CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorer, vbscript +1 moreThe VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 through 11 does not properly restrict file installation and...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreThe XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3,...7.1 High
- microsoft windows 7, windows 8, windows 8.1 +4 more +6 moreThe Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8,...9.3 High
- microsoft .net frameworkMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not...9.3 High
- microsoft windows 8, windows rt, windows server 2012 +2 moreThe IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not...7.8 High
- microsoft .net frameworkMicrosoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly...5.0 Medium
- chrony, debian linux, fedoraproject fedora +2 moreChrony before 1.29.1 has traffic amplification in cmdmon protocol7.5 High
- doorgets cmsSQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote...6.5 Medium
- auracmsMultiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated...6.5 Medium
- i-doitCross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote...4.3 Medium
- poster software publish itBuffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary...9.3 High
- maxxmarketing joomshoppingCross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before...4.3 Medium
- exponentcms exponent cmsMultiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow...7.5 High
- ctera cloud storage osCross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and...4.3 Medium
- extended module player project module playerBuffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows...6.8 Medium
- i-doitMultiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1...4.3 Medium
- symantec web gatewayMultiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web...4.3 Medium
- symantec web gatewayMultiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG...6.5 Medium
- parcimonie project parcimonieparcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between...7.5 High
- sophos anti-virus, scanning engine +1 moreSophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x...5.6 Medium
- nagiosstatus.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access...4.0 Medium
- apache wicketUnspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x...5.0 Medium
- xkeyboard config project xkeyboard-config, x x.org x11 +1 morexkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by...4.6 Medium
- redhat jboss communications platform, jboss enterprise application platform, jboss enterprise brms platform +1 more +3 moreJBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform...5.0 Medium
- visibility software cyber recruiterThe user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different...4.3 Medium
- visibility software cyber recruiterVisibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of...4.3 Medium
- redhat icedtea-webThe LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2...2.1 Low
- f5 big-ip edge gateway, firepass, big-ip access policy manager +2 moreThe Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway...4.4 Medium
- codeaurora android-msmMultiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux...7.8 High
- opensuse, standards based linux instrumentation project standards-based linux common information model client +1 moreinternal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability ...5.0 Medium
- condor project condor, fedoraproject fedora, redhat enterprise mrg +2 moreMultiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x...4.4 Medium
- armin burgmeier net6, opensuse, oracle solaris +2 moreInteger overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote...5.8 Medium
- ubuntu developers obbyobby (aka libobby) does not verify SSL server certificates, which allows remote attackers to...5.8 Medium
- armin burgmeier net6, opensuse, oracle solaris +2 moreThe libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform...5.0 Medium
- perlThe Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions,...4.3 Medium
mupdfMageiaUpdated mupdf packages fix a buffer overflowNo score- linux kernel, canonical ubuntu linux +1 moreThe help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote...2.6 Low
- light speed gaming mumble, mumblekit +1 moreThe (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the...5.0 Medium
- zeroclipboard project zeroclipboard, redhat openshift +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before...4.3 Medium
- cipherdyne fwsnortUntrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows...4.4 Medium
- pivotal spring mvc, pivotal software spring framework +1 moreImproper Neutralization of Input During Web Page Generation in Spring Framework5.4 Medium
- python bugzilla project python-bugzilla, fedoraproject fedora, opensuse +2 morepython-bugzilla has improper validation of X.509 certificates4.3 Medium
- Show moreLoading…