Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco ios xe, asr 1001, asr 1002 +6 more +8 moreThe L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote...CVE-2014-21836.3 MediumApril 29, 2014
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote...CVE-2014-21826.1 MediumApril 29, 2014
cisco unified contact center enterprise, unified contact center express editor software +1 moreThe Document Management component in Cisco Unified Contact Center Express does not properly...CVE-2014-21804.0 MediumApril 29, 2014
southrivertech titan ftp serverDirectory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build...CVE-2014-1843Public exploit5.0 MediumApril 29, 2014
southrivertech titan ftp serverDirectory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build...CVE-2014-1842Public exploit5.0 MediumApril 29, 2014
southrivertech titan ftp serverDirectory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build...CVE-2014-1841Public exploit5.0 MediumApril 29, 2014
adobe flash playerBuffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0...CVE-2014-0515Public exploitFix availableEPSS 94.5%10.0 HighApril 29, 2014
apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0113Public exploitFix availableEPSS 78.3%7.5 HighApril 29, 2014
apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0112Public exploitFix availableEPSS 98.1%7.5 HighApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 CriticalApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 HighApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 MediumApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 HighApril 29, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 HighApril 29, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 MediumApril 29, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 HighApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 CriticalApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 MediumApril 29, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 HighApril 29, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 HighApril 29, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 HighApril 29, 2014
mediawikiCross-site scripting vulnerability in includes/actions/InfoAction.phpCVE-2014-2853Fix available4.3 MediumApril 28, 2014
unitrends enterprise backupUnitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands...CVE-2014-3008Public exploit10.0 HighApril 28, 2014
xenThe vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor ...CVE-2014-2986Fix available5.5 MediumApril 28, 2014
gnustep baseTools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not...CVE-2014-2980Fix available4.3 MediumApril 28, 2014
westerndigital arkeia virtual appliance firmwareDirectory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual...CVE-2014-2846Public exploit7.5 HighApril 28, 2014
videowhisperMultiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the...CVE-2014-27154.3 MediumApril 28, 2014
papercut mf, ng +1 moreUnspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to...CVE-2014-26585.0 MediumApril 28, 2014
papercut mfUnspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build...CVE-2014-26577.5 HighApril 28, 2014
livetecs timelineUnrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive...CVE-2014-20427.5 HighApril 28, 2014
livetecs timelineLivetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which...CVE-2014-12177.5 HighApril 28, 2014
dkorunic pam s\/keyA certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory,...CVE-2013-42852.1 LowApril 28, 2014
dompdfDOMPDF Arbitrary File ReadCVE-2014-2383Public exploitFix availableEPSS 39.4%6.8 MediumApril 28, 2014
debian dpkg, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x...CVE-2014-0471Fix available5.0 MediumApril 28, 2014
super project supersuper.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag...CVE-2014-0470Fix available7.2 HighApril 28, 2014
openstack neutron, canonical ubuntu linux, opensuse +2 moreThe openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...CVE-2014-0187Fix available9.0 HighApril 28, 2014
litech router advertisement daemonThe router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the...CVE-2011-36034.4 MediumApril 27, 2014
python pillow, pythonware python imaging library +1 morePillow command injectionCVE-2014-3007Fix availableEPSS 10.4%10.0 HighApril 27, 2014
canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0...CVE-2011-31526.4 MediumApril 27, 2014
blenderThe undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to...CVE-2010-51053.3 LowApril 27, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers...CVE-2014-1776In KEVEPSS 82.7%10.0 HighApril 27, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-1766Public exploitEPSS 33.2%9.3 HighApril 27, 2014
microsoft internet explorerMultiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote...CVE-2014-1765EPSS 15.9%7.6 HighApril 27, 2014
microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and...CVE-2014-1764Public exploitEPSS 38.0%10.0 HighApril 27, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers...CVE-2014-1763EPSS 23.0%10.0 HighApril 27, 2014
microsoft internet explorerUnspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to...CVE-2014-1762Public exploitEPSS 71.2%7.5 HighApril 27, 2014
acunetix web vulnerability scannerStack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows...CVE-2014-2994Public exploitEPSS 23.3%10.0 HighApril 27, 2014
linux kernelOff-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux...CVE-2014-2889Fix available4.6 MediumApril 27, 2014
openstack icehouse, image registry and delivery service \(glance\) +1 moreOpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerabilityCVE-2014-0162Fix available6.0 MediumApril 27, 2014
google chromeMultiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X...CVE-2014-1734Fix available7.5 HighApril 26, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open