# CVEs published 2015-05-25

43 CVEs were published on May 25, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8146](https://cve.now/CVE-2014-8146.md): The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone (no CVSS)
- [CVE-2014-8147](https://cve.now/CVE-2014-8147.md): The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone (no CVSS)
- [CVE-2015-0961](https://cve.now/CVE-2015-0961.md): Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which a (no CVSS)
- [CVE-2015-0962](https://cve.now/CVE-2015-0962.md): Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate ac (no CVSS)
- [CVE-2015-0540](https://cve.now/CVE-2015-0540.md): SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote a (no CVSS)
- [CVE-2015-0935](https://cve.now/CVE-2015-0935.md): Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scr (no CVSS)
- [CVE-2015-2694](https://cve.now/CVE-2015-2694.md): The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has bee (no CVSS)
- [CVE-2015-2946](https://cve.now/CVE-2015-2946.md): Stack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2015-2110](https://cve.now/CVE-2015-2110.md): Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2015-2118](https://cve.now/CVE-2015-2118.md): Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x b (no CVSS)
- [CVE-2015-2121](https://cve.now/CVE-2015-2121.md): HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted (no CVSS)
- [CVE-2015-2123](https://cve.now/CVE-2015-2123.md): Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users (no CVSS)
- [CVE-2015-2945](https://cve.now/CVE-2015-2945.md): mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct P (no CVSS)
- [CVE-2014-4774](https://cve.now/CVE-2014-4774.md): Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Softw (no CVSS)
- [CVE-2014-4778](https://cve.now/CVE-2014-4778.md): IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP (no CVSS)
- [CVE-2014-6190](https://cve.now/CVE-2014-6190.md): The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for (no CVSS)
- [CVE-2014-6192](https://cve.now/CVE-2014-6192.md): Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 befo (no CVSS)
- [CVE-2014-8926](https://cve.now/CVE-2014-8926.md): Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis (no CVSS)
- [CVE-2014-8927](https://cve.now/CVE-2014-8927.md): Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis (no CVSS)
- [CVE-2015-0120](https://cve.now/CVE-2015-0120.md): Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote at (no CVSS)
- [CVE-2015-0140](https://cve.now/CVE-2015-0140.md): An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2015-0156](https://cve.now/CVE-2015-0156.md): Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x throu (no CVSS)
- [CVE-2015-0160](https://cve.now/CVE-2015-0160.md): IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to exec (no CVSS)
- [CVE-2015-0161](https://cve.now/CVE-2015-0161.md): SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows rem (no CVSS)
- [CVE-2015-0168](https://cve.now/CVE-2015-0168.md): Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1 (no CVSS)
- [CVE-2015-0169](https://cve.now/CVE-2015-0169.md): IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inje (no CVSS)
- [CVE-2015-0170](https://cve.now/CVE-2015-0170.md): IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive in (no CVSS)
- [CVE-2015-0171](https://cve.now/CVE-2015-0171.md): Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allo (no CVSS)
- [CVE-2015-0180](https://cve.now/CVE-2015-0180.md): The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended rest (no CVSS)
- [CVE-2015-2120](https://cve.now/CVE-2015-2120.md): Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated (no CVSS)
- [CVE-2015-2122](https://cve.now/CVE-2015-2122.md): The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to (no CVSS)
- [CVE-2014-2174](https://cve.now/CVE-2014-2174.md): Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attacker (no CVSS)
- [CVE-2015-0713](https://cve.now/CVE-2015-0713.md): The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Softwa (no CVSS)
- [CVE-2015-0722](https://cve.now/CVE-2015-0722.md): The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a (no CVSS)
- [CVE-2015-1894](https://cve.now/CVE-2015-1894.md): Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack (no CVSS)
- [CVE-2015-1895](https://cve.now/CVE-2015-1895.md): IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to (no CVSS)
- [CVE-2015-1896](https://cve.now/CVE-2015-1896.md): Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers (no CVSS)
- [CVE-2015-1899](https://cve.now/CVE-2015-1899.md): IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. (no CVSS)
- [CVE-2015-1909](https://cve.now/CVE-2015-1909.md): The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 (no CVSS)
- [CVE-2015-1910](https://cve.now/CVE-2015-1910.md): Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management ( (no CVSS)
- [CVE-2015-1911](https://cve.now/CVE-2015-1911.md): Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 be (no CVSS)
- [CVE-2015-1915](https://cve.now/CVE-2015-1915.md): The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before IF6 and 9.1.0 before (no CVSS)
- [CVE-2015-1921](https://cve.now/CVE-2015-1921.md): Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect user (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.