CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms5.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.5.5 Medium
- redhat spacewalk, network satellite +1 moreCross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...4.3 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter6.5 Medium
- pidginThe IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts,...5.0 Medium
- pidginThe SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an...10.0 High
- pidginInteger signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote...5.0 Medium
- pidginBuffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to...5.0 Medium
- pidginThe STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers...5.0 Medium
- pidginThe XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether...6.4 Medium
- pidginPidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer...5.0 Medium
- pidginlibpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a...5.0 Medium
- pidginutil.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses...5.0 Medium
- pidgingtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support...4.3 Medium
- pidginMultiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to...5.0 Medium
- pidginThe Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8...5.0 Medium
- easyxdmCross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote...4.3 Medium
- aloaha pdf suite free, aloahapdfviewer +1 moreStack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE...9.3 High
- xarayaMultiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote...4.3 Medium
- jetaudioStack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to...9.3 High
- mediaelementjs mediaelement.js, owncloud server +1 moreCross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11...4.3 Medium
- kolja schleich leaguemanagerSQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for...7.5 High
- geeklogCross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog...4.3 Medium
- glfusionMultiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote...4.3 Medium
- linux kernel, oracle linux, canonical ubuntu linux +8 more +10 moreThe d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain...5.5 Medium
- debian linux, linux kernel, opensuse evergreen +2 more +4 moreThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2...7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +3 more +5 moreThe paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an...3.3 Low
- linux kernel, opensuse evergreen, suse linux enterprise server +2 morekernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private...7.8 High
- linux kernelThe parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16...4.0 Medium
- linux kernelStack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock...4.0 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 more** DISPUTED ** Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 morearch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 morearch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 morearch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does...5.5 Medium
- linux kernel, canonical ubuntu linux, opensuse evergreen +2 more +4 moreThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1...4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreBuffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the...6.9 Medium
- linux kernelMultiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid...6.9 Medium
- debian linux, linux kernel +1 moreInteger overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3...6.9 Medium
- linux kernel, oracle linux, suse linux enterprise high availability extension +2 more +4 moreRace condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote...7.1 High
- linux kernel, opensuse, suse linux enterprise server +2 moreThe ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not...6.1 Medium
- linux kernelarch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not...4.9 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise high availability extension +2 more +4 moreThe media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel...2.1 Low
- linux kernel, opensuse evergreen, suse linux enterprise server +2 moreUse-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel...2.9 Low
- linux kerneldrivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does...5.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreThe cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not...7.2 High
- redhat enterprise linuxThe get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel...5.5 Medium
- rockwell automation rslogix 5000 software, rockwellautomation rslogix 5000 design and configuration software +1 moreRockwell RSLogix 5000 Insufficiently Protected Credentials6.3
- adobe flash player, google chrome, opensuse +6 more +8 moreInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0...9.8 Critical
- devscripts devel team devscriptsDirectory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to...5.0 Medium
- Show moreLoading…