CVEs published in May 2014
554 vulnerabilities, 42 critical, 2 exploited.
- google authenticator login project ga loginThe Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for...5.0 Medium
- apache hbaseApache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are...4.3 Medium
- redhat freeipaThe default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1)...5.0 Medium
- davistribe google doc embedderDirectory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress...5.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...1.9 Low
- debian cifs-utilsStack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in...10.0 High
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...5.0 Medium
- rxspencer project rxspencer, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...6.8 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted...5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...5.0 Medium
- clamav, canonical ubuntu linux +1 moreThe upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service ...5.0 Medium
- clamav, fedoraproject fedora +1 moreClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted...5.0 Medium
- clamav, fedoraproject fedora +1 moreClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer...7.5 High
- clamav, fedoraproject fedora +1 moreClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's...7.5 High
- clamav, fedoraproject fedora +1 moreClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack...7.5 High
- clamavHeap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5...5.0 Medium
- sambaThe internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header...5.0 Medium
- squash square squashThe Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1...7.5 High
- groups communities and co project gccThe Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly...5.0 Medium
- zemanta related postsCross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3...6.8 Medium
- kieranoshea calendarCross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress...6.8 Medium
- openbsd opensmtpdOpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to...5.0 Medium
- uplawski creme fraicheCreme Fraiche contains OS Command Injection9.3 High
- mantisbtMantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial...5.0 Medium
- wpshopstyling wp-ecommerce-shop-stylingPHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop...7.5 High
- axway email firewall, secure messenger +1 moreAxway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides...5.0 Medium
- github hubHub Package Arbitrary File Overwrite3.6 Low
- libguestfsDouble free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and...4.3 Medium
- dovecotThe IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of...5.0 Medium
- paul mattes x3270x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the...5.8 Medium
- dlink dap-1350, dap-1350 firmware +1 moreMultiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 (Rev....7.5 High
- geodesicsolutions geocore maxMultiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 ...7.5 High
- bib2html project bib2htmlCross-site scripting (XSS) vulnerability in the bib2html plugin 0.9.3 for WordPress allows remote...4.3 Medium
- mayan-edms mayan edmsMayan EDMS multiple cross-site scripting (XSS) vulnerabilities3.5 Low
- izarcIZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but...6.8 Medium
- linux kernel, redhat mrg realtime +1 moreThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux...4.9 Medium
- moodleMoodle does not check for the moodle/course:viewhiddencourses capability4.3 Medium
- usercakeMultiple cross-site request forgery (CSRF) vulnerabilities in user_settings.php in Usercake 2.0.2...6.8 Medium
- ibm tivoli storage flashcopy managerThe FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4...4.1 Medium
- ibm tivoli storage manager for virtual environmentsThe Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments ...4.1 Medium
- ibm maximo asset management, smartcloud control desk +1 moreCross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x...4.3 Medium
- ibm maximo asset management, smartcloud control desk +1 moreIBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5...6.0 Medium
- ibm change and configuration management database, maximo asset management, maximo service desk +3 more +5 moreCross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x...3.5 Low
- ibm change and configuration management database, maximo asset management, maximo service desk +2 more +4 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX...3.5 Low
- ibm change and configuration management database, maximo asset management, maximo service desk +4 more +6 moreIBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5...3.5 Low
- ibm change and configuration management database, maximo asset management, maximo service desk +4 more +6 moreIBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323...6.5 Medium
- ibm maximo asset management, smartcloud control desk +1 moreIBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5...6.0 Medium
- ibm maximo asset management, smartcloud control desk +1 moreIBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and...3.5 Low
- ibm change and configuration management database, maximo asset management, maximo service desk +4 more +6 moreSQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837...6.5 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not include...5.0 Medium
- Show moreLoading…