Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
February

CVEs published in February 2014

498 vulnerabilities, 73 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2014-20184.3 MediumFebruary 17, 2014
mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2013-6674Public exploit4.3 MediumFebruary 17, 2014
mongodbThe default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote...CVE-2012-6619Fix available6.4 MediumFebruary 17, 2014
ubuntu metal as a serviceCross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1...CVE-2013-10704.3 MediumFebruary 17, 2014
ubuntu metal as a serviceUbuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml,...CVE-2013-10692.1 LowFebruary 17, 2014
csounds csoundMultiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute...CVE-2012-0270Public exploitFix availableEPSS 54.7%7.5 HighFebruary 17, 2014
redhat sosThe sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1)...CVE-2011-4083Fix available4.3 MediumFebruary 17, 2014
puppetPuppet does not properly restrict access to node resourcesCVE-2011-0528Fix available5.5 MediumFebruary 17, 2014
maradns MageiaUpdated maradns package fixes security vulnerabilityMGASA-2014-0079Fix availableNo scoreFebruary 17, 2014
maradns MageiaUpdated maradns package fixes security vulnerabilitiesMGASA-2014-0078Fix availableNo scoreFebruary 17, 2014
gnu gnutlslib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509...CVE-2014-1959Fix available5.8 MediumFebruary 16, 2014
fine free file project free file, canonical ubuntu linux, debian linux +1 more +3 moreFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...CVE-2014-1943Fix available5.0 MediumFebruary 16, 2014
mozilla firefoxMozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the...CVE-2013-6167Public exploit6.8 MediumFebruary 15, 2014
google chromeGoogle Chrome before 29 sends HTTP Cookie headers without first validating that they have the...CVE-2013-6166Public exploit6.8 MediumFebruary 15, 2014
qualcomm quic mobile station modem kernelThe CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm...CVE-2013-47379.3 HighFebruary 15, 2014
hp linux imaging and printing projectHP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log...CVE-2012-61082.1 LowFebruary 15, 2014
netfilter iptablesextensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn...CVE-2012-26637.5 HighFebruary 15, 2014
phpThe libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir...CVE-2012-11715.0 MediumFebruary 15, 2014
iproute2 project iproute2iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a...CVE-2012-10883.3 LowFebruary 15, 2014
redhat kexec-toolsThe Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...CVE-2011-35905.7 MediumFebruary 15, 2014
redhat kexec-toolsThe Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...CVE-2011-35895.7 MediumFebruary 15, 2014
redhat kexec-toolsThe SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec...CVE-2011-35885.7 MediumFebruary 15, 2014
linux-nfs nfs-utilsThe host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does...CVE-2011-2500Fix available7.5 HighFebruary 15, 2014
ecryptfs ecryptfs-utils, utils +1 moreutils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with...CVE-2011-1836Fix available4.6 MediumFebruary 15, 2014
apache tomcat** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its...CVE-2013-0346Disputed2.1 LowFebruary 15, 2014
linux kernelThe tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24...CVE-2012-6638Fix available7.8 HighFebruary 15, 2014
vtiger crmCross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject...CVE-2013-73264.3 MediumFebruary 14, 2014
livezillaMultiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla...CVE-2013-70324.3 MediumFebruary 14, 2014
irfanviewHeap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary...CVE-2013-53517.5 HighFebruary 14, 2014
bean project beanCross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal...CVE-2013-44994.3 MediumFebruary 14, 2014
phpmyfaqCross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to...CVE-2014-08144.3 MediumFebruary 14, 2014
phpmyfaqCross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers...CVE-2014-08136.8 MediumFebruary 14, 2014
sonicwall analyzer, global management system +1 moreCross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2,...CVE-2014-03324.3 MediumFebruary 14, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to...CVE-2014-0322In KEVPublic exploitEPSS 85.1%8.8 HighFebruary 14, 2014
sap netweaverCross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the...CVE-2014-19654.3 MediumFebruary 14, 2014
sap netweaver, netweaver exchange infrastructure \(bc-xi\) +1 moreCross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange...CVE-2014-19644.3 MediumFebruary 14, 2014
sap netweaverUnspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to...CVE-2014-19635.0 MediumFebruary 14, 2014
sap customer relationship managementGwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via...CVE-2014-19625.0 MediumFebruary 14, 2014
sap netweaverUnspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to...CVE-2014-19615.0 MediumFebruary 14, 2014
sap netweaver, netweaver solution manager +1 moreThe Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...CVE-2014-19605.0 MediumFebruary 14, 2014
xenUse-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when...CVE-2014-1950Fix available4.6 MediumFebruary 14, 2014
openstack image registry and delivery service \(glance\)OpenStack Glance sensitive information disclosure via logsCVE-2014-1948Fix available2.6 LowFebruary 14, 2014
redhat jboss enterprise application platform, jboss wildfly application server +1 moreRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server,...CVE-2014-00181.9 LowFebruary 14, 2014
ryan ohara piranhaThe Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages,...CVE-2013-6492Public exploitFix available5.8 MediumFebruary 14, 2014
internet2 opensamlExposure of Sensitive Information to an Unauthorized Actor in OpenSAMLCVE-2013-6440Fix available5.0 MediumFebruary 14, 2014
redhat satellite, satellite 5 managed db, spacewalk-java +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...CVE-2013-44154.3 MediumFebruary 14, 2014
redhat satelliteCross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat...CVE-2013-18713.5 LowFebruary 14, 2014
redhat satellite, satellite 5 managed db, spacewalk-java +2 moreMultiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...CVE-2012-61493.5 LowFebruary 14, 2014
redhat jboss operations networkRed Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP...CVE-2012-11005.8 MediumFebruary 14, 2014
redhat jboss operations networkRed Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote...CVE-2012-00625.8 MediumFebruary 14, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open