CVEs published in March 2014
544 vulnerabilities, 68 critical, 2 exploited.
- b-e-soft artweaver plus, artweaver free +1 moreStack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to...9.3 High
- getsymphony symphonySQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to...6.5 Medium
- nuance pdf readerHeap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote...9.3 High
- openbsd opensshThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...5.8 Medium
- emc rsa authentication managerCross-site scripting (XSS) vulnerability in the Self-Service Console in EMC RSA Authentication...4.3 Medium
- adobe acrobat readerAdobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via...10.0 High
- adobe acrobat readerHeap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary...10.0 High
- adobe flash playerHeap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute...10.0 High
- adobe flash playerUse-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x...10.0 High
- apple safariHeap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary...10.0 High
- apple safariUnspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute...10.0 High
- ithoughts ithoughtshdThe iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote...4.3 Medium
- ithoughts ithoughtshdThe iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows...4.3 Medium
- ithoughts ithoughtshdCross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices,...2.6 Low
- ibm security appscanThe update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity...7.6 High
- ibm netezza performance portalThe (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza...3.5 Low
- ibm infosphere biginsightsCRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere...3.5 Low
- ibm infosphere biginsightsOpen redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere...4.9 Medium
- ibm data protection, flashcopy manager, tivoli storage flashcopy manager +1 more +3 moreThe (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM...2.1 Low
- haxx curl, libcurl +1 morecurl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS...4.0 Medium
- haxx curl, libcurl +1 morecURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 Medium
- haxx curl, libcurl, debian linux +2 moreThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 Medium
- pyyaml libyaml, opensuse leap, opensuse +2 moreHeap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6...6.8 Medium
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...6.2 Medium
- qemuThe qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows...5.5 Medium
- qemuMultiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a...7.8 High
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...8.6 High
- qemu, redhat enterprise linux +1 moreMultiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users...7.0 High
- qemuQEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero...5.5 Medium
- apache xalan-java, oracle webcenter sites +1 moreImproper Authorization in Apache Xalan-Java7.5 High
- ibm lotus protector for mail securityThe Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote...7.1 High
- ibm lotus protector for mail securityThe Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote...7.1 High
- ibm lotus protector for mail securityCross-site request forgery (CSRF) vulnerability in the Admin Web UI in IBM Lotus Protector for...6.8 Medium
- ibm lotus protector for mail securityCross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail...3.5 Low
- virtualaccess gw6110a, gw6110a firmware +1 moreThe web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50...4.9 Medium
- ibm cognos expressIBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before...5.0 Medium
- ibm cognos expressThe server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10...5.0 Medium
- ibm cognos expressCross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5...6.8 Medium
- openstack computeOpenStack Nova VMWare driver leaks rescued images2.3 Low
- icinga, opensuse +1 moreMultiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to...5.0 Medium
- joshua peek rack-sslrack-ssl Cross-site Scripting vulnerability4.3 Medium
- barracudadriveMultiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7 allow remote...6.1 Medium
- oxid-esales eshopMultiple cross-site scripting (XSS) vulnerabilities in OXID eShop Professional and Community...4.3 Medium
- maygion ip camera firmwareBuffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote...7.5 High
- maygion ip camera firmwareDirectory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53)...5.0 Medium
- mozilla firefoxMozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the...1.9 Low
- dell bsafe micro-edition-suiteThe server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly...5.0 Medium
- microsoft office, office compatibility pack, office web apps +4 more +6 moreMicrosoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office...9.3 High
- wysija newsletters project newslettersMultiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for...6.5 Medium
- opensolution quick.cart, quick cms +1 moreCross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0,...4.3 Medium
- Show moreLoading…