CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- ibm maximo asset management, smartcloud control desk +1 morefrontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk...3.5 Low
- ibm maximo asset management, smartcloud control desk +1 moreCRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud...4.3 Medium
- ibm sametimeCross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2...3.5 Low
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check...4.3 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the...2.9 Low
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote...5.0 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote...5.0 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote...5.0 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote...4.3 Medium
- ibm sametimeUnspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x...5.0 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the...4.3 Medium
- cisco ios xe, asr 1001, asr 1002 +6 more +8 moreCisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to...6.1 Medium
- ibm websphere commerceIBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7...7.1 High
- emc rsa archer egrcMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3...4.3 Medium
- cisco cg-os, nexus 5000, nexus 7000 +24 more +26 moreBuffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in...7.6 High
- ibm sametime proxy server and web clientCross-site request forgery (CSRF) vulnerability in the Web player in IBM Sametime Proxy Server...6.8 Medium
- hp operations manager iUnspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows...8.5 High
- cisco mds 9000, nexus 7000, nx-os +4 more +6 moreThe Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0...7.8 High
- cisco nx-osCisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs...7.1 High
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreCisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs...7.1 High
- cisco identity services engine softwareCisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle...4.0 Medium
- cisco identity services engine softwareSQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1...6.5 Medium
- cisco telepresence system softwareCisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS...4.3 Medium
- cisco tidal enterprise schedulerThe Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain...6.0 Medium
- cisco security managerCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4...6.8 Medium
- cisco security managerCross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and...4.3 Medium
- emc documentum d2EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2...9.0 High
- cisco wide area application servicesCisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch...9.3 High
- imember360The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access,...4.3 Medium
- imember360The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which...5.0 Medium
- pandasecurity panda gold protection, panda av pro 2014, panda global protection 2014 +1 more +3 moreUnspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier...7.2 High
- nullsoft winampWinamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption...4.3 Medium
- gentoo nullmailerThe Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer...5.0 Medium
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...5.0 Medium
- citrix cloudplatformCitrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly...7.5 High
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...5.0 Medium
- krisonavCross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2...6.8 Medium
- krisonavCross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2...4.3 Medium
- ekiga, opalvoip portable tool library, suse linux enterprise desktop +1 more +3 moreThe Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not...4.3 Medium
- coscmsThe uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators...8.5 High
- isync project isyncIsync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the...4.3 Medium
- apache couchdbApache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers...6.8 Medium
- openstack heatOpenStack Heat template URL information leakage3.5 Low
- mod wsgi wsgi, modwsgi mod wsgi +1 moremod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers...7.5 High
- modwsgi mod wsgiThe mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle...6.2 Medium
- mail on update project on updateCross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for...6.8 Medium
- microp project micropStack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary...6.8 Medium
- cogentdatahub cogent datahubGetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote...7.5 High
- cogentdatahub cogent datahubHeap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7...7.5 High
- canonical ubuntu linux, gdm-guest-session project gdm-guest-session +1 moregdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04...2.1 Low
- Show moreLoading…