CVEs published in April 2014
645 vulnerabilities, 61 critical, 3 exploited.
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safari, itunes +1 moreWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate...5.0 Medium
- dotcmsMultiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers...4.3 Medium
- b2evolutionSQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote...6.5 Medium
- tracker-software pdf-xchange viewerHeap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers...9.3 High
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote...4.3 Medium
- otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21...3.5 Low
- autodesk sketchbook, sketchbook for enterprise 2014, sketchbook express +1 more +3 moreHeap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6...9.3 High
- hitmyserver hms testimonialsMultiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before...6.8 Medium
- vtiger crmMultiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers...7.5 High
- ganglia ganglia-webCross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote...4.3 Medium
- cisco security managerCRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier...4.3 Medium
- cisco web security appliance, web security virtual appliance +1 moreCRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and...4.3 Medium
- cisco unity connectionCross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3...4.3 Medium
- pearson esis enterprise student information systemCross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise...4.3 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM...3.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere...4.3 Medium
- zyxel p-660h-61, p-660h-63, p-660h-67 +8 more +10 moreThe web management interface on Zyxel P660 devices allows remote attackers to cause a denial of...7.8 High
- posh project poshThe remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3...5.0 Medium
- openstack keystoneOpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend5.0 Medium
- xenThe (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC...4.9 Medium
- xenOff-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2...5.8 Medium
- xenMultiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and...5.2 Medium
- xenMultiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the...5.2 Medium
- xenXen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via...5.2 Medium
- xenMultiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4)...5.2 Medium
- checkpoint security gatewayMultiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 ...10.0 High
- linux kernelDouble free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12...4.6 Medium
- redhat satellite, spacewalk-java +1 moreCRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...4.3 Medium
- redhat jboss operations networkRed Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory...3.7 Low
- redhat jboss operations networkRed Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource"...3.5 Low
- qemu, xen, redhat enterprise linux +2 moreBuffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen,...4.0 Medium
- linux kernelThe arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc...4.7 Medium
- linux kernelRace condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the...7.1 High
- sonatype nexusUnspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to...7.5 High
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron Improper Authentication vulnerability2.1 Low
- raoul proenca gnewMultiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary...7.5 High
- raoul proenca gnewMultiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary...7.5 High
- jgaa warftpdUnspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service,...10.0 High
- jgaa warftpdFormat string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated...4.0 Medium