CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- x libxfont, canonical ubuntu linux, debian linux +2 moreThe bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...8.5 High
- x libxfontThe bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...8.5 High
- phpmanufaktur kitformSQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier...7.5 High
- o-dyn collabtiveCross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to...4.3 Medium
- pcman ftp serverBuffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via...10.0 High
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12...2.1 Low
- mantisbtCross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core...4.3 Medium
- qemuhw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm...6.8 Medium
- pythonRace condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when...3.3 Low
- jetaudioJetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service ...4.3 Medium
- videolan vlc media playercodec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a...4.3 Medium
- get-simple getsimple cmsMultiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers...4.3 Medium
- redhat cloudforms 3.0 management engineSQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat...6.5 Medium
- redhat cloudforms 3.0 management engineThe CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote...4.0 Medium
- openxMultiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before...6.8 Medium
- phpcms guesbook moduleMultiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow...4.3 Medium
- xiaowen huang yingzhi python programming languageDirectory traversal vulnerability in the FTP server in YingZhi Python Programming Language for...6.4 Medium
- openstack horizonThe Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current...5.5 Medium
- vicidialVICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote...6.5 Medium
- katello installerKatello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello...2.1 Low
- openxMultiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote...4.3 Medium
- webmaster-source wp125Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the...6.8 Medium
- galleryproject galleryMultiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.7 allow remote...4.3 Medium
- cloudbees jenkinsJenkins Cross-Site Request Forgery vulnerabilities6.8 Medium
- smart-flv plugin project smart-flvMultiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for...4.3 Medium
- intersectalliance system intrusion analysis and reporting environmentCross-site scripting (XSS) vulnerability in the events page in the System iNtrusion Analysis and...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft web applicationsMicrosoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute...8.5 High
- microsoft windows, windows 7, windows 8 +4 more +6 moreThe Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2...9.0 High
- microsoft officeThe MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and...6.8 Medium
- microsoft officeMicrosoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token...4.3 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...7.2 High
- microsoft .net frameworkThe .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5...10.0 High
- microsoft officeUntrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold...9.3 High
- microsoft office web apps server, sharepoint foundation, sharepoint server +1 more +3 moreCross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1,...4.3 Medium
- adobe acrobat, acrobat reader +1 moreBuffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on...10.0 High
- adobe acrobat, acrobat reader +1 moreDouble free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07...10.0 High
- adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow...10.0 High
- adobe acrobat, acrobat reader +1 moreThe API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not...4.3 Medium
- adobe air, flash player +1 moreAdobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe...7.5 High
- adobe air, flash player +1 moreAdobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe...7.5 High
- adobe air, flash player +1 moreAdobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe...7.5 High
- adobe air, flash player +1 moreAdobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe...7.5 High
- adobe air, flash player +1 moreAdobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe...7.5 High
- adobe illustratorStack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2...10.0 High
- Show moreLoading…