CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- rubyonrails rails, ruby on rails +1 moreactionpack Improper Input Validation vulnerability5.0 Medium
- rubyonrails rails, ruby on rails, opensuse +2 more +4 moreRails vulnerable to Cross-site Scripting4.3 Medium
- rubyonrails railsArray data injection vulnerability in activerecord6.8 Medium
- cisco unified communications managerCross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting...6.8 Medium
- cisco unified communications managerCross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco...4.3 Medium
- cisco unified communications managerSQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in...7.5 High
- cisco unified communications managerThe Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager ...5.0 Medium
- postgresqlMultiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x...6.5 Medium
- postgresql, apple mac os x, mac os x server +2 moreThe "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly...4.6 Medium
- postgresqlThe chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2...4.0 Medium
- postgresqlMultiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12,...6.5 Medium
- postgresqlMultiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8...6.5 Medium
- postgresqlMultiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x...6.5 Medium
- postgresqlRace condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL...4.9 Medium
- postgresqlThe validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x...6.5 Medium
- postgresqlPostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x...4.0 Medium
- qemuArray index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows...7.5 High
- qemuThe virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow...7.5 High
- qemuThe usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote...7.5 High
- qemu, opensuse +1 moreBuffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to...7.5 High
- qemuMultiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2...7.5 High
- qemuMultiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7...7.5 High
- qemuThe ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to...7.5 High
- qemuAn user able to alter the savevm data (either on the disk or over the wire during migration)...7.8 High
- qemu, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers...8.8 High
- qemuBuffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 High
- qemuBuffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows...7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreQemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...7.8 High
- qemuBuffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 High
- qemuBuffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial...7.5 High
- qemuBuffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 High
- qemuBuffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute...7.5 High
- qemuBuffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial...7.5 High
- qemuThe virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to...7.5 High
- qemuThe virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2...7.5 High
- qemuBuffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x...7.5 High
- qemuInteger signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x...7.5 High
- python, apple mac os x +1 moreBuffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5...7.5 High
- openstack swiftPython Swift client is vulnerable to Missing SSL Certificate Check5.8 Medium
- phpext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote...5.0 Medium
- apple iphone osThe iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an...4.6 Medium
- freepbxadmin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11...7.5 High
- jetroplatforms jetro cockpit secure browsingThe client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName...9.3 High
- phpMultiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before...5.8 Medium
- php, canonical ubuntu linux +1 moreThe gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...6.8 Medium
- phpInteger overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows...6.8 Medium
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2...5.0 Medium
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make...5.0 Medium
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before...5.0 Medium
- feep libtarMultiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all...5.8 Medium
- Show moreLoading…