Skip to content
OpenAdvisories

Archive

26 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /26 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2012-6647

    The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have t…

    linux Debian
  • Unscored —
    CVE-2013-6714

    The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properl…

  • Unscored —
    CVE-2013-6713

    The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1…

  • Unscored —
    CVE-2014-0878

    The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edit…

  • Unscored —
    CVE-2014-3866 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in user_settings.php in Usercake 2.0.2 and earlier allow rem…

  • Unscored —
    CVE-2013-4016

    SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX…

  • Unscored —
    CVE-2013-6741

    IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control…

  • Unscored —
    CVE-2013-5464

    IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartC…

  • Unscored —
    CVE-2013-5465

    IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before…

  • Unscored —
    CVE-2013-5460

    IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.…

  • Unscored —
    CVE-2014-0893

    Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX00…

  • Unscored —
    CVE-2014-0824

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.…

  • Unscored —
    CVE-2014-0849

    IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x befor…

  • Unscored —
    CVE-2014-0825

    Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.2014…

  • Unscored —
    CVE-2013-2998

    frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 an…

  • Unscored —
    CVE-2012-3333

    CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7…

  • Unscored —
    CVE-2014-3867

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not include the HTTPOnly flag in a …

  • Unscored —
    CVE-2013-3981

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avat…

  • Unscored —
    CVE-2013-3984

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unsp…

  • Unscored —
    CVE-2013-3046

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-…

  • Unscored —
    CVE-2013-3975 Public exploit EPSS 13%

    Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remo…

  • Unscored —
    CVE-2013-3980

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2013-3977 Public exploit

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine whi…

  • Unscored —
    CVE-2013-3982 Public exploit EPSS 13%

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspec…

  • Unscored —
    CVE-2014-0906

    The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie …

  • Unscored —
    CVE-2014-3014

    Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.…