CVEs published in May 2013
396 vulnerabilities, 111 critical, 5 exploited.
- cisco ios xrThe SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service ...4.0 Medium
- cisco webex meetings server, webex node for mcs +1 moreThe HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote...5.0 Medium
- emc avamarEMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain...9.3 High
- emc avamarThe web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote...3.5 Low
- emc networkerThe nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets...7.2 High
- novell iprintStack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to...10.0 High
- ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreCross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0...4.3 Medium
- ibm classic meeting server, lotus sametime +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime...3.5 Low
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote...5.0 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1...4.3 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1...5.0 Medium
- apache subversion, opensuse +1 moreThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...4.0 Medium
- apache subversion, opensuse +1 moreThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...2.1 Low
- ruby-lang rubyThe safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the...4.3 Medium
- gnu glibcInteger overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other...6.8 Medium
- gnu glibcThe svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to...5.0 Medium
- gnu glibcInteger overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent...6.8 Medium
- freebsdThe nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8...7.5 High
- nextapp echoThe Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read...5.0 Medium
- hp service manager web tierCross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2...4.3 Medium
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- hp service manager web tierHP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive...5.0 Medium
- gpsd project gpsd, canonical ubuntu linux +1 moreThe NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service ...4.3 Medium
- remotesensing libtiffStack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0...9.3 High
- remotesensing libtiffHeap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3...9.3 High
- vmware vcenter server applianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is...4.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...9.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...9.0 High
- sap basis communication servicesSAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute...6.0 Medium
- sap production planning and controlThe CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP...6.5 Medium
- sap erp central component, healthcare industry solution +1 moreThe ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital...6.5 Medium
- cisco unified communications domain managerCisco Unified Communications Domain Manager allows remote attackers to cause a denial of service ...5.0 Medium
- cisco telepresence management suiteTMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS) on 64-bit...5.0 Medium
- cisco prime central for hosted collaboration solutionCross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for...4.3 Medium
- cisco prime central for hosted collaboration solutionCross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime...4.3 Medium
- cisco prime central for hosted collaboration solutionCross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco...4.3 Medium
- cisco prime central for hosted collaboration solutionCross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet...4.3 Medium
- cisco prime central for hosted collaboration solutionDirectory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows...5.0 Medium
- galilmc rio-47100 plcThe Galil RIO-47100 Pocket PLC allows remote attackers to cause a denial of service via a session...7.1 High
- matrikonopc a\&e historianDirectory traversal vulnerability in the web interface in the Health Monitor service in...9.4 High
- matrikonopc security gatewayThe configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a...5.0 Medium
- ibm lotus notesCross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1...4.3 Medium
- mcafee epolicy orchestratorDirectory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x...4.3 Medium
- mcafee epolicy orchestratorSQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO)...7.9 High
- ibm lotus notesIBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block...5.8 Medium
- dentrix g5Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared...5.0 Medium