Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromeThe PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0...CVE-2014-1733Fix available7.5 HighApril 26, 2014
google chromeUse-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google...CVE-2014-1732Fix available7.5 HighApril 26, 2014
birebin birebin.com appThe Birebin.com application for Android does not verify X.509 certificates from SSL servers,...CVE-2014-29936.4 MediumApril 26, 2014
misli misli.com appThe Misli.com application for Android does not verify X.509 certificates from SSL servers, which...CVE-2014-29926.4 MediumApril 26, 2014
pocoproject poco c\+\+ librariesThe Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before...CVE-2014-0350Fix available6.4 MediumApril 26, 2014
google chromeMultiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome...CVE-2014-1735Fix available7.5 HighApril 26, 2014
google chromecore/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome...CVE-2014-1731Fix available7.5 HighApril 26, 2014
google chromeGoogle V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847...CVE-2014-1730Fix available7.8 HighApril 26, 2014
xclonerXCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote...CVE-2014-2996Public exploit7.1 HighApril 25, 2014
xclonerMultiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier...CVE-2014-2579Public exploit7.6 HighApril 25, 2014
powersoftware winarchiverBuffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary...CVE-2013-5660Public exploitEPSS 11.2%9.3 HighApril 25, 2014
ddsn cm3 acora content management systemCross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2...CVE-2013-47266.8 MediumApril 25, 2014
ddsn cm3 acora content management systemOpen redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5...CVE-2013-47235.8 MediumApril 25, 2014
ddsn cm3 acora content management systemMultiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN...CVE-2013-47224.3 MediumApril 25, 2014
debian ppthtmlHeap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote...CVE-2013-45656.8 MediumApril 25, 2014
netgear wndr4700, wndr4700 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34...CVE-2013-30693.5 LowApril 25, 2014
ushahidi platformCross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote...CVE-2013-20254.3 MediumApril 25, 2014
ektron content management systemCross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055...CVE-2014-27293.5 LowApril 25, 2014
joomlaboat com youtubegalleryCross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery ...CVE-2013-59564.3 MediumApril 25, 2014
openx, revive-adserver revive adserver +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow...CVE-2013-5954Public exploit6.8 MediumApril 25, 2014
tinymceThe bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the ...CVE-2012-42304.3 MediumApril 25, 2014
siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreCRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices...CVE-2014-29095.8 MediumApril 25, 2014
siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreCross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200...CVE-2014-2908Public exploitEPSS 20.9%4.3 MediumApril 25, 2014
indusoft web studioInduSoft Web Studio Path TraversalCVE-2014-0780In KEVPublic exploitEPSS 74.7%7.5 April 25, 2014
festo cecx-x-c1 modular master controller with codesys, cecx-x-c1 modular master controller, cecx-x-m1 modular controller with codesys and softmotion +3 more +5 moreFesto CECX-X-(C1/M1) Controller Improper AuthenticationCVE-2014-07699.3 April 25, 2014
festo cecx-x-c1 modular master controller with codesys, cecx-x-c1 modular master controller, softmotion3d softmotion +3 more +5 moreFesto CECX-X-(C1/M1) Controller Improper AuthenticationCVE-2014-07609.3 April 25, 2014
debian strongswanstrongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer...CVE-2014-2891Fix available5.0 MediumApril 25, 2014
ruby-lang ruby** DISPUTED ** The openssl extension in Ruby 2.x does not properly maintain the state of process...CVE-2014-2734Public exploitDisputed5.8 MediumApril 24, 2014
hp integrated lights-out 2 firmwareThe server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to...CVE-2014-26017.8 HighApril 24, 2014
xenXen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features,...CVE-2014-2915Fix available5.5 MediumApril 24, 2014
modx revolutionMultiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to...CVE-2014-27367.5 HighApril 24, 2014
redhat openshiftThe openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not...CVE-2014-0188Fix available7.5 HighApril 24, 2014
wiresharkThe srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1...CVE-2014-2907Fix available4.3 MediumApril 24, 2014
ibm smartcloud analytics log analysisCross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2...CVE-2013-67384.3 MediumApril 24, 2014
cisco asr 1001, asr 1002, asr 1002-x +6 more +8 moreCisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote...CVE-2012-57236.1 MediumApril 24, 2014
cisco iosCisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in...CVE-2012-39465.0 MediumApril 24, 2014
oracle openjdkUnspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and...CVE-2014-240510.0 HighApril 24, 2014
oracle openjdkUnspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and...CVE-2014-046210.0 HighApril 24, 2014
microsoft internet information servicesCRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services...CVE-2011-5279EPSS 19.6%5.0 MediumApril 23, 2014
symantec encryption desktop, pgp desktop +1 moreSymantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3...CVE-2014-16472.6 LowApril 23, 2014
symantec encryption desktop, pgp desktop +1 moreSymantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3...CVE-2014-16462.6 LowApril 23, 2014
ibm lotus domino, lotus notes +1 moreIBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux...CVE-2014-08925.0 MediumApril 23, 2014
systemd MageiaUpdated systemd packages fix a buffer overflowMGASA-2014-0188Fix availableNo scoreApril 23, 2014
drupal, debian linux +1 moreDrupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different...CVE-2014-2983Fix available5.0 MediumApril 23, 2014
sixnet sixview managerDirectory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read...CVE-2014-2976Public exploit5.0 MediumApril 23, 2014
llvm clang, opensuse +1 moreThe GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users...CVE-2014-28931.9 LowApril 23, 2014
herry sfpagentsfpagent Command Injection vulnerabilityCVE-2014-2888Fix available7.5 HighApril 23, 2014
cacti, debian linux +1 morelib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary...CVE-2014-2709Fix available7.5 HighApril 23, 2014
otrs, opensuse +1 moreOTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to...CVE-2014-2554Fix available4.3 MediumApril 23, 2014
cacti, debian linux, fedoraproject fedora +1 more +3 morelib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to...CVE-2014-2328Fix available6.5 MediumApril 23, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open