CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- fuse project fuse, debian linux +1 morefusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1)...3.6 Low
- ibm dominoStack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3...10.0 High
- ibm dominoStack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3...10.0 High
- google chrome, debian linux +1 moreCross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user...4.3 Medium
- google chrome, debian linux +1 moreThe Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS...4.3 Medium
- google chrome, debian linux +1 moreandroid/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43...5.0 Medium
- google chrome, debian linux +1 morePDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which...7.5 High
- google chrome, debian linux +1 morecommon/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech...6.8 Medium
- ibm websphere mqThe cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2...4.0 Medium
- ibm license metric tool, tivoli asset discovery for distributed +1 moreThe server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset...6.4 Medium
- ibm license metric toolIBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for...2.1 Low
- ibm websphere commerceThe command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and...2.1 Low
- google chrome, v8 +1 moreMultiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome...7.5 High
- zend frameworkZenario CMS vulnerable to CRLF injection6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0...10.0 High
- google chrome, debian linux +1 moreMultiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to...7.5 High
- google chrome, debian linux +1 moreplatform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65,...7.5 High
- google chrome, debian linux +1 moreMultiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in...7.5 High
- google chrome, debian linux +1 moreGoogle Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate -...7.5 High
- google chrome, debian linux +1 moreplatform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the...6.8 Medium
- google chrome, debian linux +1 morecore/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the...5.0 Medium
- google chrome, debian linux +1 morecore/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google...7.5 High
- cisco unified intelligence centerCross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1)...6.8 Medium
- openstack horizon, oracle solaris +1 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0...3.5 Low
- unzoounzoo allows remote attackers to cause a denial of service (infinite loop and resource...7.8 High
- unzooBuffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute...10.0 High
- redhat kexec-toolsThe Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0...3.6 Low
- cisco firesight system softwareThe Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on...4.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 morePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 High
- phpmyadminlibraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x...4.3 Medium
- phpmyadminMultiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0...6.8 Medium
- moodleMoodle allows attackers to bypass file-management restrictions4.0 Medium
- moodleMoodle allows attackers to obtain sensitive course-structure information4.0 Medium
- moodleMoodle allows attackers to bypass intended login restrictions3.5 Low
- moodleMoodle cross-site scripting (XSS) vulnerability3.5 Low
- moodleMoodle allows attackers obtain full-name information4.3 Medium
- moodleMoodle Arbitrary Redirect5.8 Medium
- moodleMoodle does not set the RISK_XSS bit for graders3.5 Low
- ffmpeg, canonical ubuntu linux +1 moreThe ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...6.8 Medium
- dockerArbitrary File Override in Docker Engine3.6 Low
- dockerInformation Exposure in Docker Engine7.2 High
- docker libcontainer, opensuse +1 moreArbitrary File Write in Libcontainer7.8 High
- docker, docker libcontainer +1 moreSymlink Attack in Libcontainer and Docker Engine7.2 High
- proftpd, debian linux, fedoraproject fedora +2 more +4 moreThe mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files...10.0 High
- realmd project realmdrealmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf...5.0 Medium
- gns3Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a...7.2 High
- huawei seq analystXML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022...4.0 Medium
- Show moreLoading…