CVEs published in May 2015
411 vulnerabilities, 93 critical, 4 exploited.
- ibm license metric tool, tivoli asset discovery for distributed, endpoint manager family +2 moreCommon Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9;...5.0 Medium
- ibm curam social program managementCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before...3.5 Low
- ibm workload deployerThe log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain...5.0 Medium
- ibm license metric tool, endpoint manager family +1 moreIBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before...4.3 Medium
- ibm license metric tool, endpoint manager family +1 moreCross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9...6.8 Medium
- mit kerberos 5The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not...5.8 Medium
- ibm websphere portalOpen redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before...6.4 Medium
- ibm endpoint manager familyThe Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle...4.3 Medium
- ibm sterling field sales, sterling order management, sterling selling and fulfillment foundation +2 moreCross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling...4.3 Medium
- ibm infosphere master data management serverCross-site scripting (XSS) vulnerability in the Reference Data Management component in the server...3.5 Low
- ibm infosphere master data management serverThe XML parser in the Reference Data Management component in the server in IBM InfoSphere Master...5.0 Medium
- ibm websphere portalIBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU...7.8 High
- ibm tivoli storage manager fastbackStack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6...10.0 High
- ibm optim workload replayIBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify...5.0 Medium
- ibm optim workload replayCross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x...6.8 Medium
- cisco telepresence tc software, telepresence te software +1 moreThe network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC...7.8 High
- cisco telepresence advanced media gateway, telepresence ip gateway, telepresence mcu software +7 more +9 moreThe web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40),...9.0 High
- cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement...8.3 High
zendframeworkDebianzendframework - regression updateNo score- cisco hosted collaboration solutionThe administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier...6.5 Medium
- qemuThe slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with...1.9 Low
- wouter verhelst nbdThe modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows...7.8 High
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...7.8 High
- postgresql, canonical ubuntu linux, debian linux +2 morecontrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreThe snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...9.8 Critical
- postgresql, apple mac os x server, canonical ubuntu linux +1 more +3 moreDouble free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11,...4.3 Medium
- cactiSQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users...6.5 Medium
- rakus maildealerCross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote...4.3 Medium
- cisco secure access control serverThe REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a...5.0 Medium
- feedwordpress project feedwordpressSQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin...6.5 Medium
- wppa.opajaap wp-photo-album-plusMultiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album...4.3 Medium
- simple php agenda project php agendaMultiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier...6.8 Medium
- huawei webui, e355s mobile wifi firmware +1 moreHuawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625...5.0 Medium
- huawei e587 mobile wifi firmwareHuawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass...9.0 High
- canonical ubuntu linuxRace condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14...7.0 High
- canonical ubuntu linuxApport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged...7.8 High
- cisco adaptive security appliance softwareThe Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA)...5.0 Medium
- cisco hosted collaboration solutionMultiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted...6.8 Medium
- kcodes netusbStack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the...10.0 High
- synametrics xeamsMultiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5...6.8 Medium
- template cms project cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier...6.8 Medium
- template cms project cmsCross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote...4.3 Medium
- valvesoftware steam clientThe client detection protocol in Valve Steam allows remote attackers to cause a denial of service...5.0 Medium
- piriform ccleanerPiriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting...2.1 Low
- sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before...9.0 High
- swisscom centro grande firmwareThe certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL...7.5 High
- oscmaxMultiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2...6.8 Medium
- seogentoCross-site scripting (XSS) vulnerability in the SEOgento plugin for Magento allows remote...4.3 Medium
- oscmaxMultiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote...7.5 High
- oscmaxMultiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1...4.3 Medium
- Show moreLoading…