CVEs published in January 2014
517 vulnerabilities, 56 critical, 1 exploited.
- schneider-electric telvent sage 3030 firmware The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500... 5.0 Medium
- tableausoftware tableau server SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows... 7.5 High
- steve souza java application monitor Improper Neutralization of Input During Web Page Generation in JAMon 4.3 Medium
- ideamk eps viewer Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers... 9.3 High
- dennis bruecke jquery countdown Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1... 2.1 Low
- 3s-software codesys runtime toolkit, codesys runtime toolkit +1 more Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference 7.1
- ibm sametime The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly... 5.0 Medium
- mariadb, oracle mysql, redhat enterprise linux +3 more +5 more Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote... 7.5 High
- pyyaml libyaml, canonical ubuntu linux, debian linux +3 more +5 more Heap Based Buffer Overflow in libyaml 6.8 Medium
- mediawiki MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF... 6.0 Medium
- spip Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires... 4.3 Medium
- stackideas komento Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before... 4.3 Medium
- media5 mediatrix voip gateway, mediatrix voip gateway 4402 firmware +1 more Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5... 4.3 Medium
- anonymous posting project posting Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for... 4.3 Medium
- stackideas komento Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento)... 4.3 Medium
- daum communications daumgame activex control Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1... 9.3 High
- belkin n300 Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers... 4.3 Medium
- belkin n900 Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers... 4.3 Medium
- belkin f5d8236-4 Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow... 4.3 Medium
- adobe acrobat, acrobat reader +1 more Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before... 10.0 High
- apache ofbiz Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in... 3.5 Low
- f5 big-ip access policy manager, big-ip analytics, big-ip application security manager +7 more +9 more Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM... 7.5 High
- ibm qradar security information and event manager The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote... 7.5 High
- ibm qradar security information and event manager The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509... 4.3 Medium
- ibm qradar security information and event manager Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows... 4.3 Medium
- ibm qradar security information and event manager Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier... 6.8 Medium
- skybluecanvas The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in... 6.8 Medium
- algosec firewall analyzer Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4... 4.3 Medium
- op5 monitor Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files... 5.0 Medium
- algosec firewall analyzer Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1... 4.3 Medium
- tripwire enterprise Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire... 4.3 Medium
- webhive timeline Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4... 6.5 Medium
- xibosignage xibo Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1... 6.8 Medium
- xibosignage xibo Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote... 4.3 Medium
- xibosignage xibo SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to... 7.5 High
- civicrm CiviCRM SQL injection vulnerability via Quick Search API 6.5 Medium
- civicrm CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access... 4.9 Medium
- courion access risk management suite The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows... 6.5 Medium
- zabbix libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x... 4.3 Medium
- cisco webex meetings server Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and ... 4.9 Medium
- cisco identity services engine software Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and... 4.3 Medium
- cisco identity services engine Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent... 4.3 Medium
- openbsd openssh The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to... 7.5 High
- haxx curl, libcurl +1 more cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re... 4.0 Medium
- justsystems sanshiro Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5,... 7.5 High
- cybozu garoon SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote... 6.5 Medium
- cybozu garoon SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through... 6.5 Medium
- ibm lotus quickr for domino Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5... 7.5 High
- ibm lotus quickr for domino Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5... 7.5 High
- ibm tivoli application dependency discovery manager The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2... 7.5 High
- Show olderLoading…