CVEs published in April 2014
645 vulnerabilities, 61 critical, 3 exploited.
- snilesh content slideCross-site request forgery (CSRF) vulnerability in the Content Slide plugin 1.4.2 for WordPress...6.8 Medium
- rodrigo polo stream video playerCross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for...6.8 Medium
- erlang-solutions mongooseimErlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream7.8 High
- tigasenet/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed...7.8 High
- lightwitch metronomeplugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the...7.8 High
- isode m-linkIsode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements,...7.8 High
- igniterealtime openfireIgnite Realtime Openfire vulnerable to XMPPbomb attack7.8 High
- elfutils project elfutilsInteger overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used...6.8 Medium
- qemu, canonical ubuntu linux +1 morehw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial...4.9 Medium
- mono-project mono, debian linux +1 moreThe TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via...9.8 Critical
- mono-project monoThe TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher...7.5 High
- mono-project mono, debian linux +1 moreThe TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message...8.1 High
- ibm spss analytic serverIBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which...4.0 Medium
- ibm business process managerThe User Attribute implementation in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8...6.0 Medium
- dell openmanage server administratorOpen redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows...5.8 Medium
- roundup-tracker roundupRoundup Cross-site Scripting (XSS) vulnerability4.3 Medium
- sap business object processing framework for abapSAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes...7.5 High
- sap print and output managementSAP Print and Output Management has hardcoded credentials, which makes it easier for remote...7.5 High
- sap hanaThe HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host...5.0 Medium
- sap enhancement packageThe Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote...7.5 High
- sap enterprise portalSAP Enterprise Portal does not properly restrict access to the Federation configuration pages,...7.5 High
- sap software deployment managerThe SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote...5.0 Medium
- sap enterprise portalCross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to...4.3 Medium
- sap netweaverAn unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict...7.5 High
- sap solution managerUnspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote...7.5 High
- sap ccms agentAn unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary...7.5 High
- sap cm services, cms services +1 moreDirectory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary...5.0 Medium
- sap adminadapterUnspecified vulnerability in SAP adminadapter allows remote attackers to read or write to...7.5 High
- sap mobile infrastructureUnspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain...5.0 Medium
- sap guided procedures archive monitorUnspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to...5.0 Medium
- sap j2ee engineUnspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers...5.0 Medium
- sap ccms \/ database monitorUnspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to...5.0 Medium
- sap bi universal data integrationSQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to...7.5 High
- cactiMultiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier...7.5 High
- pearson esis enterprise student information systemSQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise...7.5 High
- fortinet fortiadc-1000e, fortiadc-1500d, fortiadc-2000d +6 more +8 moreCross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with...4.3 Medium
- redhat jboss bpm suite, jboss drools, jboss enterprise brms platform +2 moreJBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows...6.5 Medium
- lesterchan wp-postviewsCross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews...6.8 Medium
- qianqin qtranslateCross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for...6.8 Medium
- underconstruction project underconstructionCross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for...6.8 Medium
- wp-plugins wp-printCross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52...6.8 Medium
- cloudbees jenkinsJenkins vulnerable to Cross-site Scripting2.1 Low
- dvs custom notification project custom notificationMultiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin...6.8 Medium
- cisco ons 15454, ons 15454 system software +1 moreThe session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and...4.0 Medium
- cisco adaptive security appliance softwareThe SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48...7.1 High
- cisco adaptive security appliance softwareThe SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5...5.0 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4...8.5 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7...8.5 High
- linux-pamMultiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for...5.8 Medium
- cambridge enterprise jbig-kitStack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1...6.8 Medium
- Show moreLoading…