Archive
May 2015
Vulnerabilities first published in this month (UTC), newest first.
410 results · Feed
-
Unscored —
The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP …
-
Unscored —
The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remot…
-
Unscored —
The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) …
-
Unscored —CVE-2015-1896 EPSS 31%
Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Mas…
-
Unscored —
Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attac…
-
Unscored —
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allow…
-
Unscored —
IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillmen…
-
Unscored —
Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which a…
-
Unscored —
The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authent…
-
Unscored —
SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbit…
-
Unscored —
The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API…
-
Unscored —CVE-2015-4018 Public exploit
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin…
-
Unscored —CVE-2012-1978 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attacker…
-
Unscored —
Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attacker…
-
Unscored —
Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication, change c…
-
Unscored —
The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC…
-
Unscored —
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in …
-
Low 3.7
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…
-
Unscored —CVE-2015-3141 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier…
-
Unscored —CVE-2012-4902 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to …
-
Unscored —CVE-2012-4901 Public exploit
Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary …
-
Unscored —
The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware be…
-
Unscored —
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a…
-
Unscored —
Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local…
-
Unscored —
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote …
-
Unscored —CVE-2012-1665 Public exploit
Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute …
-
Unscored —CVE-2012-1664 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary…
-
Unscored —
The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticate…
-
Unscored —CVE-2015-1265 Public exploit
Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to …
-
Unscored —
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows r…
-
Unscored —
PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attacker…