Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle sunosUnspecified vulnerability in lighttpd in Oracle Solaris 11.1 allows attackers to cause a denial...CVE-2014-24695.0 MediumApril 17, 2014
net-snmpThe AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service...CVE-2014-2310Fix available5.0 MediumApril 17, 2014
sap routerThe passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier...CVE-2014-0984Public exploit4.3 MediumApril 17, 2014
apache syncopeApache Syncope JEXL Code InjectionCVE-2014-0111Fix available6.5 MediumApril 17, 2014
redhat jboss fuse, jboss a-mq +1 moreExposure of Sensitive Information to an Unauthorized Actor in JBoss FuseCVE-2014-0085Fix available2.1 LowApril 17, 2014
redhat openstackPackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to...CVE-2014-0071Fix available6.4 MediumApril 17, 2014
amos benari rbovirtrbovirt uses the rest-client gem with SSL verification disabledCVE-2014-0036Fix available6.8 MediumApril 17, 2014
theforeman katello, redhat network satellite +1 moreThe users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check...CVE-2013-2143Public exploitEPSS 48.2%6.5 MediumApril 17, 2014
canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134...CVE-2011-31541.9 LowApril 17, 2014
emc cloud tiering appliance, file management appliance, cloud tiering appliance software +1 more +3 moreEMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x...CVE-2014-06454.7 MediumApril 17, 2014
emc cloud tiering appliance, cloud tiering appliance software +1 moreEMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files...CVE-2014-0644Public exploitEPSS 53.3%7.8 HighApril 17, 2014
samba rsyncThe check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to...CVE-2014-2855Fix available7.8 HighApril 17, 2014
nullsoft winampStack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote...CVE-2013-4694Public exploitEPSS 17.2%7.5 HighApril 16, 2014
freebsdThe NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order...CVE-2014-14534.0 MediumApril 16, 2014
packagekit project packagekitThe Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages...CVE-2013-17642.1 LowApril 16, 2014
canonical accountsservice, ubuntu linux +1 moreThe Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges...CVE-2011-4406Fix available3.6 LowApril 16, 2014
suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-41957.5 HighApril 16, 2014
suse studio extension for system z, studio onsite +1 moreCross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2...CVE-2011-41934.3 MediumApril 16, 2014
suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-41927.5 HighApril 16, 2014
bzip bzip2The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not...CVE-2011-4089Public exploitFix available4.6 MediumApril 16, 2014
suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-31807.5 HighApril 16, 2014
novell suse lifecycle management serverSUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which...CVE-2011-09932.1 LowApril 16, 2014
kbd-project kbd, opensuse +1 moreThe init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary...CVE-2011-0460Fix available6.3 MediumApril 16, 2014
oracle ilearningUnspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1...CVE-2014-24714.3 MediumApril 16, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-24707.5 HighApril 16, 2014
oracle siebel crmUnspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2...CVE-2014-24684.3 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain...CVE-2014-24673.5 LowApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain...CVE-2014-24662.1 LowApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain...CVE-2014-24654.3 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain...CVE-2014-24643.5 LowApril 16, 2014
oracle virtualizationUnspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle...CVE-2014-24634.3 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2014-24615.0 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2014-24604.0 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2014-24593.7 LowApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain...CVE-2014-24584.3 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain...CVE-2014-24574.3 MediumApril 16, 2014
oracle hyperionUnspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and...CVE-2014-24556.0 MediumApril 16, 2014
oracle hyperionUnspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and...CVE-2014-24544.3 MediumApril 16, 2014
oracle hyperionUnspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and...CVE-2014-24534.3 MediumApril 16, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1...CVE-2014-24524.0 MediumApril 16, 2014
oracle mysqlUnspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated...CVE-2014-24513.5 LowApril 16, 2014
oracle mysqlUnspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated...CVE-2014-24504.0 MediumApril 16, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component...CVE-2014-24494.0 MediumApril 16, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle...CVE-2014-24485.0 MediumApril 16, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle...CVE-2014-24475.0 MediumApril 16, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle...CVE-2014-24464.0 MediumApril 16, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain...CVE-2014-24453.5 LowApril 16, 2014
oracle mysqlUnspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated...CVE-2014-24446.5 MediumApril 16, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle...CVE-2014-24434.3 MediumApril 16, 2014
oracle mysqlUnspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated...CVE-2014-24424.0 MediumApril 16, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open