CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- calderaDirectory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to...5.0 Medium
- hp oneviewUnspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain...6.5 Medium
- cisco webex advanced recording format player, webex recording format player +1 moreBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28...9.3 High
- cisco webex advanced recording format player, webex recording format player +1 moreBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28...9.3 High
- cisco webex advanced recording format player, webex recording format player +1 moreHeap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16,...9.3 High
- cisco webex advanced recording format player, webex recording format player +1 moreBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28...9.3 High
- cisco webex advanced recording format player, webex recording format player +1 moreCisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD...7.8 High
- ibm security access manager for web appliance, security access manager for web software +1 moreThe Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager ...7.1 High
- ibm aix, vios +1 moreThe ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause...4.7 Medium
- novell open enterprise server/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11...2.6 Low
- google search appliance softwareCross-site scripting (XSS) vulnerability on Google Search Appliance (GSA) devices before 7.0.14.G...4.3 Medium
- apache strutsClassLoader manipulation in Apache Struts5.8 Medium
- broadcom symantec critical system protectionSymantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows...7.6 High
- qt, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service ...4.3 Medium
- cristian gafton pam userdbThe pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which...4.3 Medium
- xenThe HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to...6.7 Medium
- nagios remote plugin executor, opensuse +1 more** DISPUTED ** Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor ...7.5 High
- cisco broadband access center telco wireless softwareCross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center...4.3 Medium
- cisco broadband access center telco wireless softwareCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access...6.8 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files...6.8 Medium
- ibm websphere mqinetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers...4.3 Medium
- cisco nexus 1000v intercloudCisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to...5.0 Medium
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreCisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via...4.6 Medium
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 moreactionpack Path Traversal vulnerability7.5 High
- ibm tririga application platformMultiple cross-site scripting (XSS) vulnerabilities in WebProcess.srv in IBM TRIRIGA Application...3.5 Low
- libwww-perl lwp::protocol::https, lwp\ \ +1 moreThe libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket:...5.9 Medium
- oracle fusion middlewareThe xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web...4.3 Medium
- redhat libvirt, opensuse +1 moreThe qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not...1.9 Low
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which...4.4 Medium
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when...4.4 Medium
- ayatana project unityUnity before 7.2.1 does not properly handle entry activation, which allows physically proximate...4.4 Medium
- skyphe file-galleryThe File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which...6.5 Medium
- nettyNetty denial of service vulnerability5.0 Medium
- libpngMultiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial...5.0 Medium
- libpngInteger overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5...5.0 Medium
- amtelco misecuremessagesAMTELCO miSecure Information Exposure7.0
- phpsapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...7.2 High
- f5 big-iqF5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the...9.0 High
- redhat openshiftopenshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...2.1 Low
- redhat jboss web framework kitMultiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0...4.3 Medium
- php-fusionSQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01...7.5 High
- livezillaThe setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows...7.5 High
- livezillaMultiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote...4.3 Medium
- pywbem project pywbemPyWBEM TOCTOU vulnerability in certificate validation5.8 Medium
- pywbem project pywbemPyWBEM TOCTOU vulnerability in certificate validation5.8 Medium
- nagios pluginsThe IPXPING_COMMAND in contrib/check_ipxping.c in Nagios Plugins 1.4.16 allows local users to...4.4 Medium
- bestpractical request tracker, rt-extension-mobileui +1 moreCross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension...4.3 Medium
- php-fusionMultiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to...7.5 High
- david leonard pkstattmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack...6.3 Medium
- fedoraproject fedora, randall hand yerase\'s tnef stream reader +1 moreOff-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows...4.3 Medium
- Show moreLoading…