CVEs published in April 2014
645 vulnerabilities, 61 critical, 3 exploited.
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5...4.0 Medium
- openstack compute, icehouse +1 moreOpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests6.0 Medium
- openstack horizon, opensuse +1 moreOpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting4.3 Medium
- redhat libvirt, fedoraproject fedora +1 moreThe LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete...5.8 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...5.0 Medium
- linux kernelThe cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through...4.6 Medium
- juniper junosThe Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before...7.1 High
- juniper junosJuniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13...5.0 Medium
- juniper junosCross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10...4.3 Medium
- juniper junosCross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before...4.3 Medium
- juniper junosJuniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote...7.1 High
- juniper junos, srx100, srx110 +5 more +7 moreUnspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12...5.0 Medium
- strongswanIKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by...6.4 Medium
- linux kernelThe ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not...5.5 Medium
- openssl, fedoraproject fedora, mariadb +4 more +6 moreRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 Medium
- blackberry z10, os +1 moreStack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10...9.3 High
- cisco ons 15454, ons 15454 system software +1 moreCisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a...5.0 Medium
- cisco ons 15454, ons 15454 system software +1 moreCisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a...5.0 Medium
- cisco ons 15454, ons 15454 system software +1 moreCisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a...5.0 Medium
- wellintech kingscadaWellinTech KingSCADA Stack-based Buffer Overflow10.0
- advantech webaccessAdvantech WebAccess Command Injection7.5
- advantech webaccessAdvantech WebAccess File and Directory Information Exposure5.0
- advantech webaccessAdvantech WebAccess File and Directory Information Exposure7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess Stack-based Buffer Overflow7.5
- advantech webaccessAdvantech WebAccess SQL Injection7.5
- j2k-codecMultiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary...10.0 High
- websense triton unified security center, triton web filter, triton web security +2 more +4 moreThe Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter...3.5 Low
- hp array configuration utility, array diagnostics utility, proliant array diagnostics +1 more +3 moreUnspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant...2.1 Low
- osisoft pi interfaceThe DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically...4.7 Medium
- osisoft pi interfaceThe DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote...7.1 High
- vmware vsphere clientVMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X...5.8 Medium
- vmware vsphere clientVMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly...9.3 High
- dell bsafe micro-edition-suiteEMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not...5.8 Medium
- apps4u\@android sd card managerDirectory traversal vulnerability in the apps4u@android SD Card Manager application before...5.8 Medium
- ioserver opc server, opc drivers +1 moreOServer Out of Bounds Read8.3
- sophos web appliance, web appliance firmware +1 moreThe network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2...8.5 High
- sophos web appliance, web appliance firmware +1 moreThe Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows...8.5 High
- tenable nessus, plugin-set +1 moreA race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows...6.9 Medium
- construtiva cis manager cmsSQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute...7.5 High
- roundup-tracker roundupRoundup Cross-site scripting (XSS) vulnerability4.3 Medium
- roundup-tracker roundupRoundup Cross-site Scripting (XSS) vulnerability4.3 Medium
- orbitscripts orbit open ad serverSQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote...7.5 High
- marcel brinkkemper lazyest-galleryCross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for...2.6 Low
- redmineOpen redirect vulnerability in the redirect_back_or_default function in app/controllers...5.8 Medium
- reviewboard review boardCross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6...4.3 Medium
- Show moreLoading…