CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- vmware esxi, fusion, player +1 more +3 more VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware... 5.8 Medium
- apache tomcat Denial of service in Apache Tomcat 5.0 Medium
- typo3 Typo3 Information Disclosure 4.0 Medium
- typo3 TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash 4.0 Medium
- typo3 TYPO3 Improper Session Invalidation 5.8 Medium
- typo3 Typo3 XSS Vulnerabilities 3.5 Low
- typo3 TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code 6.0 Medium
- typo3 Typo3 Host Header Spoofing Vulnerability 5.0 Medium
- apache tomcat Missing XML Validation in Apache Tomcat 4.3 Medium
- apache tomcat Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat 4.3 Medium
- apache tomcat Improper Input Validation in Apache Tomcat 4.3 Medium
- apache tomcat Integer Overflow or Wraparound in Apache Tomcat 5.0 Medium
- cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub Use of Password Hash With Insufficient Computational Effort 6.0
- cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub XSS 7.1
- cogent datahub, cogentdatahub cogent datahub +1 more Cogent DataHub Path Traversal 7.8
- triangle microworks scada data gateway Triangle MicroWorks SCADA Data Gateway Resource Exhaustion 1.2
- triangle microworks scada data gateway Triangle MicroWorks SCADA Data Gateway Resource Exhaustion 4.3
- ibm db2 Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs... 7.2 High
- ibm db2 The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5... 8.5 High
- ibm sterling control center Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1... 3.5 Low
- ibm websphere service registry and repository Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and... 4.3 Medium
- webmin, webmin userwin +1 more Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1... 4.3 Medium
- digitalzoomstudio video gallery Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video... 4.3 Medium
- trendmicro interscan messaging security virtual appliance Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual... 4.3 Medium
- simple popup project popup Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for... 4.3 Medium
- citrix vdi-in-a-box Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows... 7.5 High
- redhat rhevm-dwh The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager... 2.1 Low
- bitrix e-store module The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the... 7.5 High
- oisf suricata Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a... 5.0 Medium
- nero mediahome Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL... 5.0 Medium
- nero mediahome Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier... 5.0 Medium
- mate-desktop mate-settings-daemon The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone... 2.1 Low
- mumble The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an... 5.0 Medium
- mumble The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers... 5.0 Medium
- debian dpkg-dev Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote... 6.4 Medium
- debian dpkg-dev Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to... 6.4 Medium
- cisco wide area application services Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is... 5.0 Medium
- cisco unified communications domain manager Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS... 5.8 Medium
- cisco unified communications domain manager The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain... 4.0 Medium
- cisco unified communications domain manager The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain... 5.0 Medium
- cisco unified communications domain manager The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain... 4.0 Medium
- jasig uportal uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote... 6.5 Medium
- jasig uportal uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote... 6.5 Medium
- sharetronix SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to... 6.5 Medium
- sharetronix Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers... 6.8 Medium
- sosreport project sosreport SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local... 4.3 Medium
- redhat rhevm-reports ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm... 2.1 Low
- redhat rhevm-reports The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses... 2.1 Low
- redhat rhevm-reports The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization... 2.1 Low
- google authenticator login project ga login The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for... 5.0 Medium
- Show olderLoading…