Archive
May 2014
Vulnerabilities first published in this month (UTC), newest first.
550 results · Feed
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
Unscored —
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain pr…
-
Unscored —
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a d…
-
Unscored —
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a d…
-
Unscored —
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (devic…
-
Unscored —
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote a…
-
Unscored —
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated user…
-
Unscored —
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (devic…
-
Unscored —
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x…
-
Unscored —
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial po…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
High 7.5
Transifex command-line client has improper certificate validation
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an inco…
-
Unscored —
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers…
-
Unscored —
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and cras…
-
Unscored —
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determin…
-
Unscored —
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for th…
-
Unscored —CVE-2014-3138 Public exploit
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x be…
-
Unscored —
The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows…
-
Unscored —
IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.…
-
Unscored —
The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x befo…
-
Unscored —
The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 be…
-
Unscored —
IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive…
-
Unscored —
Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.…
-
Unscored —
The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 …
-
Unscored —
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citri…
-
Unscored —
Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler…
-
High 7.5
Ecava IntegraXor Information Exposure
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.