CVEs published in March 2014
544 vulnerabilities, 68 critical, 2 exploited.
- kingsoft office 2012Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows...10.0 High
- python, apple mac os x +1 morePython before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and...7.1 High
- pythonThe gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote...7.5 High
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c...2.9 Low
- sonicwall nsa 2400Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp)...4.3 Medium
- mcafee asset managerDirectory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows...4.0 Medium
- mcafee asset managerSQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows...6.5 Medium
- mcafee cloud single sign onCross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On ...4.3 Medium
- owncloud serverownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote...4.9 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote...4.3 Medium
- stunnelstunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL...4.3 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6...6.5 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x...6.5 Medium
- moodleMoodle attackers to modify grade metadata4.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerability3.5 Low
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...7.8 High
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreSiemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause...6.1 Medium
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreThe random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0...8.3 High
- moodleMoodle allows attackers to modify the visibility of a badge4.0 Medium
- moodleMoodle's time-validation implementation allows bypassing intended restrictions4.9 Medium
- moodleMoodle cross-site request forgery (CSRF) vulnerability6.8 Medium
- moodleMoodle places a session key in a URL5.8 Medium
- moodleMoodle allows attackers to obtain sensitive information4.0 Medium
- moodleMoodle does not properly restrict access4.9 Medium
- moodleMoodle allows bypass of intended access restrictions4.9 Medium
- flowplayer html5Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in...4.3 Medium
- flowplayer html5Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in...4.3 Medium
- flowplayer flash, moodle +1 moreMoodle cross-site scripting (XSS) vulnerabilities4.3 Medium
- emc connectrix managerThe FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE)...5.0 Medium
- trojita project trojitaThe OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in...4.3 Medium
- ibm datacap taskmaster captureStack-based buffer overflow in the Taskmaster Capture ActiveX control in IBM Datacap Taskmaster...9.3 High
- ibm rational clearcaseMultiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10,...6.5 Medium
- ibm quickfileCross-site scripting (XSS) vulnerability in IBM QuickFile 1.0.0.0 before iFix 4 and 1.1.0.1...3.5 Low
- ibm websphere mq internet pass thruThe command-port listener in IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x before 2.1.0.1...5.0 Medium
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...4.3 Medium
- cisco catalyst 6500, ios +1 moreCisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst...7.1 High
- cisco content security management appliance, email security appliance firmware, ironport asyncos +2 moreThe End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security...8.5 High
- cisco webex meeting centerWebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET...5.0 Medium
- apache camelApache Camel's XSLT component allows remote attackers to execute arbitrary Java methods7.5 High
- apache camelApache Camel's XSLT component allows remote attackers to read arbitrary files7.5 High
- videolan vlc media playerVideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service ...4.3 Medium
- gplhost domain technologie controlSQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms...6.5 Medium
- gplhost domain technologie controlThe install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for...7.5 High
- gplhost domain technologie controlThe drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain...7.5 High
- gplhost domain technologie controlDirectory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC)...6.5 Medium
- gplhost domain technologie controlSQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote...6.5 Medium
- mozilla network security servicesThe cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation...4.3 Medium
- jansson project janssonJansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions...5.0 Medium
- Show moreLoading…