CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- samsung security managerSamsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by...10.0 High
- sonicwall remote access firmwareCross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure...6.8 Medium
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the...2.1 Low
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny...6.8 Medium
- kozos easyctfEasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain...5.0 Medium
- kozos easyctfCross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users...3.5 Low
- kozos easyctfEasyCTF before 1.4 allows remote authenticated users to write executable content to files via...6.5 Medium
- cisco starosThe session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000...5.0 Medium
- emc rsa identity management and governanceEMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not...7.5 High
- gnu libtasn1, fedoraproject fedora, opensuse +2 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote...4.3 Medium
- realtek sdk, aterm w1200ex-ms firmware, w1200ex firmware +23 more +25 moreThe miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a...9.8 Critical