Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
March

CVEs published in March 2014

544 vulnerabilities, 68 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple iphone os, tvos +1 moreThe Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass...CVE-2014-12825.8 MediumMarch 14, 2014
apple iphone osPhotos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during...CVE-2014-12811.9 LowMarch 14, 2014
apple iphone os, tvos +1 moreVideo Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a...CVE-2014-12807.1 HighMarch 14, 2014
apple tvosApple TV before 6.1 does not properly restrict logging, which allows local users to obtain...CVE-2014-12792.1 LowMarch 14, 2014
apple iphone os, tvos +1 moreThe ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1...CVE-2014-12787.2 HighMarch 14, 2014
apple iphone osIOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring...CVE-2014-12765.0 MediumMarch 14, 2014
apple iphone os, tvos +1 moreBuffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote...CVE-2014-12756.8 MediumMarch 14, 2014
apple iphone osFaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive...CVE-2014-12742.1 LowMarch 14, 2014
apple iphone os, tvos +1 moredyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing...CVE-2014-12735.8 MediumMarch 14, 2014
apple iphone os, tvos +1 moreCrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local...CVE-2014-12726.3 MediumMarch 14, 2014
apple iphone os, tvos +1 moreCoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API...CVE-2014-12717.8 HighMarch 14, 2014
apple iphone os, tvos +1 moreThe Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not...CVE-2014-12675.8 MediumMarch 14, 2014
yokogawa centum cs 3000Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowCVE-2014-0784Public exploitEPSS 35.9%8.3 March 14, 2014
yokogawa centum cs 3000Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowCVE-2014-0783Public exploitEPSS 67.6%9.0 March 14, 2014
yokogawa centum cs 3000Yokogawa CENTUM CS 3000 Heap-based Buffer OverflowCVE-2014-0781EPSS 26.3%9.3 March 14, 2014
aveva clearscada, schneider electric scada expert clearscada +1 moreSchneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2014-07796.8 March 14, 2014
cisco cloud portalIntelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a...CVE-2014-06945.0 MediumMarch 14, 2014
adobe shockwave playerAdobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or...CVE-2014-050510.0 HighMarch 14, 2014
apple iphone osTelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user...CVE-2013-6835Public exploit5.0 MediumMarch 14, 2014
sambaThe owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4...CVE-2013-6442Fix available5.8 MediumMarch 14, 2014
hp hp-uxUnspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23...CVE-2013-62094.3 MediumMarch 14, 2014
hp insight control server deployment, rapid deployment pack +1 moreUnspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment...CVE-2013-62069.0 HighMarch 14, 2014
hp insight control server deployment, rapid deployment pack +1 moreUnspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment...CVE-2013-62054.1 MediumMarch 14, 2014
hp system management homepageCross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1...CVE-2013-61886.8 MediumMarch 14, 2014
apple iphone osBackup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers...CVE-2013-51338.8 HighMarch 14, 2014
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote...CVE-2013-48465.0 MediumMarch 14, 2014
procentia intellipenSQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen...CVE-2014-2043Public exploit6.5 MediumMarch 13, 2014
dokeos project dokeosMultiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to...CVE-2014-18774.3 MediumMarch 13, 2014
kasseler-cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow...CVE-2013-3729Public exploit6.8 MediumMarch 13, 2014
kasseler-cmsCross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote...CVE-2013-3728Public exploit3.5 LowMarch 13, 2014
kasseler-cmsSQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to...CVE-2013-3727Public exploit7.5 HighMarch 13, 2014
imapsync project imapsyncimapsync 1.564 and earlier performs a release check by default, which sends sensitive information...CVE-2013-4279Fix available5.0 MediumMarch 12, 2014
freetypeStack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType...CVE-2014-2240Fix available7.5 HighMarch 12, 2014
dnnsoftware dotnetnukeDotNetNuke (DNN) Open redirect vulnerabilityCVE-2013-7335Fix available4.3 MediumMarch 12, 2014
zldnn dnnarticleSQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module...CVE-2013-5117Public exploit7.5 HighMarch 12, 2014
dnnsoftware dotnetnukeDotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameterCVE-2013-4649Fix available4.3 MediumMarch 12, 2014
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1...CVE-2013-39433.5 LowMarch 12, 2014
civicrm, caseproof prettylinks, joobi com jnews +2 moreCross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open...CVE-2013-1636Public exploit4.3 MediumMarch 12, 2014
adobe flash playerAdobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and...CVE-2014-05045.0 MediumMarch 12, 2014
adobe flash playerAdobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and...CVE-2014-05036.4 MediumMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-0324EPSS 20.3%9.3 HighMarch 12, 2014
microsoft windows 7, windows 8, windows 8.1 +7 more +9 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2014-03236.6 MediumMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-0321EPSS 12.7%9.3 HighMarch 12, 2014
microsoft silverlightMicrosoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0...CVE-2014-03197.1 HighMarch 12, 2014
microsoft windows server 2003, windows server 2008, windows server 2012 +2 more +4 moreThe Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2...CVE-2014-0317EPSS 10.4%5.4 MediumMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a...CVE-2014-0314EPSS 20.3%9.3 HighMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-0313EPSS 21.8%9.3 HighMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-0312EPSS 21.5%9.3 HighMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-0311EPSS 12.7%9.3 HighMarch 12, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or...CVE-2014-0309EPSS 20.3%9.3 HighMarch 12, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open