Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
February

CVEs published in February 2014

498 vulnerabilities, 73 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

ikiwiki hosting project hostingMultiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki...CVE-2013-6047Fix available4.3 MediumFebruary 25, 2014
siemens ruggedcom rugged operating systemThe SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12...CVE-2014-19667.8 HighFebruary 24, 2014
iconics genesis32ICONICS GENESIS32 Exposed Dangerous Method or FunctionCVE-2014-07589.3 February 24, 2014
google chromeMultiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to...CVE-2013-66617.5 HighFebruary 24, 2014
google chromeThe drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict...CVE-2013-66605.0 MediumFebruary 24, 2014
google chromeThe SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc...CVE-2013-66596.4 MediumFebruary 24, 2014
google chromeMultiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google...CVE-2013-66587.5 HighFebruary 24, 2014
google chromecore/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0...CVE-2013-66576.4 MediumFebruary 24, 2014
google chromeThe XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as...CVE-2013-66565.0 MediumFebruary 24, 2014
google chromeUse-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows...CVE-2013-66557.5 HighFebruary 24, 2014
google chromeThe SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink...CVE-2013-66547.5 HighFebruary 24, 2014
google chromeUse-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750...CVE-2013-66537.5 HighFebruary 24, 2014
google chromeDirectory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome...CVE-2013-66527.5 HighFebruary 24, 2014
hp service managerMultiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32...CVE-2013-62026.8 MediumFebruary 24, 2014
mitsubishielectric mc-worx suiteAn ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows...CVE-2013-2817Public exploit9.3 HighFebruary 24, 2014
ibm cognos business intelligenceCross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8...CVE-2014-08613.5 LowFebruary 22, 2014
ibm cognos business intelligenceThe server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10...CVE-2014-08545.0 MediumFebruary 22, 2014
autodesk autocadUntrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain...CVE-2014-08194.4 MediumFebruary 22, 2014
autodesk autocadUntrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain...CVE-2014-08187.5 HighFebruary 22, 2014
blackboard vista\/ceCross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote...CVE-2014-08114.3 MediumFebruary 22, 2014
cisco adaptive security appliance softwareRace condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9...CVE-2014-07394.3 MediumFebruary 22, 2014
cisco adaptive security appliance softwareThe Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier...CVE-2014-07384.3 MediumFebruary 22, 2014
cisco unified ip phone 7960gThe Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass...CVE-2014-07374.3 MediumFebruary 22, 2014
cisco unified communications managerThe administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and...CVE-2014-07315.0 MediumFebruary 22, 2014
cisco unified computing system central softwareCisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain...CVE-2014-07306.8 MediumFebruary 22, 2014
cisco unified sip phone 3905The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain...CVE-2014-072110.0 HighFebruary 22, 2014
cisco ips sensor softwareCisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a...CVE-2014-07207.1 HighFebruary 22, 2014
cisco ips sensor softwareThe control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2...CVE-2014-07197.8 HighFebruary 22, 2014
cisco ips sensor softwareThe produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2...CVE-2014-07187.1 HighFebruary 22, 2014
cisco firewall services module softwareRace condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software...CVE-2014-07107.1 HighFebruary 22, 2014
cisco ucs directorCisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root...CVE-2014-07099.3 HighFebruary 22, 2014
belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it...CVE-2013-695210.0 HighFebruary 22, 2014
belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification...CVE-2013-69517.1 HighFebruary 22, 2014
belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed,...CVE-2013-69507.8 HighFebruary 22, 2014
belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN...CVE-2013-69499.3 HighFebruary 22, 2014
belkin wemo home automation firmwareThe peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote...CVE-2013-69487.8 HighFebruary 22, 2014
ibm websphere extreme scale clientIBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data...CVE-2013-67343.5 LowFebruary 22, 2014
ibm cognos business intelligenceCross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8...CVE-2013-67324.3 MediumFebruary 22, 2014
apple iphone os, mac os x, tvos +2 moreThe SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the...CVE-2014-1266Public exploit7.4 HighFebruary 22, 2014
numpy, fedoraproject fedora, redhat enterprise linux +2 moreNumpy arbitrary file write via symlink attackCVE-2014-1859Fix available5.5 MediumFebruary 21, 2014
numpyArbitrary file write in NumPyCVE-2014-1858Fix available5.5 MediumFebruary 21, 2014
freeradiusStack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap...CVE-2014-2015Fix available7.5 HighFebruary 21, 2014
imagemagick, canonical ubuntu linux, opensuse +2 moreStack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick,...CVE-2014-2030Public exploitFix availableEPSS 11.1%8.8 HighFebruary 21, 2014
imagemagick, canonical ubuntu linux, opensuse +2 moreBuffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5...CVE-2014-1958Fix available8.8 HighFebruary 21, 2014
citrix sharefile mobile, sharefile mobile for tablets +1 moreCitrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X...CVE-2014-19105.8 MediumFebruary 21, 2014
adobe air, air sdk, flash player +7 more +9 moreDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...CVE-2014-0502In KEVEPSS 24.8%8.8 HighFebruary 21, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and...CVE-2014-04997.8 HighFebruary 21, 2014
adobe air, air sdk, flash player +2 moreStack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...CVE-2014-049810.0 HighFebruary 21, 2014
phpmyadminCross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote...CVE-2014-1879Fix available3.5 LowFebruary 20, 2014
cisco unified communications managerThe Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified...CVE-2014-07335.0 MediumFebruary 20, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open