CVEs published in May 2013
396 vulnerabilities, 111 critical, 5 exploited.
- softbanktech online service gateThe (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote...4.0 Medium
- symantec brightmail gatewayMultiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the...3.5 Low
- cisco unified customer voice portalCisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to...7.8 High
- cisco unified customer voice portalDirectory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal ...7.8 High
- cisco unified customer voice portalThe log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not...7.8 High
- cisco unified customer voice portalThe Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9...7.8 High
- cisco unified customer voice portalThe Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9...10.0 High
- cisco unified customer voice portalThe CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11...7.8 High
- invensys wonderware information serverCross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0...4.3 Medium
- invensys wonderware information serverInvensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows...9.3 High
- invensys wonderware information serverInvensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not...9.3 High
- invensys wonderware information serverSQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5-...7.5 High
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreUnspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2...9.3 High
- juniper junos space, junos space ja1500 appliance, junos space virtual appliance +2 moreJuniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts,...4.7 Medium
- gwos groundwork monitorMultiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork...6.8 Medium
- gwos groundwork monitorThe Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform...6.5 Medium
- gwos groundwork monitorOpen redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows...5.8 Medium
- gwos groundwork monitorMultiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote...6.5 Medium
- gwos groundwork monitorhtml/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote...6.5 Medium
- gwos groundwork monitorhtml/System-Files.php in the System File Overview feature in the NeDi component in GroundWork...6.5 Medium
- gwos groundwork monitorThe NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to...4.0 Medium
- gwos groundwork monitorcgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6...7.5 High
- gwos groundwork monitorThe Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users...4.0 Medium
- gwos groundwork monitorDirectory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor...5.5 Medium
- gwos groundwork monitorThe Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor...3.5 Low
- gwos groundwork monitormonarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote...6.5 Medium
- gwos groundwork monitorMultiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow...4.3 Medium
- gwos groundwork monitorThe Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios...7.5 High
- gwos groundwork monitorGroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer...7.5 High
- cisco ios, 1921 integrated services router, 1941 integrated services router +24 more +26 moreThe ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header...6.3 Medium
- juniper smartpassCross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7...4.3 Medium
- emc rsa archer egrc, rsa archer smartsuite +1 moreEMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote...4.0 Medium
- emc rsa archer egrc, rsa archer smartsuite +1 moreMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and...4.3 Medium
- emc rsa archer egrc, rsa archer smartsuite +1 moreEMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote...4.0 Medium
- linux kernelThe host_start function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not...4.7 Medium
- crunchify facebook membersCross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for...6.8 Medium
- thulasidas easy-adsense-liteCross-site request forgery (CSRF) vulnerability in the Easy AdSense Lite plugin before 6.10 for...6.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...8.8 High
- novell zenworks desktop managementMultiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM)...7.2 High
- hexagon erdas er viewerStack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in...9.3 High
- cisco unified communications managerThe command-line interface in Cisco Unified Communications Manager (CUCM) does not properly...4.6 Medium
- cisco wireless lan controller, 2000 wireless lan controller, 2100 wireless lan controller +13 more +15 moreCisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of...5.0 Medium
- cisco webex meetings server, webex node for asr 1000 series, webex node for mcs +2 moreThe HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for...5.0 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10...4.3 Medium
- joomla joomla\!plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does...5.5 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and...4.3 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4...4.3 Medium
- joomla joomla\!Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass...4.0 Medium
- joomla joomla\!Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass...4.0 Medium
- linux kernelThe veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage...7.8 High
- Show moreLoading…