CVEs published in April 2014
645 vulnerabilities, 61 critical, 3 exploited.
- tibco analyst, automation services, deployment kit +4 more +6 moreUnspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server...7.5 High
- wordpressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3...6.4 Medium
- wordpressWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts...4.0 Medium
- google chromeMultiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome...7.5 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to...7.5 High
- google chromeUse-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome...7.5 High
- google chromeThe drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote...4.3 Medium
- google chromeThe base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome...5.0 Medium
- google chromeUse-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google...7.5 High
- google chromeThe UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847...7.5 High
- google chromeUse-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function...7.5 High
- google chromeGoogle V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy...7.5 High
- google chromeUse-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html...7.5 High
- google chromeUse-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in...7.5 High
- google chromeInteger overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser...7.5 High
- google chromeGoogle V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts...7.5 High
- google chrome, debian linux, opensuse +2 moreCross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in...7.5 High
- squid-cache squid, opensuse +1 moreSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...5.0 Medium
perl-Authen-CaptchaMageiaUpdated perl-Authen-Captcha package uses randomly generated filenamesNo score- openafsOpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows...5.0 Medium
- imagemagick, suse linux enterprise desktop, linux enterprise server +1 more +3 moreStack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4...7.8 High
- openafs, debian linux +1 moreBuffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft publisherpubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute...9.3 High
- microsoft wordStack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute...9.3 High
- microsoft office compatibility pack, word +1 moreMicrosoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- adobe air, air sdk, flash player +2 moreCross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x...4.3 Medium
- adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and...5.0 Medium
- adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreUntrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...6.9 Medium
- tibco messaging appliance, rendezvous, substantiation es +2 moreBuffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous...7.5 High
- tibco messaging appliance, rendezvous, substantiation es +2 moreCross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing...4.3 Medium
- tibco messaging appliance, rendezvous, substantiation es +2 moreThe Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd),...5.0 Medium
- danielb finderCross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6...4.3 Medium
- clip-bucket clipbucketMultiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to...4.3 Medium
- clip-bucket clipbucketMultiple SQL injection vulnerabilities in the update_counter function in includes/functions.php...7.5 High
- clip-bucket clipbucketCross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject...4.3 Medium
- danielb finderCross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x,...4.3 Medium
- znc znc-msvcThe CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and...5.0 Medium
- advanced forum signatures project forum signaturesSQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka...7.5 High
- advanced forum signatures project forum signaturesMultiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka...7.5 High
- silverstripeCross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe...4.3 Medium
- json-c, fedoraproject fedora +1 moreThe hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial...5.0 Medium
- json-c, fedoraproject fedora +1 moreBuffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a...5.0 Medium
- prestashopCross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules...4.3 Medium
- david paleino wicd, fedoraproject fedora +1 moreThe SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to...6.9 Medium
- Show moreLoading…