Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

pimcorePimcore Vulnerable to PHP Object Injection AttacksCVE-2014-2921Public exploitFix available7.5 HighApril 21, 2014
ibm sterling order management, sterling selling and fulfillment foundation +1 moreCross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and...CVE-2014-09323.5 LowApril 21, 2014
toshibacommerce 4690 point of sale operating systemThe default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS...CVE-2014-03613.0 LowApril 21, 2014
ibm rhapsody design manager, rational software architect design manager +1 moreUnspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational...CVE-2013-54595.5 MediumApril 21, 2014
asus rt-ac68u, rt-ac68u firmware, t-mobile tm-ac1900 +2 moreCross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and...CVE-2014-29254.3 MediumApril 21, 2014
winscpWinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches...CVE-2014-27355.8 MediumApril 21, 2014
asus rt-ac66u firmware, rt-ac68u, rt-ac68u firmware +7 more +9 moreAdvanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517,...CVE-2014-27196.3 MediumApril 21, 2014
cubecartSession fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web...CVE-2014-2341Public exploit6.8 MediumApril 21, 2014
vtiger crmmodules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to...CVE-2014-2269Public exploitEPSS 15.7%6.4 MediumApril 21, 2014
fitnesse wikiImproper Neutralization of Special Elements used in a Command in FitNesse WikiCVE-2014-1216Public exploitFix available7.5 HighApril 21, 2014
automattic jetpackThe Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before...CVE-2014-01735.8 MediumApril 21, 2014
redhat jboss overlord run time governance, jboss fuse service works +1 moreJBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to...CVE-2013-64696.5 MediumApril 21, 2014
asus rt-ac68u, rt-ac68u firmware, t-mobile tm-ac1900 +2 moreThe Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series...CVE-2013-5948Public exploit8.5 HighApril 21, 2014
mozilla bugzilla, fedoraproject fedora +1 moreThe login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly...CVE-2014-1517Fix available4.0 MediumApril 20, 2014
cisco cns network registrarThe DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a...CVE-2014-21555.0 MediumApril 19, 2014
hp hp-ux whitelistingUnspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31...CVE-2013-62193.8 LowApril 19, 2014
hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote...CVE-2013-621810.0 HighApril 19, 2014
hp universal configuration management databaseUnspecified vulnerability in the Integration Service in HP Universal Configuration Management...CVE-2013-62158.5 HighApril 19, 2014
hp database and middleware automationUnspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20...CVE-2013-62126.5 MediumApril 19, 2014
siemens sinema serverSiemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web...CVE-2014-27335.0 MediumApril 19, 2014
siemens sinema serverMultiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA...CVE-2014-27325.0 MediumApril 19, 2014
siemens sinema serverMultiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before...CVE-2014-27319.3 HighApril 19, 2014
toshibatec e-studio-232, e-studio-233, e-studio-282 +1 more +3 moreCross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management...CVE-2014-1990Public exploit6.8 MediumApril 19, 2014
cybozu remote service managerSession fixation vulnerability in the management screen in Cybozu Remote Service Manager through...CVE-2014-19846.8 MediumApril 19, 2014
cybozu remote service managerUnspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1...CVE-2014-19837.8 HighApril 19, 2014
lyesoft andexplorerDirectory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and...CVE-2014-19746.4 MediumApril 19, 2014
progea moviconProgea Movicon SCADA Exposure of Sensitive Information to an Unauthorized ActorCVE-2014-07784.3 April 19, 2014
hp universal configuration management databaseUnspecified vulnerability in the Integration Service in HP Universal Configuration Management...CVE-2013-62144.0 MediumApril 19, 2014
hp loadrunnerUnspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows...CVE-2013-6213EPSS 10.7%10.0 HighApril 19, 2014
remote-rac rac serverPCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service ...CVE-2014-25974.9 MediumApril 18, 2014
digium asteriskres/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1...CVE-2014-22893.5 LowApril 18, 2014
digium asteriskThe PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is...CVE-2014-22884.3 MediumApril 18, 2014
phpfoxstatic/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass...CVE-2013-7196Public exploit5.5 MediumApril 18, 2014
phpfoxPHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me"...CVE-2013-71955.5 MediumApril 18, 2014
f-secure secure messaging secure gatewayCross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch...CVE-2014-28443.5 LowApril 18, 2014
f-secure anti-virus, email and server security, server security +2 moreSQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti...CVE-2013-73697.5 HighApril 18, 2014
uclouvain openjpegStack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified...CVE-2013-429010.0 HighApril 18, 2014
uclouvain openjpegMultiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers...CVE-2013-428910.0 HighApril 18, 2014
f-secure anti-virus, psb workstation security, safe anywhere +2 moreF-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows...CVE-2012-66462.1 LowApril 18, 2014
systemd project systemd, opensuse +1 moreThe session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,...CVE-2012-0871Fix available6.3 MediumApril 18, 2014
apple cupsCross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System ...CVE-2014-2856Fix available4.3 MediumApril 18, 2014
qemuHeap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2...CVE-2014-0182Fix available7.5 HighApril 18, 2014
qemu, redhat enterprise linux +1 moreInteger overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and...CVE-2014-0150Fix available4.9 MediumApril 18, 2014
uclouvain openjpeg, opensuse +1 moreHeap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows...CVE-2014-0158Fix available8.8 HighApril 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7...CVE-2014-23934.3 MediumApril 17, 2014
open-xchange appsuiteThe E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7...CVE-2014-23924.3 MediumApril 17, 2014
open-xchange appsuiteThe password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1...CVE-2014-23914.3 MediumApril 17, 2014
oracle identity managerOpen redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware...CVE-2014-2880Public exploit5.8 MediumApril 17, 2014
sonicwall email security applianceMultiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and...CVE-2014-2879Public exploit4.3 MediumApril 17, 2014
linuxfoundation cups-filterscups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary...CVE-2014-2707Fix available8.3 HighApril 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open