Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

cacti, debian linux, opensuse +2 moreCross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows...CVE-2014-2327Fix available6.8 MediumApril 23, 2014
cisco adaptive security appliance softwareMemory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software...CVE-2014-21545.0 MediumApril 23, 2014
symantec messaging gatewayCross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo...CVE-2014-16484.3 MediumApril 23, 2014
apple mac os xThe kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure...CVE-2014-1322Public exploit4.9 MediumApril 23, 2014
apple mac os xPower Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to...CVE-2014-13213.3 LowApril 23, 2014
apple iphone os, mac os x, tvos +2 moreIOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places...CVE-2014-13204.9 MediumApril 23, 2014
apple mac os xBuffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute...CVE-2014-13196.8 MediumApril 23, 2014
apple mac os xThe Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain...CVE-2014-131810.0 HighApril 23, 2014
apple mac os xHeimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of...CVE-2014-13165.0 MediumApril 23, 2014
apple mac os xFormat string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows...CVE-2014-13156.8 MediumApril 23, 2014
apple mac os xWindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed...CVE-2014-131410.0 HighApril 23, 2014
apple iphone os, mac os x, mac os x server +1 more +3 moreCFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does...CVE-2014-12964.3 MediumApril 23, 2014
apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and...CVE-2014-12956.8 MediumApril 23, 2014
cisco iosCisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated...CVE-2012-54274.0 MediumApril 23, 2014
cisco ios, as5400 universal gateway, as5400hpx universal gateway +2 more +4 moreUnspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote...CVE-2012-54226.8 MediumApril 23, 2014
cisco iosCisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a...CVE-2012-50445.4 MediumApril 23, 2014
cisco iosThe BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial...CVE-2012-50394.3 MediumApril 23, 2014
cisco catalyst 6500, ios, catalyst 7600 +2 moreThe ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows...CVE-2012-50374.6 MediumApril 23, 2014
cisco iosCisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service ...CVE-2012-50366.8 MediumApril 23, 2014
cisco iosThe Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1...CVE-2012-50326.4 MediumApril 23, 2014
cisco ios, asr 1001, asr 1002 +5 more +7 moreCisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service ...CVE-2012-50176.8 MediumApril 23, 2014
cisco iosCisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device...CVE-2012-50146.3 MediumApril 23, 2014
cisco iosThe ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause...CVE-2012-46585.0 MediumApril 23, 2014
cisco iosCisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of...CVE-2012-46514.3 MediumApril 23, 2014
cisco iosCisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by...CVE-2012-46384.9 MediumApril 23, 2014
cisco ios, catalyst 2900, catalyst 2900 vlan +1 more +3 moreCisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for...CVE-2012-39184.3 MediumApril 23, 2014
cisco iosCisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows...CVE-2012-30625.7 MediumApril 23, 2014
cisco ios, asr 1001, asr 1002 +7 more +9 moreCisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking...CVE-2012-13666.1 MediumApril 23, 2014
cisco iosThe multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a...CVE-2012-13175.4 MediumApril 23, 2014
cisco iosMemory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote...CVE-2012-03605.0 MediumApril 23, 2014
python-django Ubuntupython-django regressionUSN-2169-2Fix availableNo scoreApril 23, 2014
qemuOff-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...CVE-2014-2894Fix available7.2 HighApril 23, 2014
yassl cyasslwolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical...CVE-2014-29005.8 MediumApril 22, 2014
yassl cyasslwolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer...CVE-2014-28995.0 MediumApril 22, 2014
libmms project libmmsHeap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows...CVE-2014-2892Fix available7.5 HighApril 22, 2014
siege phpmyidCross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9...CVE-2014-28904.3 MediumApril 22, 2014
knowledgetreeSQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in...CVE-2014-27377.5 HighApril 22, 2014
papercut mf, ng +1 moreCross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1...CVE-2014-26596.8 MediumApril 22, 2014
mobfox madserveMultiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote...CVE-2014-26546.5 MediumApril 22, 2014
carbonblack carbon blackMultiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow...CVE-2014-16156.8 MediumApril 22, 2014
freedesktop popplerThe openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...CVE-2013-44723.3 LowApril 22, 2014
node packaged modules project packaged modulesLocal Privilege Escalation in npmCVE-2013-4116Fix available3.3 LowApril 22, 2014
apache archivaCross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8...CVE-2013-21874.3 MediumApril 22, 2014
jonathan leung show in browserScript Injection in Show In Browser gemCVE-2013-21053.3 LowApril 22, 2014
webcalendar project webcalendarCross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and...CVE-2013-14214.3 MediumApril 22, 2014
openjpeg Debianopenjpeg - regression updateDSA-2808-2Fix availableNo scoreApril 22, 2014
djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to MySQL InjectionCVE-2014-0474Fix available10.0 HighApril 22, 2014
djangoproject django, canonical ubuntu linux +1 moreDjango Reuses Cached CSRF TokenCVE-2014-0473Fix available5.0 MediumApril 22, 2014
djangoproject django, canonical ubuntu linux +1 moreCode Injection in DjangoCVE-2014-0472Public exploitFix available5.1 MediumApril 22, 2014
pimcoreThe getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore...CVE-2014-2922Public exploit6.4 MediumApril 21, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open