Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
March

CVEs published in March 2014

544 vulnerabilities, 68 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

sudo project sudosudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo...CVE-2014-9680Fix available3.3 LowMarch 20, 2014
seeddmsCross-site scripting (XSS) vulnerability in the search feature in SeedDMS (formerly LetoDMS and...CVE-2014-22804.3 MediumMarch 20, 2014
cmsimple classicCross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier...CVE-2014-22194.3 MediumMarch 20, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1...CVE-2014-20774.3 MediumMarch 20, 2014
pivotal software spring frameworkImproper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2014-1904Fix available4.3 MediumMarch 20, 2014
mantisbt, debian linux +1 moreMultiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to...CVE-2014-16097.5 HighMarch 20, 2014
solarwinds dameware remote supportStack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool ...CVE-2013-32499.3 HighMarch 20, 2014
combodo itopMultiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT...CVE-2013-08054.3 MediumMarch 20, 2014
silexlabs silexCross-site scripting (XSS) vulnerability in Silex before 2.0.0 allows remote attackers to inject...CVE-2014-19714.3 MediumMarch 20, 2014
estrongs es file explorerDirectory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4...CVE-2014-19705.8 MediumMarch 20, 2014
extplorerMultiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component...CVE-2013-5951Fix available2.6 LowMarch 20, 2014
f5 nginx, opensuse +1 moreHeap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x...CVE-2014-0133Fix available7.5 HighMarch 19, 2014
sir gnuboardMultiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly...CVE-2014-2339Public exploit6.5 MediumMarch 19, 2014
nttdocomo spmode mail androidThe NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620...CVE-2014-19796.8 MediumMarch 19, 2014
nttdocomo spmode mail androidThe application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for...CVE-2014-19784.3 MediumMarch 19, 2014
nttdocomo spmode mail androidThe NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier...CVE-2014-19774.3 MediumMarch 19, 2014
purplebeanie com pbbookingCross-site scripting (XSS) vulnerability in manage.php in the PBBooking (com_pbbooking) component...CVE-2013-59554.3 MediumMarch 19, 2014
codepeople com multicalendarMultiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi...CVE-2013-59534.3 MediumMarch 19, 2014
codologic com freichatMultiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component,...CVE-2013-59524.3 MediumMarch 19, 2014
mozilla firefoxos, oracle solaris +1 moreDirectory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2...CVE-2014-15079.3 HighMarch 19, 2014
mozilla firefox, oracle solaris +1 moreDirectory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on...CVE-2014-15066.4 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not...CVE-2014-15042.6 LowMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla...CVE-2014-15026.8 MediumMarch 19, 2014
mozilla firefox, oracle solaris, suse linux enterprise desktop +2 more +4 moreMozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy...CVE-2014-15015.8 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of...CVE-2014-15005.0 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain...CVE-2014-14994.3 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25...CVE-2014-14985.0 MediumMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-14965.5 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and...CVE-2014-14949.3 HighMarch 19, 2014
cisco hosted collaboration solutionMemory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows...CVE-2014-21225.0 MediumMarch 19, 2014
cisco hosted collaboration solutionThe Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to...CVE-2014-21215.0 MediumMarch 19, 2014
cisco adaptive security appliance (asa), adaptive security appliance software +1 moreCross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security...CVE-2014-2120In KEVEPSS 22.6%6.1 MediumMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 CriticalMarch 19, 2014
sophos unified threat management, unified threat management software +1 moreMemory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to...CVE-2014-25377.8 HighMarch 18, 2014
intel expressway cloud access 360, mcafee cloud identity manager, cloud single sign on +2 moreDirectory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee...CVE-2014-25364.3 MediumMarch 18, 2014
mcafee web gatewayDirectory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7...CVE-2014-25354.0 MediumMarch 18, 2014
freedownloadmanager free download managerStack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in...CVE-2014-2087Public exploitEPSS 16.7%9.3 HighMarch 18, 2014
mantisbt, debian linux +1 moreSQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT...CVE-2014-16087.5 HighMarch 18, 2014
fedoraproject 389 directory serverThe SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote...CVE-2014-0132Fix available6.5 MediumMarch 18, 2014
redhat cloudforms, cloudforms 3.0 management engine +1 moreThe x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red...CVE-2014-00577.5 HighMarch 18, 2014
xnviewInteger overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code...CVE-2013-39389.3 HighMarch 18, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open