CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- horde application frameworkThe framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1...7.5 High
- light speed gaming mumble, mumblekit +1 moreThe needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre...7.5 High
- light speed gaming mumbleThe opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre...5.0 Medium
- openldap, debian linux +1 moreThe rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which...4.3 Medium
- systemtapSystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows...5.4 Medium
- kde ark, canonical ubuntu linux, kde sc +1 more +3 moreDirectory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and...6.8 Medium
- fortinet fortiwebCross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard...3.5 Low
- csounds csoundStack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2,...9.3 High
- csounds csoundInteger overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when...9.3 High
- csounds csoundInteger overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting...9.3 High
- rapid7 nexposeCross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4...6.8 Medium
- otrsMultiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2)...6.8 Medium
- otrsSQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in...7.5 High
- dest-unreach socat, fedoraproject fedora, opensuse +2 moreStack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows...1.9 Low
- trendnet tew-812druTRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via...8.5 High
- trendnet tew-812dru, tew-812dru firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with...6.8 Medium
- ibm general parallel file systemIBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows...4.0 Medium
- cisco unified communications managerCisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local...6.0 Medium
- zte zxv10 w300The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with...9.3 High
- seowonintech swc-9100cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a...7.8 High
- fortinet fortiosCross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5...4.3 Medium
- fortinet fortiwebCross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows...4.3 Medium
- seowonintech swc-9100The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote...8.3 High
- gatehouse, harris bgan, hughes network systems 9201 +6 more +8 moreThe firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network...10.0 High
- gatehouse, harris bgan, hughes network systems 9201 +6 more +8 moreThe firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network...10.0 High
- lexmark c52x, c53x, c920 +6 more +8 moreMultiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x...3.5 Low
- lexmark 25xxn, c52x, c53x +20 more +22 morecgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through...10.0 High
- ibm infosphere master data management server for product information management, infosphere master data management collaboration server +1 moreCross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management -...6.8 Medium
- codeaurora android-msm, qualcomm quic mobile station modem kernel +1 moreThe MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC)...4.9 Medium
- codeaurora android-msm, qualcomm quic mobile station modem kernel +1 moreMultiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used...7.2 High
- torproject torTor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure...5.0 Medium
- torproject torTor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure...5.0 Medium
- openbsd opensshssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand...2.1 Low
- pidginInteger overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin...7.5 High
- elggCross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x...4.3 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 5 for rhel 6, jboss enterprise application platform 7 +2 more +4 moreJboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissions5.5 Medium
- craig drummond cantataCantata before 1.2.2 does not restrict access to files in the play queue, which allows remote...5.0 Medium
- craig drummond cantataAbsolute path traversal vulnerability in cantata before 1.2.2 allows local users to read...5.0 Medium
- ibm financial transaction managerThe OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly...5.5 Medium
- ibm financial transaction managerMultiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC...3.5 Low
- ibm financial transaction managerCross-site request forgery (CSRF) vulnerability in the OAC component in IBM Financial Transaction...6.8 Medium
- ibm financial transaction managerDirectory traversal vulnerability in the table-export implementation in the OAC component in IBM...4.0 Medium
- kent-web joyful noteCross-site scripting (XSS) vulnerability in KENT-WEB Joyful Note 2.8 and earlier, when Internet...4.3 Medium
- fail2banconfig/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote...5.0 Medium
- fail2banconfig/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote...5.0 Medium
- ibm spss samplepowerUnspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before...9.3 High
- ibm spss collaboration and deployment servicesThe server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5...5.0 Medium
- openstack oslo, redhat openstack +1 moreThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...4.3 Medium