CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- roundcube webmailAbsolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7...5.0 Medium
- gajimThe _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify...4.3 Medium
- libcapThe capsh program in libcap before 2.22 does not change the current working directory when the -...4.6 Medium
- matthew booth virt-v2v, redhat enterprise linux +1 morevirt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which...4.4 Medium
- doug poulin command school student management systemMultiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management...6.8 Medium
- doug poulin command school student management systemMultiple cross-site scripting (XSS) vulnerabilities in Command School Student Management System 1...4.3 Medium
- siemens simatic wincc open architectureSiemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of...5.0 Medium
- siemens simatic wincc open architectureDirectory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows...5.0 Medium
- siemens simatic wincc open architectureThe integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote...7.5 High
- siemens simatic wincc open architectureSiemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which...5.0 Medium
- symantec encryption management serverThe Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal...4.0 Medium
- apache commons fileupload, tomcat, oracle retail applications +2 moreCommons FileUpload Denial of service vulnerability7.5 High
- opera browserOpera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via...4.3 Medium
- ibm lotus dominoThe IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote...7.8 High
- dell kace k1000 systems management appliance, kace k1000 systems management appliance software +1 moreCross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000...4.3 Medium
- ibm algo oneUnrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote...8.5 High
- ibm websphere transformation extenderBuffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4...4.9 Medium
- opera browserThe intent: URL implementation in Opera before 18 on Android allows attackers to read local files...4.3 Medium
- emc documentum foundation servicesThe web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6...9.0 High
- linux kernel, opensuse +1 moreThe compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when...6.9 Medium
- citrix xenmobile device manager, xenmobile device manager mdm +1 moreUnspecified vulnerability in Citrix XenMobile Device Manager server (formerly Zenprise Device...5.0 Medium
- opensuse osc, opensuse +1 moreosc before 0.134 might allow remote OBS repository servers or package maintainers to execute...4.3 Medium
- gnu cpio, opensuse +1 morecpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote...5.0 Medium
- d-link dap 2253, dap 2253 firmware +1 moreCross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware...4.3 Medium
- d-link dap 2253, dap 2253 firmware +1 moreCross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with...6.8 Medium
- w3eden download managerCross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for...4.3 Medium
- pidgingtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute...9.3 High
- guppyMultiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers...4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +4 more +6 moreMozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on...4.3 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows...10.0 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3,...7.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0,...9.8 Critical
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey...7.5 High
- mozilla firefox, opensuse, oracle solaris +3 more +5 moreMozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing...5.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreMozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreRasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before...8.8 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey...7.5 High
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x...7.5 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and...10.0 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0,...9.8 Critical
- openstack compute, grizzly, havana +1 more +3 moreOpenStack Nova Live migration can leak root disk into ephemeral storage7.1 High
- openstack folsom, grizzly, havana +2 moreOpenStack Nova denial of service through compressed disk images2.1 Low
- hiphop virtual machine for php project virtual machine for phpThe libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual...5.0 Medium
- kde kdelibskioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover...5.0 Medium
- apache activemqApache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet4.3 Medium
- red hat enterprise linux 6, enterprise linux 7, network proxy v 5.4 +3 more +5 moreSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages4.9 Medium
- redhat spacewalk, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password form5.4 Medium
- Show moreLoading…