CVEs published in April 2014
645 vulnerabilities, 61 critical, 3 exploited.
- oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...9.3 High
- oracle fusion middlewareUnspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware...4.3 Medium
- sun sunosUnspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows...4.6 Medium
- oracle fusion middlewareUnspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware...5.0 Medium
- oracle fusion middlewareUnspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware...4.3 Medium
- eucalyptusThe web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of...5.0 Medium
- vmware player, workstation +1 morevmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on...4.9 Medium
- kokuyo camiappThe Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows...5.8 Medium
- adobe readerThe Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of...9.3 High
- tigervncMultiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in...9.8 Critical
- digium asterisk, certified asterisk, fedoraproject fedora +2 morechannels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1...3.5 Low
- digium asterisk, certified asterisk, fedoraproject fedora +2 moremain/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x...7.5 High
- gopivotal grails, grails-resources +1 moreDirectory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2...5.0 Medium
- gopivotal grails, grails-resources +1 moreThe default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0...5.0 Medium
- gopivotal grails, grails-resources +1 moreThe default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0...5.0 Medium
- advanced package tool package toolThe pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0...4.3 Medium
- canonical libpam-modules, ubuntu linux +1 moreUntrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1...6.9 Medium
- redhat satellite, spacewalk-java, network proxy +2 moreThe monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...6.0 Medium
- openfabrics ibutilsUntrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable...4.4 Medium
- raoul proenca gnewMultiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to...4.3 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 moreThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...5.0 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 morecURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 Medium
- juniper screenosJuniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and...7.8 High
- openstack keystoneOpenStack Identity (Keystone) DoS through V3 API authentication chaining7.8 High
- citrix vdi-in-a-boxCitrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain...2.1 Low
- openstack python-keystoneclientpython-keystoneclient vulnerable to context confusion in Keystone auth_token middleware6.0 Medium
- xangati xnr, software release +1 moreXangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via...9.0 High
- xangati xnr, software release +1 moreMultiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow...7.8 High
- amtelco misecuremessagesAmtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an...5.0 Medium
- zyxel n300 netusb nbg-419n, n300 netusb nbg-419n firmware +1 moreThe ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote...7.9 High
- zyxel n300 netusb nbg-419n, n300 netusb nbg-419n firmware +1 moreMultiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with...7.9 High
- zyxel n300 netusb nbg-419n, n300 netusb nbg-419n firmware +1 moreThe ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded...7.8 High
- zyxel n300 netusb nbg-419n, n300 netusb nbg-419n firmware +1 moreThe ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote...6.1 Medium
- ontariosystems artiva architect, artiva healthcare, artiva rm +1 more +3 moreThe Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9,...3.5 Low
- pivotxMultiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow...7.5 High
- pivotxMultiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote...3.5 Low
- trustwave modsecurity, debian linux +1 moreapache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by...5.0 Medium
- xenThe netback driver in Xen, when using certain Linux versions that do not allow sleeping in...4.4 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5...5.1 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...6.5 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and...2.8 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...2.6 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...4.0 Medium
- canonical ubuntu linux, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...4.3 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...5.0 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...9.3 High
- canonical ubuntu linux, debian linux, ibm forms viewer +4 more +6 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...10.0 High
- Show moreLoading…