CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- google chromeCross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in...4.3 Medium
- google chromeThe SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote...4.3 Medium
- google chrome, v8, fedoraproject fedora +2 moreInteger underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in...7.5 High
- google chromeThe ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google...5.0 Medium
- google chromeThe InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google...5.0 Medium
- google chromeUse-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...7.5 High
- google chromeInteger overflow in the AudioInputRendererHost::OnCreateStream function in content/browser...7.5 High
- google chromeUse-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom...7.5 High
- microsoft visual studio, debug interface access software development kit +1 moremsdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual...6.8 Medium
- beetel 450tc2 router, 450tc2 router firmware +1 moreCross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q...6.8 Medium
- efssoft easy file sharing web serverStack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to...10.0 High
- call-cc chickenBuffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7...7.5 High
- construtiva cis manager cmsSQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute...7.5 High
- zenossOpen redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows...5.8 Medium
- zenossCross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject...4.3 Medium
- juniper junos space, junos space ja1500 appliance, junos space ja2500 appliance +2 moreUnspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled,...10.0 High
- seopanel seo panelMultiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote...4.3 Medium
- x2go serverx2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote...9.0 High
- mediafrontCross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x...2.1 Low
- urbanairship python-oauth2SimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Medium
- typo3TYPO3 vulnerable to remote authenticated arbitrary code execution6.5 Medium
- typo3TYPO3 Improper Access Management in the File Abstraction Layer5.5 Medium
- typo3TYPO3 doesn't properly check file extensions6.5 Medium
- microfocus sentinel, sentinel agent manager +1 moreDirectory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in...6.8 Medium
- realnetworks realplayerThe GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows...9.3 High
- cisco iosThe LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device...6.1 Medium
- cisco ios xrThe DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service ...5.0 Medium
- cisco ios xrThe DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service ...5.0 Medium
- cisco ios xeThe SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of...6.8 Medium
- cisco ios, unified border element +1 moreCisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to...5.0 Medium
- cisco security managerCross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco...4.3 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated...6.3 Medium
- controlsystemworks csworksCSWorks SQL Injection7.5
- cisco webex business suite, webex event center, webex meeting center +3 more +5 moremeetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx...5.0 Medium
- cisco asyncos, content security management appliance, email security appliance firmware +2 moreCisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA)...4.3 Medium
- cisco unified web and e-mail interaction managersystem/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows...6.8 Medium
- cisco unified web and e-mail interaction managerCisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests,...4.3 Medium
- cisco unified web and e-mail interaction managerCross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0...4.3 Medium
- cisco nx-osDirectory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and...4.6 Medium
- libgadulibgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows...7.5 High
- moodleMoodle cross-site scripting (XSS) vulnerability4.3 Medium
- moodleMoodle does not properly restrict file access5.0 Medium
- moodleMoodle Reveals Student Information Meant To Be Anonymous4.0 Medium
- moodleMoodle creates a MoodleMobile web-service token with an infinite lifetime6.8 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilities6.8 Medium
- sap netweaverSAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User...5.0 Medium
- intel indeo videoir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of...4.3 Medium
- xenXen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows...3.3 Low
- xenXen 4.4.x does not properly check alignment, which allows local users to cause a denial of...1.9 Low
- xenBuffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of...3.3 Low
- Show moreLoading…