opensuse +2 more The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in... 5.0 Medium
- wireshark, debian linux, opensuse +2 more The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in... 5.0 Medium
- wireshark, debian linux, opensuse +2 more The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark... 5.0 Medium
- wireshark, debian linux, opensuse +2 more epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls... 5.0 Medium
- moodle Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class 5.0 Medium
- moodle Moodle does not enforce capability requirements for reading blog comments 5.0 Medium
- moodle Moodle does not consider "don't send" attributes during hub registration 4.3 Medium
- moodle Moodle is vulnerable to Sensitive Information Disclosure 4.0 Medium
- moodle mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2... 4.0 Medium
- Show olderLoading…