CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- xenThe ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which...3.3 Low
- juniper network and security manager software, nsm3000, nsmexpress +2 moreUnspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote...10.0 High
- livezillaLiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in...6.8 Medium
- unrealircdUnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL...5.0 Medium
- python, apple mac os x +1 morePython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which...4.3 Medium
- livezillaLiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is...4.3 Medium
- opentext exceed ondemandOpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote...6.4 Medium
- opentext exceed ondemandThe client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which...6.8 Medium
- opentext exceed ondemandOpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional...6.8 Medium
- opentext exceed ondemandOpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1...5.0 Medium
- openvas administratorOpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the...7.5 High
- openvas managerOpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP...7.5 High
- unrealircdUse-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to...5.0 Medium
- maharaMahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict...4.0 Medium
- maharaMahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access...5.5 Medium
- maharaCross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x...4.3 Medium
- maharaMahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict...4.0 Medium
- leon weber pyxtrlockpyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2...2.1 Low
- leon weber pyxtrlockpyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers...3.6 Low
- quick tabs module project quicktabsThe Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6...5.0 Medium
- pocoo jinja2Insecure Temporary File in Jinja24.4 Medium
- apple itunesApple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared...4.4 Medium
- florian weber spacesThe Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly...2.1 Low
- gitlabGitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed6.5 Medium
- flag module project flagEval injection vulnerability in the flag_import_form_validate function in includes/flag.export...6.5 Medium
- skyboxsecurity skybox view appliance, skybox view appliance iso +1 moreSkybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2...8.5 High
- vicidialVICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded...5.0 Medium
miniupnpcMageiaUpdated miniupnpc packages fix a buffer overrunNo scoreegroupwareMageiaUpdated egroupware packages fix a cross site request forgeryNo score- spumko project hapi server frameworkFile Descriptor Leak Can Cause DoS Vulnerability in hapi5.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Allows Open Redirects4.3 Medium
- codecguide k-lite codec packFilters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to...4.3 Medium
- dotclearDotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized...7.5 High
- ucdok tomatoAPI Admin Auth Weakness in tomato6.8 Medium
- dlink dap 1150, dap 1150 firmware +1 moreCross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote...4.3 Medium
- dlink dap 1150, dap 1150 firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2...6.8 Medium
- karlen walter si bibtexMultiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for...7.5 High
- karlen walter si bibtexCross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3...4.3 Medium
- adaptivecomputing torque resource managerStack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue...10.0 High
- bilyonerThe Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509...5.8 Medium
- cisco iosThe ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service ...5.4 Medium
- cisco ios, ios xe +1 moreThe Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and...4.3 Medium
- symantec workspace streamingThe server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to...7.9 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43...7.1 High
- ibm infosphere information server metadata workbenchCross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata...6.8 Medium
- ibm websphere portalDirectory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0...7.1 High
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere...4.3 Medium
- yokogawa centum cs 3000, centum cs 1000, centum cs 3000 entry class +12 more +14 moreYokogawa CENTUM CS 3000 Stack-based Buffer Overflow8.3
- emc rsa netwitness, rsa security analytics +1 moreEMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10...7.6 High
- x libxfontThe bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...8.5 High
- Show moreLoading…