Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
March

CVEs published in March 2014

544 vulnerabilities, 68 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco cvr100w, rv110w, rv215w +3 more +5 moreThe web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier,...CVE-2014-0683Public exploitEPSS 10.6%10.0 HighMarch 6, 2014
emc documentum taskspaceEMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote...CVE-2014-06304.0 MediumMarch 6, 2014
emc documentum taskspaceEMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle...CVE-2014-06298.5 HighMarch 6, 2014
emc rsa data loss preventionEMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which...CVE-2014-06242.7 LowMarch 6, 2014
serena dimensions cmCross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2...CVE-2014-03366.8 MediumMarch 6, 2014
serena dimensions cmMultiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12...CVE-2014-03354.3 MediumMarch 6, 2014
ibm tealeaf cxDirectory traversal vulnerability in download.php in the Passive Capture Application (PCA) web...CVE-2013-6720Public exploitEPSS 29.1%5.5 MediumMarch 6, 2014
ibm tealeaf cxdelivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x...CVE-2013-6719Public exploitEPSS 26.9%6.0 MediumMarch 6, 2014
ibm enterprise records, infosphere enterprise records +1 moreIBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1...CVE-2013-63154.3 MediumMarch 6, 2014
ibm enterprise records, infosphere enterprise records +1 moreCross-site scripting (XSS) vulnerability in IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1...CVE-2013-63143.5 LowMarch 6, 2014
ibm algo one, algo risk application +1 moreMultiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1...CVE-2013-63044.0 MediumMarch 6, 2014
hp security management systemUnspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0...CVE-2013-62017.5 HighMarch 6, 2014
novell zenworks configuration managementDirectory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration...CVE-2013-37065.0 MediumMarch 6, 2014
libsshThe RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset...CVE-2014-0017Fix available1.9 LowMarch 5, 2014
cmsmadesimple cms made simpleSQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows...CVE-2014-22456.0 MediumMarch 5, 2014
mantisbtSQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT...CVE-2014-2238EPSS 11.3%6.5 MediumMarch 5, 2014
askbotMultiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote...CVE-2014-22364.3 MediumMarch 5, 2014
askbotCross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to...CVE-2014-22354.3 MediumMarch 5, 2014
getgosoft getgo download managerStack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and...CVE-2014-2206Public exploitEPSS 61.4%10.0 HighMarch 5, 2014
apptha video gallery pluginSQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress...CVE-2013-34787.5 HighMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-63333.5 LowMarch 5, 2014
ibm algo oneSQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0...CVE-2013-63316.5 MediumMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-63203.5 LowMarch 5, 2014
ibm algo oneIBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo...CVE-2013-63194.0 MediumMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-63184.3 MediumMarch 5, 2014
ibm algo oneDirectory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4...CVE-2013-63034.0 MediumMarch 5, 2014
ibm algo oneSQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0...CVE-2013-63026.5 MediumMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-63013.5 LowMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-63003.5 LowMarch 5, 2014
ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in...CVE-2013-62993.5 LowMarch 5, 2014
ibm algo oneIBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo...CVE-2013-54685.0 MediumMarch 5, 2014
apple mac os xA certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent ...CVE-2014-22346.4 MediumMarch 5, 2014
google chrome, v8, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...CVE-2013-6668Public exploitFix available7.5 HighMarch 5, 2014
google chromeMultiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to...CVE-2013-66677.5 HighMarch 5, 2014
google chromeThe PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc...CVE-2013-66665.8 MediumMarch 5, 2014
google chromeHeap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources...CVE-2013-66657.5 HighMarch 5, 2014
google chromeUse-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core...CVE-2013-66647.5 HighMarch 5, 2014
google chromeUse-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics...CVE-2013-66637.5 HighMarch 5, 2014
ibm rational doors next generation, rational requirements composer +1 moreCross-site scripting (XSS) vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6...CVE-2014-08463.5 LowMarch 4, 2014
ibm rational doors next generation, rational requirements composer +1 moreOpen redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4...CVE-2014-08454.9 MediumMarch 4, 2014
ibm rational doors next generation, rational requirements composer +1 moreUnspecified vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x...CVE-2014-08443.5 LowMarch 4, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7...CVE-2013-67304.3 MediumMarch 4, 2014
logilab logilab-common, opensuse +1 moreCreation of Temporary File With Insecure Permissions in logilab-commonsCVE-2014-1839Fix available4.4 MediumMarch 3, 2014
logilab logilab-common, opensuse +1 moreImproper Link Resolution Before File Access in logilab-commonsCVE-2014-1838Fix available4.4 MediumMarch 3, 2014
egroupwareeGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection...CVE-2014-2027Fix available7.5 HighMarch 3, 2014
jordy meow media file renamerMultiple cross-site scripting (XSS) vulnerabilities in the (1) callback_multicheck, (2)...CVE-2014-20402.1 LowMarch 3, 2014
posh project poshSQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo)...CVE-2014-2211Public exploit7.5 HighMarch 3, 2014
artifex mupdfStack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and...CVE-2014-2013Public exploitFix availableEPSS 14.8%7.5 HighMarch 3, 2014
mybbCross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows...CVE-2014-18404.3 MediumMarch 3, 2014
videolan vlc media playerThe ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in...CVE-2014-1684Public exploitFix available4.3 MediumMarch 3, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open