CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:08 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-4962 | RC Rational Collaborative Lifecycle Management Ibm | 3.5 | Jan 3 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational… |
| CVE-2015-4946 | RC Rational Collaborative Lifecycle Management Ibm | 3.3 | Jan 3 | Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x… |
| CVE-2015-7436 | TC Tivoli Common Reporting Ibm | 2.5 | Jan 2 | IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and… |
| CVE-2015-7435 | TC Tivoli Common Reporting Ibm | 2.5 | Jan 2 | IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and… |
| CVE-2015-4989 | TC Tealeaf Customer Experience Ibm | 3.7 | Jan 2 | The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095,… |
| CVE-2015-7421 | MA MQ Appliance M2000 Ibm | 3.7 | Jan 1 | Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability… |
| CVE-2015-7420 | MA MQ Appliance M2000 Ibm | 3.7 | Jan 1 | Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability… |
| CVE-2014-4876 | 4O 4690 Operating System Toshiba | 3.7 | Dec 31 | Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows remote attackers to read potentially sensitive system environment… |
| CVE-2015-8569 | KE Kernel Linux | 2.3 | Dec 28 | The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain… |
| CVE-2015-7885 | KE Kernel Linux | 2.3 | Dec 28 | The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to… |
| CVE-2015-7884 | KE Kernel Linux | 2.3 | Dec 28 | The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users… |
| CVE-2015-8253 | FP Frontel Protocol Rsi Video Technologies | 3.7 | Dec 27 | The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain… |
| CVE-2015-4000 | IO iOS Apple | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… |
| CVE-2015-2808 | UL Ubuntu Linux Canonical | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… |
| CVE-2014-8134 | KE Kernel Linux | 3.3 | Dec 12 | The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier… |
| CVE-2014-3566 | MO Mac OS X Apple | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… |
| CVE-2014-4407 | IO iOS Apple | 3.3 | Sep 18 | IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an… |
| CVE-2013-2423 In wildKEV | UL Ubuntu Linux Canonical | 3.7 | Apr 17 | Oracle JRE Unspecified Vulnerability |
| CVE-2013-0431 RansomwareIn wildKEV | JR Jre Oracle | 3.7 | Jan 31 | Oracle JRE Sandbox Bypass Vulnerability |
| CVE-2010-1324 | K5 Kerberos 5 Mit | 3.7 | Dec 2 | MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain… |
| CVE-2010-1323 | KE Kerberos Mit | 3.7 | Dec 2 | MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers… |
| CVE-2008-5161 | OP Openssh Openbsd | 3.7 | Nov 19 | Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and… |
| CVE-2005-4780 | Product not mapped yet | 3.7 | Dec 31 | Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a… |
| CVE-2005-0254 | BI Biborb Guillaumegardey | 3.7 | May 2 | BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files… |
| CVE-2002-1869 | EV Eventsave Heysoft | 3.3 | Dec 31 | Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being… |