# CVEs published 2015-05-08

13 CVEs were published on May 8, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9716](https://cve.now/CVE-2014-9716.md): Cross-site scripting (XSS) vulnerability in WebODF before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via a file na (no CVSS)
- [CVE-2015-2347](https://cve.now/CVE-2015-2347.md): Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2015-3011](https://cve.now/CVE-2015-3011.md): Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x befo (no CVSS)
- [CVE-2015-3012](https://cve.now/CVE-2015-3012.md): Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-3013](https://cve.now/CVE-2015-3013.md): ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upl (no CVSS)
- [CVE-2015-3294](https://cve.now/CVE-2015-3294.md): The tcp\_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup\_reply function, which allows remot (no CVSS)
- [CVE-2014-0919](https://cve.now/CVE-2014-0919.md): IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and (no CVSS)
- [CVE-2015-1907](https://cve.now/CVE-2015-1907.md): The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to re (no CVSS)
- [CVE-2015-1152](https://cve.now/CVE-2015-1152.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1153](https://cve.now/CVE-2015-1153.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1154](https://cve.now/CVE-2015-1154.md): WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-1155](https://cve.now/CVE-2015-1155.md): The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers (no CVSS)
- [CVE-2015-1156](https://cve.now/CVE-2015-1156.md): The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly h (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.