CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
libarchiveMageiaUpdated libarchive packages fix a security vulnerabilityNo scorepostgisMageiaUpdated postgis packages fix security vulnerabilitiesNo scoreruby-redcarpetMageiaUpdated ruby-redcarpet packages fix a security vulnerabilityNo scoreglpiMageiaUpdated glpi packages fix a security vulnerabilityNo score- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring Framework8.8 High
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http Client4.3 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http Client4.3 Medium
- zeromqlibzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks...4.3 Medium
linux-lts-utopicUbuntulinux-lts-utopic vulnerabilityNo scorelinuxUbuntulinux vulnerabilityNo score- openinfosecfoundation suricata, debian linux +1 moreThe DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service ...5.0 Medium
- huawei seq analystCross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022...4.3 Medium
- kogmbh webodfCross-site scripting (XSS) vulnerability in WebODF before 0.5.4 allows remote attackers to inject...4.3 Medium
- ibm rational license key serverThe Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1...4.0 Medium
- ibm db2IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of...4.0 Medium
- apple safari, iphone os +1 moreThe page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6...4.3 Medium
- apple safari, itunes +1 moreWebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows...6.8 Medium
- apple safari, iphone os, itunes +2 moreWebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows...6.8 Medium
- siemens homecontrol for room automationThe Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify...5.4 Medium
tcl-tcllibMageiaUpdated tcl-tcllib packages fix a security vulnerabilityNo score- cisco unity connectionCross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection...6.8 Medium
- cisco unity connectionSQL injection vulnerability in the administrative web interface in Cisco Unified Communications...6.5 Medium
- cisco unified computing system central softwareCisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands...10.0 High
- emc autostartftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to...9.3 High
- emc sourceone email managementEMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login...5.0 Medium
- apple safari, iphone os +1 moreThe history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and...4.3 Medium
- apple safari, iphone os, itunes +2 moreWebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows...6.8 Medium
qtwebkitMageia,qtwebkit5Mageia +1 moreUpdated qtwebkit packages fix security vulnerabilitiesNo score- gnu glibc, canonical ubuntu linux, debian linux +3 more +5 moreBuffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library ...6.8 Medium
- erlang erlang\/otp, opensuse, oracle solaris +2 moreErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...5.9 Medium
net-snmpMageiaUpdated net-snmp packages fix security vulnerabilitiesNo scorehiawathaMageia,polarsslMageia +1 moreUpdated polarssl & hiawatha packages fix security vulnerabilitiesNo score- squid-cache squid, fedoraproject fedora, oracle linux +1 more +3 moreSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...2.6 Low
- powerdns authoritative, recursor, fedoraproject fedora +2 moreThe label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x...7.8 High
- libuv project libuv, fedoraproject fedora, nodejs node.js +2 morelibuv before 0.10.34 does not properly drop group privileges, which allows context-dependent...10.0 High
- libssh, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh...7.5 High
- wordpress, debian linux +1 moreCross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1...4.3 Medium
- wordpress, debian linux +1 moreCross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf...4.3 Medium
- wordpress, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used...4.3 Medium
- fedoraproject 389 directory server, debian linux, fedoraproject fedora +2 more389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and...7.5 High
- pypa pip, debian linux, fedoraproject fedora +3 more +5 moreImproper Authentication in pip5.9 Medium
- cisco finesseMultiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10...4.3 Medium
- owncloud serverownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated...6.0 Medium
- kogmbh webodf, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud,...4.3 Medium
- owncloud, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud...3.5 Low
- snoopy, debian linux, redhat openstack +2 moreSnoopy allows remote attackers to execute arbitrary commands.9.8 Critical
- snoopy, nagios, redhat openstack +2 moreThe _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE...9.8 Critical
- foxitsoftware enterprise reader, foxit reader, phantompdf +2 moreFoxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a...5.0 Medium
- foxitsoftware enterprise reader, foxit reader, phantompdf +2 moreFoxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a...4.3 Medium
- alienvault unified security managementThe Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote...9.3 High
- Show moreLoading…