CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- ceph ceph-deploy ceph-deploy allows local users to obtain sensitive information by reading the file 2.1 Low
- ids nc854, nc856 +1 more Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows... 6.8 Medium
- netapp oncommand workflow automation The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up... 10.0 High
- zenphoto Cross-site scripting (XSS) vulnerability in ZenPhoto20 1.1.3 and earlier allows remote attackers... 4.3 Medium
- zenphoto Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows... 4.3 Medium
- rockwellautomation rsview32 Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt... 4.9 Medium
-
postgresql-9.1Debian postgresql-9.1 - regression update No score - sensiolabs symfony Symfony Incorrect Access Control 4.3 Medium
- blue coat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware, ssl visibility appliance sv3800 firmware +1 more +3 more The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x... 4.3 Medium
- blue coat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware, ssl visibility appliance sv3800 firmware +1 more +3 more The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x... 4.3 Medium
- blue coat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware, ssl visibility appliance sv3800 firmware +1 more +3 more The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x... 4.3 Medium
- blue coat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware, ssl visibility appliance sv3800 firmware +1 more +3 more Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800... 6.8 Medium
- blue coat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware, ssl visibility appliance sv3800 firmware +1 more +3 more Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL... 4.3 Medium
- synology cloud station client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X... 6.8 Medium
- ibm powervc IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does... 7.5 High
- ibm business process manager, websphere +1 more Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5... 3.5 Low
- ibm rational doors next generation, rational requirements composer +1 more IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS... 3.7 Low
- cisco unified meetingplace The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to... 4.0 Medium
- cisco headend system release, headend digital broadband delivery system, videoscape conductor +2 more Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to... 4.3 Medium
- cisco headend system release, headend digital broadband delivery system +1 more Cisco Headend System Release allows remote attackers to read temporary script files or archive... 5.0 Medium
- cisco dta control system, headend system release, headend digital broadband delivery system +2 more Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers... 7.8 High
- cisco headend system release, headend digital broadband delivery system +1 more Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP... 5.0 Medium
- cisco headend digital broadband delivery system CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in... 4.3 Medium
- fusionforge The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code... 10.0 High
- arcserve unified data protection The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to... 7.8 High
- arcserve udp, unified data protection (udp) +1 more Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to... 9.1 Critical
- dell netvault backup Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote... 10.0 High
- wavelink connectpro Heap-based buffer overflow in the TermProxy (WLTermProxyService.exe) service in Wavelink... 10.0 High
- wavelink terminal emulation Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal... 10.0 High
- visual mining netcharts server projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote... 10.0 High
- visualmining netcharts server Directory traversal vulnerability in saveFile.jsp in the development installation in Visual... 10.0 High
- sap hana SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary... 4.0 Medium
- sap hana The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00... 4.0 Medium
- apache jackrabbit Improper Input Validation in Apache Jackrabbit 6.4 Medium
- cisco identity services engine software The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not... 5.0 Medium
- cisco wireless lan controller Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to... 6.1 Medium
- cisco anyconnect secure mobility client The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect... 6.8 Medium
- cisco finesse Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause... 7.5 High
- cisco unified web and e-mail interaction manager SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web... 6.8 Medium
- cisco telepresence video communication server Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS)... 4.3 Medium
- cisco unified communications manager Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used,... 7.8 High
- ibm websphere commerce IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to... 2.1 Low
- avm fritz\!box AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in... 10.0 High
- milw0rm project clone script SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to... 7.5 High
- roomcloud Multiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin... 4.3 Medium
- phpwind Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to... 4.3 Medium
- phpwind Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users... 5.8 Medium
- reflex gallery project gallery Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex... 7.5 High
- arubanetworks clearpass policy manager Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager ... 3.5 Low
- church admin project admin Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress... 4.3 Medium
- Show olderLoading…