CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
-
mariadbMageia Updated mariadb packages provide the latest release in the 5.5 series No score - ffmpeg The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat... 6.8 Medium
- sas base sas Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS... 9.3 High
- canonical ubuntu linux, debian advanced package tool +1 more methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails... 2.6 Low
- modx revolution Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX... 4.3 Medium
- jenkins Jenkins cross-site scripting (XSS) vulnerability 3.5 Low
- jenkins Jenkins directory traversal vulnerability 6.5 Medium
- buddypress Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress... 4.3 Medium
- otrs Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20... 4.3 Medium
- openwebanalytics open web analytics Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5... 4.3 Medium
- simplehrm SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in... 7.5 High
- ibm content navigator Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002... 3.5 Low
- schneider electric tlxcdlfofs33, tlxcdltofs33, tlxcdluofs33 +8 more +10 more Schneider Electric OFS Stack Buffer Overflow 6.8
- schneider electric floating license manager Schneider Electric Floating License Manager Unquoted Search Path or Element 6.9
- icinga, nagios +1 more Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0... 5.0 Medium
- imapsync project imapsync imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a... 4.3 Medium
- cisco intrusion prevention system Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of... 6.8 Medium
- ibm content navigator IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass... 3.5 Low
- cisco prime infrastructure Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2... 9.0 High
- libpng The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through... 5.0 Medium
- i-doit Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows... 4.3 Medium
- interworx web control panel Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx... 4.3 Medium
- adrotateplugin adrotate SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3... 7.5 High
- i-doit SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i... 7.5 High
- telligent evolution Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution... 4.3 Medium
- emberjs ember.js ember-source Cross-site Scripting vulnerability 2.6 Low
- tibco enterprise administrator, enterprise administrator sdk +1 more TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly... 10.0 High
- cisco unified contact center express editor software Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the... 4.0 Medium
- riken xoonips Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows... 4.3 Medium
- 7andi-fs.co denny\'s The Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL... 5.8 Medium
- apple safari, webkit, mac os x +1 more +3 more WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to... 6.8 Medium
- apple safari, webkit, mac os x +1 more +3 more WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to... 6.8 Medium
- apple safari, webkit, mac os x +1 more +3 more WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to... 6.8 Medium
- apple mac os x, mac os x server +1 more The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local... 4.6 Medium
- apple mac os x Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL... 3.3 Low
- apple mac os x curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used... 4.3 Medium
- apple mac os x Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox... 7.5 High
- apple mac os x Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to... 7.5 High
- apple mac os x QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause... 6.8 Medium
- apple mac os x, mac os x server +1 more Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute... 6.8 Medium
- apple mac os x Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers... 6.8 Medium
- apple mac os x CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action... 3.6 Low
- apple mac os x, mac os x server +1 more Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to... 7.5 High
- apple mac os x Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the... 7.5 High
- apple mac os x Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute... 6.8 Medium
- apple quicktime Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code... 9.3 High
- apple quicktime Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows... 9.3 High
- apple quicktime Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code... 9.3 High
- apple quicktime Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code... 9.3 High
- apple quicktime Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial... 9.3 High
- Show olderLoading…