CVEs published in February 2014
498 vulnerabilities, 73 critical, 4 exploited.
- apple quicktimeBuffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code...9.3 High
- apple quicktimeInteger signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute...9.3 High
- apple quicktimeBuffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code...9.3 High
- apple quicktimeApple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote...9.3 High
- cybozu garoonSQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x...6.5 Medium
- cybozu garoonDirectory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and...4.0 Medium
- cybozu garoonCybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which...4.9 Medium
- norman security suiteUnspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain...7.2 High
- cisco unified communications managerThe Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified...6.8 Medium
- cisco unified contact center express editor softwareThe disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows...4.0 Medium
- cisco unified contact center express editor softwareCross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco...6.8 Medium
- cisco unified communications managerThe Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager...5.0 Medium
- cisco unified communications managerThe Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature...6.2 Medium
- cisco unified communications managerThe certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI...6.2 Medium
- cisco unified communications managerCross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting...6.8 Medium
- linux kernel, canonical ubuntu linux +1 moreThe nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a...2.1 Low
- mcafee epolicy orchestratorThe Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148...6.3 Medium
- redhat jboss enterprise application platformThe security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x...1.9 Low
- suse studio extension for system z, studio onsite +1 moreSUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static"...10.0 High
- martin nagy bind-dyndb-ldapThe handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not...4.3 Medium
- redhat jboss enterprise portal platformMultiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform...4.3 Medium
- qemu, redhat enterprise linux, enterprise linux server supplementary +2 moreBuffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in...6.8 Medium
- redhat jboss enterprise portal platformOpen redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows...5.8 Medium
- linux-nfs nfs-utilsThe nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before...3.3 Low
- catfish project catfishUntrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain...4.6 Medium
- catfish project catfishUntrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as...4.6 Medium
- catfish project catfishUntrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4...4.6 Medium
- catfish project catfishUntrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain...4.6 Medium
- microsoft windows 8, windows 8.1 +1 moreThe Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly...5.0 Medium
- microsoft internet explorerThe Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers...4.3 Medium
- ibm netezza performance portalIBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change...4.0 Medium
- hp application information optimizerThe Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3...7.5 High
- hp application information optimizerThe Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3...7.5 High
- hp lefthand, storevirtual 4000, storevirtual virtual storage appliance +2 moreUnspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and...10.0 High
- apache tomcat, debian linux, oracle solaris +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Medium
- schneider-electric citectscada, powerlogic scada, struxureware powerscada expert +1 more +3 moreSchneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1...7.8 High
- apache tomcatImproper Input Validation in Apache Tomcat4.3 Medium
- apache tomcatApache Tomcat Denial of Service vulnerability4.3 Medium
- apache tomcatApache Tomcat is vulnerable to HTTP request-smuggling5.8 Medium
- nongnu oath toolkitusersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an...4.9 Medium
- xstream, apache activemq, oracle endeca information discovery studio +2 moreCommand Injection in Xstream9.8 Critical
- perl cgi application moduleThe CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified...5.0 Medium
- zabbix, fedoraproject fedora +1 moreThe Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows...5.5 Medium
- zabbix, fedoraproject fedora +1 moreThe API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows...4.0 Medium
- module-metadata project module-metadata, fedoraproject fedora +1 moreEval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote...9.8 Critical
- ibm rational focal pointMultiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2)...3.5 Low
- ibm rational focal pointCross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2...3.5 Low
- ibm rational focal pointThe account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and...5.0 Medium
- ibm rational focal pointMultiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x...3.5 Low
- ibm rational focal pointIBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote...4.0 Medium
- Show moreLoading…