CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- microsoft internet explorer, vbscript +1 moreVBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8...4.3 Medium
- microsoft officeMicrosoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted...9.3 High
- microsoft excel, excel web app, office +6 more +8 moreMicrosoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1,...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...1.9 Low
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server...2.1 Low
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...9.3 High
- microsoft windows 8, windows 8.1, windows rt +2 more +4 moreThe kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT...4.6 Medium
- microsoft .net frameworkThe Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5...9.3 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to...5.0 Medium
- microsoft .net framework, live meeting, lync +2 more +4 moreThe Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,...9.3 High
- microsoft .net frameworkThe Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreMultiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x...10.0 High
- mozilla firefox, opensuse +1 moreThe WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the...4.3 Medium
- mozilla firefox, opensuse +1 moreInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...6.8 Medium
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...7.5 High
- mozilla firefox, opensuse +1 moreRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...6.8 Medium
- mozilla firefox, opensuse +1 moreThe asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths...7.5 High
- mozilla firefox, opensuse +1 moreMozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...6.8 Medium
- mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow...7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...7.5 High
- sap netweaver rfc sdkSAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors,...5.0 Medium
- sap customer relationship managementSQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows...7.5 High
- sap customer relationship managementUnspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows...7.5 High
- sap sybase unwired platform online data proxySAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and...2.1 Low
testdiskMageiaUpdated testdisk packages fix security vulnerabilitiesNo scorehostapdMageiaUpdated hostapd packages fix a security vulnerabilityNo scorenetcfMageiaUpdated netcf packages fix security vulnerabilitiesNo score- openstack keystone, oracle solaris +1 moreOpenStack Keystone Logs Passwords4.0 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet...4.3 Medium
- goautodial goadmin ceThe cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote...10.0 High
- goautodial goadmin ceThe cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote...10.0 High
- goautodial goadmin ceMultiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow...7.5 High
- goautodial goadmin ceUnrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files)...10.0 High
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53...7.8 High
- lenovo system updateRace condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034...6.9 Medium
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly...8.3 High
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable...7.2 High
- fortinet fortiosCross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x...4.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM,...4.3 Medium
- fortinet fortiwebCross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb...4.3 Medium
- fortinet fortiadc-1500d, fortiadc-2000d, fortiadc-200d +3 more +5 moreCross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models...4.3 Medium
- fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow...4.3 Medium
- python-dbusmock project python-dbusmockpython-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp5.7 Medium
- Show moreLoading…