CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- redhat jboss operations networkRed Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON...5.8 Medium
- bandisoft bandizipUntrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain...6.9 Medium
- blackberry enterprise service, universal device service, enterprise server +1 more +3 moreBlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server...5.0 Medium
- ibm connections portletsMultiple cross-site scripting (XSS) vulnerabilities in IBM Connections Portlets 4.x before 4.5.1...4.3 Medium
- ibm websphere dashboard frameworkThe charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote...5.8 Medium
- ibm websphere portalUnrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM...5.8 Medium
- ibm platform symphonyAn unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1...10.0 High
- symantec endpoint protection manager, protection center +1 moreSQL injection vulnerability in the management console in Symantec Endpoint Protection Manager ...6.5 Medium
- symantec endpoint protection manager, protection center +1 moreThe management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424...7.5 High
- apache subversionThe get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15...4.3 Medium
- apple boot campAppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service ...4.7 Medium
- broadcom 2e web optionCA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of...5.1 Medium
- ibm sametimeCross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5...3.5 Low
- ibm sametimeThe Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an...7.5 High
- ibm sametimeThe Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote...6.8 Medium
- ibm sametimeThe Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not...7.5 High
- ibm sametimeThe Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send...5.0 Medium
- matrikonopc scada dnp3 opc serverMatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial...7.1 High
- cspan capture-tinyThe Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via...3.6 Low
mpg123MageiaUpdated mpg123 packages fix a buffer overflowNo scoreffmpegMageiaUpdated ffmpeg packages fix several security vulnerabilitiesNo score- cisco unified communications managerSQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco...7.5 High
- cisco unified communications managerSQL injection vulnerability in the Java database interface in Cisco Unified Communications...7.5 High
- cisco unified communications managerSQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in...7.5 High
- cisco unified communications managerSQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified...7.5 High
- cisco unified communications managerCisco Unified Communications Manager (UCM) does not require authentication for reading WAR files,...5.0 Medium
- cisco unified communications managerThe bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and...4.0 Medium
- cisco unified communications managerCross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco...4.3 Medium
- cisco unified communications managerThe log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly...5.0 Medium
- atmailCross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x...4.3 Medium
- atmailMultiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote...4.3 Medium
- adobe shockwave playerAdobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or...10.0 High
- microsoft .net frameworkVsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection...4.3 Medium
- microsoft forefront protection 2010Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content,...10.0 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to read content from a different...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a...9.3 High
- Show moreLoading…