CVEs published in March 2014
544 vulnerabilities, 68 critical, 2 exploited.
- perltidy project perltidy The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to... 7.1 High
- gnu a2ps The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows... 6.8 Medium
- gnu a2ps The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user... 2.1 Low
- microsoft windows media player Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of... 6.8 Medium
- chainfire supersu The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the... 10.0 High
- androidsu chainsdd superuser, chainfire supersu, koushik dutta superuser +2 more Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and... 10.0 High
- google android, koushik dutta superuser +1 more The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not... 7.6 High
- koushik dutta superuser The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain... 10.0 High
- koushik dutta superuser Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2... 5.0 Medium
- mediawiki includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before... 4.0 Medium
- redhat conga, enterprise linux +1 more Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow... 3.7 Low
- mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1... 4.3 Medium
- redhat conga, enterprise linux +1 more Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the... 3.7 Low
- zohocorp manageengine opstor Cross-site scripting (XSS) vulnerability in Properties.do in ZOHO ManageEngine OpStor before... 3.5 Low
- mozilla firefox The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0... 5.0 Medium
- zohocorp manageengine opstor Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege... 6.5 Medium
- cisco ios The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device... 6.1 Medium
- symantec liveupdate administrator SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate... 7.5 High
- symantec liveupdate administrator The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate... 7.5 High
- ibm flex system v7000, san volume controller, storwize v3500 +9 more +11 more IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with... 7.5 High
- hp storeonce 4210 fc backup system, storeonce virtual storage appliance, storeonce 2610 iscsi backup system +5 more +7 more Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce... 7.8 High
- springsource spring framework Cross-Site Request Forgery in Spring Framework 6.8 Medium
- alliedtelesis at-rg634a, img616lh, img616lh firmware +5 more +7 more The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A... 10.0 High
- oracle vm virtualbox Multiple array index errors in programs that are automatically generated by VBox/HostServices... 6.9 Medium
- oracle vm virtualbox VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x... 4.4 Medium
- siemens ruggedcom rugged operating system The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for... 5.0 Medium
- emc vplex geosynchrony Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote... 7.5 High
- emc vplex geosynchrony EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie... 6.0 Medium
- emc vplex geosynchrony The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session... 7.7 High
- emc vplex geosynchrony Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote... 9.0 High
- schneider-electric modbus serial driver, concept, modbuscommdtm sl +9 more +11 more Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver... 9.3 High
- redhat richfaces, jboss web framework kit +1 more JBoss RichFaces Improper Input Validation vulnerability 4.3 Medium
- apache couchdb Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and... 5.0 Medium
- xen The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x... 4.9 Medium
- wpsymposiumpro wp symposium Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04... 4.3 Medium
- wpsymposiumpro wp symposium Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows... 5.8 Medium
- gpeasy cms Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool... 4.3 Medium
- cartpauj mingle-forum Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for... 4.3 Medium
- postfix admin project admin SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin... 6.5 Medium
- cisco prime security manager Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco... 4.3 Medium
- cisco ios, ios xe +1 more Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9... 7.8 High
- cisco ios The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause... 7.8 High
- cisco ios The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4,... 7.1 High
- cisco ios The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used,... 7.8 High
- cisco ios, ios xe +1 more Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3... 7.8 High
- cisco ios Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C... 7.1 High
- cisco ios, ios xe +1 more Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to... 7.8 High
- cacti, debian linux, fedoraproject fedora +1 more +3 more Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows... 4.3 Medium
- theforeman foreman Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before... 4.3 Medium
- getsymphony symphony Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote... 6.8 Medium
- Show olderLoading…