CVEs published in March 2014
544 vulnerabilities, 68 critical, 2 exploited.
- avtech avn801 dvr, avn801 dvr firmware +1 moreBuffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003...9.0 High
- avtech avn801 dvr, avn801 dvr firmware +1 moreBuffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003...9.0 High
- hikvision ds-2cd7153-e, ds-2cd7153-e firmware +1 moreBuffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1...10.0 High
- ait-pro bulletproof-securityMultiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof...4.3 Medium
- inmatrix zoom playerHeap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to...6.8 Medium
- inmatrix zoom playerStack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to...6.8 Medium
- commentluvCross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress...4.3 Medium
- eye eye-fi helperDirectory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle...4.3 Medium
- google android, lenovo shareit +1 morejava/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API...7.5 High
- drinkedin barfinderThe DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used,...4.3 Medium
- edinburghtour edinburgh by busThe Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used,...6.8 Medium
- hsgroup forzearmateThe ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows...6.4 Medium
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do...7.5 High
- adobe phonegapAdobe PhoneGap before 2.6.0 on Android uses the shouldOverrideUrlLoading callback instead of the...7.5 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to...7.5 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to...7.5 High
- google androidAndroid 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other...9.3 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of...7.5 High
- google android apiThe Android API before 17 does not properly restrict the WebView.addJavascriptInterface method,...6.8 Medium
- gnu gnutlslib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...5.8 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to...5.0 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize...7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4,...6.1 Medium
- synology diskstation managerThe OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root...7.8 High
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS...4.3 Medium
- atutorCross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2...3.5 Low
- iliasMultiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote...3.5 Low
- iliasILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that...6.8 Medium
- iliasUnrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated...6.5 Medium
- bluecoat proxysgosThe caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2...7.9 High
- cmsmadesimple cms made simpleMultiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple allow remote authenticated...3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase...4.3 Medium
- mediawikiincludes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before...5.8 Medium
- mediawikiincludes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and...4.3 Medium
- cisco unified communications domain managerMultiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM)...4.3 Medium
- ffmpegThe msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly...6.8 Medium
- ffmpeglibavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for...6.8 Medium
- ffmpegThe tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly...6.8 Medium
- ibm rational collaborative lifecycle managementUnspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management ...10.0 High
- ibm websphere mqDirectory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows...4.3 Medium
- file project file, canonical ubuntu linux, freebsd +1 more +3 moresoftmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers...5.0 Medium
- zarafaThe ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and...5.0 Medium
- zarafaThe ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8...5.0 Medium