Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
March

CVEs published in March 2014

544 vulnerabilities, 68 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelBuffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel...CVE-2014-0049Fix available7.4 HighMarch 11, 2014
christos zoulas file, debian linux, php +2 moreThe BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...CVE-2013-7345Fix available5.0 MediumMarch 11, 2014
atcom netvolutionSQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary...CVE-2014-23187.5 HighMarch 10, 2014
apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0094Public exploitFix availableEPSS 99.4%5.0 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareCross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix...CVE-2013-69444.3 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareCitrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77...CVE-2013-69435.0 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareCross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery...CVE-2013-69426.8 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareUnspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before...CVE-2013-694110.0 HighMarch 10, 2014
citrix netscaler application delivery controller firmwareCitrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77...CVE-2013-69405.0 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareUnspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before...CVE-2013-69395.0 MediumMarch 10, 2014
citrix netscaler application delivery controller firmwareUnspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0...CVE-2013-69385.0 MediumMarch 10, 2014
freedesktop udisks, canonical ubuntu linux +1 moreStack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to...CVE-2014-0004Fix available6.9 MediumMarch 10, 2014
wiresharkThe dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA...CVE-2014-2282Fix available4.3 MediumMarch 8, 2014
wiresharkBuffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x...CVE-2014-2299Public exploitFix availableEPSS 47.1%9.3 HighMarch 8, 2014
wiresharkepan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x...CVE-2014-2283Fix available4.3 MediumMarch 8, 2014
wiresharkThe nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in...CVE-2014-2281Fix available4.3 MediumMarch 8, 2014
opendocmanSQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers...CVE-2014-2317Public exploit6.8 MediumMarch 7, 2014
zemanta search everythingSQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for...CVE-2014-23167.5 HighMarch 7, 2014
shinephp thank you counter buttonMultiple cross-site scripting (XSS) vulnerabilities in the Thank You Counter Button plugin 1.8.7...CVE-2014-23154.3 MediumMarch 7, 2014
atlassian jiraDirectory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4...CVE-2014-2314Public exploitEPSS 26.1%4.3 MediumMarch 7, 2014
atlassian jiraDirectory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows...CVE-2014-23134.3 MediumMarch 7, 2014
opendocmanSQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers...CVE-2014-1945Public exploit7.5 HighMarch 7, 2014
ilch cmsCross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to...CVE-2014-1944Public exploit4.3 MediumMarch 7, 2014
sfr box router, box router firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN...CVE-2014-15994.3 MediumMarch 7, 2014
eng spagobiCross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users...CVE-2013-6233Public exploit4.3 MediumMarch 7, 2014
eng spagobiCross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users...CVE-2013-6232Public exploit3.5 LowMarch 7, 2014
puppet enterprisePuppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console...CVE-2013-49715.0 MediumMarch 7, 2014
puppet enterpriseThe master external node classification script in Puppet Enterprise before 3.2.0 does not verify...CVE-2013-49666.4 MediumMarch 7, 2014
airvana hubbub c1-600-rt, sprint airave, airave software +2 moreCross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT...CVE-2013-22704.3 MediumMarch 7, 2014
owncloud serverSQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x...CVE-2013-20466.5 MediumMarch 7, 2014
owncloud serverSQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote...CVE-2013-20456.5 MediumMarch 7, 2014
owncloudSQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows...CVE-2013-18936.5 MediumMarch 7, 2014
owncloudMultiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote...CVE-2013-18904.3 MediumMarch 7, 2014
file project file, canonical ubuntu linux, debian linux +2 more +4 moresoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...CVE-2014-2270Fix available4.3 MediumMarch 7, 2014
net-snmpThe perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and...CVE-2014-2285Fix available4.3 MediumMarch 7, 2014
net-snmpThe Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1,...CVE-2014-2284Fix available5.0 MediumMarch 7, 2014
owncloud MageiaUpdated owncloud packages fix security vulnerabilities and bugsMGASA-2014-0120Fix availableNo scoreMarch 6, 2014
gnu gnutlsGnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...CVE-2009-51385.8 MediumMarch 6, 2014
videowhisper live streaming integration plugin, live streaming integration +1 moreMultiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration...CVE-2014-1907Public exploitEPSS 11.1%6.4 MediumMarch 6, 2014
videowhisper live streaming integration plugin, live streaming integration +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming...CVE-2014-1906Public exploit4.3 MediumMarch 6, 2014
openstack novaOpenStack Nova DoS through ephemeral disk backing filesCVE-2013-6437Fix available4.0 MediumMarch 6, 2014
robert ancell lightdm, canonical ubuntu linux +1 moredmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary...CVE-2011-3153Fix available1.9 LowMarch 6, 2014
foscam fi8919w, fi8919w firmware +1 moreThe Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain...CVE-2014-19117.8 HighMarch 6, 2014
ibm sametimeThe Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1,...CVE-2014-08901.9 LowMarch 6, 2014
cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote...CVE-2014-07077.8 HighMarch 6, 2014
cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0...CVE-2014-07067.8 HighMarch 6, 2014
cisco wireless lan controller, wireless lan controller software +1 moreThe multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2...CVE-2014-07057.1 HighMarch 6, 2014
cisco wireless lan controller, wireless lan controller software +1 moreThe IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before...CVE-2014-07047.1 HighMarch 6, 2014
cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software...CVE-2014-070310.0 HighMarch 6, 2014
cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4...CVE-2014-07017.8 HighMarch 6, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open