CVEs published in January 2014
517 vulnerabilities, 56 critical, 1 exploited.
- redhat libvirtlibvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and...4.3 Medium
- redhat libvirtThe libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...5.2 Medium
- redhat enterprise virtualization managerThe remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a...4.3 Medium
- apache hadoopImproper Authentication in Apache Hadoop3.2 Low
- almanah project almanahAlmanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local...2.1 Low
- redhat certificate system, dogtag certificate system +1 moreFormat string vulnerability in the token processing system (pki-tps) in Red Hat Certificate...7.5 High
- redhat certificate system, dogtag certificate system +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in...4.3 Medium
- apple pages, iphone os, mac os x +2 moreDouble free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote...7.5 High
- gapless player simzipDirectory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer)...4.3 Medium
- cs-cartMultiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote...4.3 Medium
- gitlabCross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows...4.3 Medium
- gomlab gom playerGretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of...4.3 Medium
- tejimaya openpneThe "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user...7.5 High
- cisco video surveillance operations managerCisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL...6.8 Medium
- avanset visual certexam managerMultiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow...6.5 Medium
- emerson network power avocent mergepoint unity 2016 firmwareDirectory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka...5.0 Medium
- thecus n8800 nas server, n8800 nas server firmware +1 moreThe Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative...7.8 High
- thecus n8800 nas server, n8800 nas server firmware +1 moreThe ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote...7.8 High
- thecus n8800 nas server, n8800 nas server firmware +1 moreThe Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary...10.0 High
- openstack novaOpenStack Nova live snapshots use an insecure local directory3.3 Low
- live555 streaming media, videolan vlc media player +1 moreThe parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used...7.5 High
- live555 streaming mediaThe parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through...7.5 High
- apple itunesApple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the...5.8 Medium
- adobe digital editionsAdobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of...10.0 High
- ibm tivoli storage managerThe client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve...2.1 Low
- nec ip38x 1000, ip38x 105, ip38x 107e +9 more +11 moreThe OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the...6.8 Medium
- juniper junos, junose, screenos +2 moreThe OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does...5.4 Medium
- enterasys c5, g3, k10 +6 more +8 moreThe OSPF implementation on Enterasys switches and routers does not consider the possibility of...5.4 Medium
- checkpoint gaia os, ipso os +1 moreThe OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does...5.4 Medium
- yamaha fwx120, rt105, rt107e +11 more +13 moreThe OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link...5.4 Medium
- extremenetworks exosThe OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate...5.4 Medium
- dlink des-3810-28, des-3810-28 firmware +1 moreThe OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not...5.4 Medium
- brocade vyatta vrouter, vyatta vrouter software +1 moreThe OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not...5.4 Medium
- brocade adx, bigiron rx, fastiron +8 more +10 moreThe OSPF implementation on Brocade routers does not consider the possibility of duplicate Link...5.4 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows...4.3 Medium
- cisco telepresence video communication serverThe Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same...6.4 Medium
- lightdm gtk\+ greeter project gtk\+ greeter, opensuse +1 moreThe start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1...2.1 Low
- redhat cloudforms, cloudforms 3.0 management engine +1 moreCloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on...6.8 Medium
denyhostsDebiandenyhosts - denyhosts regression updateNo score- redhat jboss seam 2 frameworkThe InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier...5.0 Medium
- redhat jboss seam 2 frameworkMultiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler,...5.0 Medium
- augeasThe transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly...4.6 Medium
- ec-cube co.,ltd. ec-cube, s‑cubism inc. ec-orange +1 moreEC-CUBE vulnerable to authorization bypass5.0 Medium
- lockon ec-cubedata/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2...6.4 Medium
- fenrir-inc sleipnir mobileThe Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application...4.3 Medium
- cisco nx-osThe Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to...5.0 Medium
- cisco nx-osCisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of...6.8 Medium
- cisco telepresence video communication server software, telepresence video communication servers software +1 moreThe SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote...7.1 High
- cisco telepresence system 500-37, telepresence system 1000, telepresence system 1100 +11 more +13 moreThe System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65,...8.3 High
- cisco telepresence isdn gateway softwareCisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a...7.1 High
- Show moreLoading…