# CVEs published 2015-05-08

13 CVEs were published on May 8, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9716](https://cve.now/CVE-2014-9716.md): Cross-site scripting (XSS) vulnerability in WebODF before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via a file… (no CVSS)
- [CVE-2015-2347](https://cve.now/CVE-2015-2347.md): Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2015-3011](https://cve.now/CVE-2015-3011.md): Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x… (no CVSS)
- [CVE-2015-3012](https://cve.now/CVE-2015-3012.md): Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject… (no CVSS)
- [CVE-2015-3013](https://cve.now/CVE-2015-3013.md): ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and… (no CVSS)
- [CVE-2015-3294](https://cve.now/CVE-2015-3294.md): The tcp\_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup\_reply function, which allows… (no CVSS)
- [CVE-2014-0919](https://cve.now/CVE-2014-0919.md): IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring… (no CVSS)
- [CVE-2015-1907](https://cve.now/CVE-2015-1907.md): The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to… (no CVSS)
- [CVE-2015-1152](https://cve.now/CVE-2015-1152.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or… (no CVSS)
- [CVE-2015-1153](https://cve.now/CVE-2015-1153.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or… (no CVSS)
- [CVE-2015-1154](https://cve.now/CVE-2015-1154.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or… (no CVSS)
- [CVE-2015-1155](https://cve.now/CVE-2015-1155.md): The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote… (no CVSS)
- [CVE-2015-1156](https://cve.now/CVE-2015-1156.md): The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.