CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- infocus in3128hd firmwareThe InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi...9.4 High
- infocus in3128hd firmwareThe InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass...10.0 High
- freebsdThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1...6.5 Medium
- cisco web security applianceCross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security...4.3 Medium
- cisco unified customer voice portalCross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5...6.8 Medium
- rockwellautomation rslinxStack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00...6.9 Medium
- wouter verhelst nbd, canonical ubuntu linux +1 morenbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...7.8 High
- cisco wide area application servicesThe SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to...5.0 Medium
- cisco secure access control serverCross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine ...4.3 Medium
- cisco wireless lan controller softwareThe web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7...6.8 Medium
- cisco wireless lan controller softwareThe wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x...6.1 Medium
- cisco unified communications managerCisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a...6.9 Medium
- cisco mediasenseCross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows...6.8 Medium
- cisco iosThe ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service ...6.1 Medium
- hancom hanword viewer 2007, hwp 2014, hwpviewer 2014 +1 more +3 moreInteger overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as...7.5 High
- rest-client project rest-clientrest-client Gem Vulnerable to Session Fixation9.8 Critical
- concrete5concrete5 vulnerable to Cross-site Scripting4.3 Medium
- wpsymposium wp symposiumSQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress...7.5 High
- concrete5Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote...4.3 Medium
- cisco email security appliance firmwareMultiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8...4.3 Medium
- cisco secure access control systemCross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows...4.3 Medium
- cisco security managerCross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0...4.3 Medium
- cisco headend digital broadband delivery systemMultiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital...4.3 Medium
- cisco webex meetings serverCross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings...4.3 Medium
- mcafee epo deep commandMultiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2)...7.2 High
- thecartpress ecommerce shopping cartCross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka...4.3 Medium
- fedora pacemaker configuration systemThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set...4.3 Medium
- thecartpress ecommerce shopping cartDirectory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The...4.0 Medium
- thecartpress ecommerce shopping cartMultiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart ...4.3 Medium
- fedora pacemaker configuration system, redhat enterprise linux high availability, enterprise linux high availability eus +2 more +4 moreThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an...6.8 Medium
- clip-bucket clipbucketMultiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote...7.5 High
- mozilla firefoxThe update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the...4.4 Medium
- mozilla firefoxMozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android...2.1 Low
- stunnelStunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections...5.8 Medium
- yiiframeworkYii Framework Cross-site Scripting Vulnerability4.3 Medium
- trend micro scanmailTrend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before...5.0 Medium
- y-cam ycbl03, ycblb3, ycw004 +15 more +17 moreMultiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003,...3.5 Low
- y-cam ycbl03, ycblb3, ycw004 +15 more +17 moreY-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall...6.8 Medium
- y-cam ycbl03, ycblb3, ycw004 +15 more +17 moreY-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall...5.0 Medium
- dcraw project dcraw, fedoraproject fedora +1 moreInteger overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to...4.3 Medium
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- adobe acrobat, microsoft windows, adobe acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow...10.0 High
- Show moreLoading…