Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
March

CVEs published in March 2014

544 vulnerabilities, 68 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

sophos web appliance, web appliance firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow...CVE-2013-2643Public exploit4.3 MediumMarch 18, 2014
sophos web appliance, web appliance firmware +1 moreSophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via...CVE-2013-2642Public exploit9.3 HighMarch 18, 2014
sophos web appliance, web appliance firmware +1 moreDirectory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows...CVE-2013-2641Public exploitEPSS 71.0%5.0 MediumMarch 18, 2014
aspenDirectory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary...CVE-2013-2619Public exploit5.0 MediumMarch 18, 2014
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow...CVE-2013-02014.3 MediumMarch 18, 2014
apache couchdbCross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x...CVE-2012-56504.3 MediumMarch 18, 2014
apache couchdb, mochiweb project mochiweb +1 moreDirectory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb...CVE-2012-56415.0 MediumMarch 18, 2014
blackberry qnx neutrino rtos/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain...CVE-2014-2534Public exploit4.9 MediumMarch 18, 2014
blackberry qnx neutrino rtos/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain...CVE-2014-2533Public exploit7.2 HighMarch 18, 2014
openbsd openssh, oracle communications user data repository +1 moresshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...CVE-2014-2532Fix available4.9 MediumMarch 18, 2014
yumenomachi demaecanThe Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from...CVE-2014-19765.8 MediumMarch 18, 2014
r-company unzipperDirectory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for...CVE-2014-19755.8 MediumMarch 18, 2014
apache http server, canonical ubuntu linux, oracle secure global desktop +2 moreThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2014-0098Fix availableEPSS 26.7%5.0 MediumMarch 18, 2014
apache http server, canonical ubuntu linux +1 moreThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...CVE-2013-6438Fix availableEPSS 27.5%5.0 MediumMarch 18, 2014
mutt, debian linux, mageia +2 more +4 moreThe write_one_header function in mutt 1.5.23 does not properly handle newline characters at the...CVE-2014-9116Fix available5.0 MediumMarch 17, 2014
siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to...CVE-2014-22597.8 HighMarch 16, 2014
siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to...CVE-2014-22577.8 HighMarch 16, 2014
siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to...CVE-2014-22557.8 HighMarch 16, 2014
siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to...CVE-2014-22536.1 MediumMarch 16, 2014
siemens simatic s7-1500 cpu firmwareThe random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0...CVE-2014-22518.3 HighMarch 16, 2014
siemens simatic s7-1500 cpu firmwareCross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with...CVE-2014-22495.8 MediumMarch 16, 2014
siemens simatic s7-1500 cpu firmwareOpen redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC...CVE-2014-22484.3 MediumMarch 16, 2014
siemens simatic s7-1500 cpu firmwareThe integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0...CVE-2014-22475.8 MediumMarch 16, 2014
siemens simatic s7-1500 cpu firmwareCross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500...CVE-2014-22464.3 MediumMarch 16, 2014
google chromeDirectory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and...CVE-2014-17157.5 HighMarch 16, 2014
google chromeThe ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer...CVE-2014-17147.5 HighMarch 16, 2014
google chromeUse-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp...CVE-2014-17137.5 HighMarch 16, 2014
google chrome osThe GPU driver in the kernel in Google Chrome OS before 33.0.1750.152 allows remote attackers to...CVE-2014-17117.5 HighMarch 16, 2014
google chrome osThe AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager...CVE-2014-17107.5 HighMarch 16, 2014
google chrome osThe boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file...CVE-2014-170810.0 HighMarch 16, 2014
google chrome osDirectory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has...CVE-2014-17077.5 HighMarch 16, 2014
google chrome oscrosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via...CVE-2014-17067.5 HighMarch 16, 2014
debian linux, google chrome, opensuse +2 moreGoogle V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750...CVE-2014-1705Fix available7.5 HighMarch 16, 2014
google chrome, v8 +1 moreMultiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome...CVE-2014-1704Fix available10.0 HighMarch 16, 2014
google chromeUse-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content...CVE-2014-17037.5 HighMarch 16, 2014
google chromeUse-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules...CVE-2014-17027.5 HighMarch 16, 2014
google chromeThe GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in...CVE-2014-17014.3 MediumMarch 16, 2014
google chromeUse-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google...CVE-2014-17007.5 HighMarch 16, 2014
ibm spss samplepowerBuffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM...CVE-2014-08957.5 HighMarch 16, 2014
ibm infosphere master data management serverMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2)...CVE-2014-08736.8 MediumMarch 16, 2014
ibm infosphere master data management reference data management hubCross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data...CVE-2014-08503.5 LowMarch 16, 2014
webminCross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote...CVE-2014-03394.3 MediumMarch 16, 2014
watchguard firewareMultiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in...CVE-2014-03384.3 MediumMarch 16, 2014
hp unified functional testingUnspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to...CVE-2013-62107.5 HighMarch 16, 2014
hp smart update managerUnspecified vulnerability in HP Smart Update Manager 5.3.5 before build 70 on Linux allows local...CVE-2013-62087.2 HighMarch 16, 2014
ibm infosphere information serverMultiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x...CVE-2013-40594.3 MediumMarch 16, 2014
ibm infosphere information serverMultiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3,...CVE-2013-40586.5 MediumMarch 16, 2014
ibm infosphere information serverCross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information...CVE-2013-40576.8 MediumMarch 16, 2014
webmin MageiaUpdated webmin package fixes security vulnerabilitiesMGASA-2014-0132Fix availableNo scoreMarch 15, 2014
freetype, canonical ubuntu linux +1 moreThe (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in...CVE-2014-2241Fix available6.8 MediumMarch 15, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open