CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- mark evans fog-dragonflyCode injection in dragonfly gem7.5 High
- dlink dir-505l shareport mobile companion, dir-826l wireless n600 cloud router, dir-505l shareport mobile companion firmware +1 more +3 moreD-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02...9.3 High
- gitlab, gitlab gitlab-shell +1 moreGitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and...6.8 Medium
- gitlabGitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when...6.8 Medium
- gnu grubA certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows...2.1 Low
- mediawikiCross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1...4.3 Medium
- mediawikiBuffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x...7.5 High
- mediawikiThe zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki...5.0 Medium
- nlnetlabs ldnsThe ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private...2.1 Low
- hp 8gb simple san connection kit, 8\/20q fibre channel switch 16 port, 8\/20q fibre channel switch 8 port +4 more +6 moreUnspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Connection...1.7 Low
- hp network node manager iCross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20...4.3 Medium
- intra-mart webplatform\/appframeworkOpen redirect vulnerability in WebPlatform / AppFramework 6.0 through 7.2 in NTT DATA INTRAMART...5.8 Medium
- ibm operational decision managerThe RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37,...4.3 Medium
- ibm operational decision managerCross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM...3.5 Low
- ibm operational decision managerCross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in...6.0 Medium
- isc bindThe prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled,...5.0 Medium
- ibm lotus domino, lotus inotes +1 moreCross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1...4.3 Medium
owncloudMageiaUpdated owncloud packages fix several security vulnerabilitiesNo score- semantictitle project semantictitleCross-site scripting (XSS) vulnerability in the SemanticTitle extension before 1.1.0 for...4.3 Medium
- bradesco gateway plugin project gatewayCross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for...4.3 Medium
- sks keyserver project keyserverCross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows...4.3 Medium
- wpgetready nextcellent galleryCross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery...2.1 Low
- fortinet fortiwebMultiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in...6.8 Medium
- slashes\&dots offriaCross-site scripting (XSS) vulnerability in Offiria 2.1.0 and earlier allows remote attackers to...4.3 Medium
- travis shirk eyed3, opensuse +1 moreeyeD3 is vulnerable to arbitrary file modification via symlink attack3.3 Low
- theforeman foremanForeman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews,...5.0 Medium
- theforeman kafoKafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml1.9 Low
- openstack computeOpenStack Nova host data leak to vm instance in rescue mode3.5 Low
- apache cxfUncontrolled Resource Consumption in Apache CXF4.3 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXF4.3 Medium
- theforeman foremanSession fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web...6.8 Medium
- gnu rushGNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files...4.9 Medium
- jenkins-ci subversion-pluginJenkins Subversion Plugin Stores Credentials with Base64 Encoding2.1 Low
- varnish cache project cachevarnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log...2.1 Low
- theforeman foremanThe smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute...7.5 High
- theforeman foremanForeman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest...6.5 Medium
- theforeman foremanThe external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain...5.0 Medium
- theforeman foremanForeman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for...5.0 Medium
- theforeman foremanForeman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to...7.5 High
- theforeman foremanThe smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify...3.6 Low
- illinois ncsa mosaicNCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service ("remote control"...2.1 Low
- illinois ncsa mosaicNCSA Mosaic 2.0 and earlier allows local users to cause a denial of service ("remote control"...2.1 Low
- gnu emacs, mageia project mageia +1 morelisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...3.3 Low
- gnu emacs, mageia project mageia +1 morelisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...3.3 Low
- gnu emacs, mageia project mageia +1 morelisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite...3.3 Low
- gnu emacs, mageia project mageia +1 morelisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...3.3 Low
- selinuxproject policycoreutilsseunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs...6.9 Medium
- calderaThe directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection...7.5 High
- calderacostview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute...10.0 High
- calderaMultiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute...7.5 High
- Show moreLoading…