Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
May

CVEs published in May 2014

554 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

phplistCross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in...CVE-2014-29166.8 MediumMay 5, 2014
debian xbuffyStack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows...CVE-2014-0469Fix available6.8 MediumMay 4, 2014
google chromeInteger overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...CVE-2014-1736Fix available7.5 HighMay 3, 2014
marc lehmann rxvt-unicoderxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user...CVE-2014-3121Fix available7.6 HighMay 2, 2014
xenXen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1...CVE-2014-3125Fix available6.2 MediumMay 2, 2014
sitepark information enterprise serverSitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier...CVE-2014-30066.8 MediumMay 2, 2014
freebsdThe device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when...CVE-2014-30015.8 MediumMay 2, 2014
freebsdThe TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1...CVE-2014-3000EPSS 12.8%7.8 HighMay 2, 2014
fishshell fishfish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows...CVE-2014-2905Fix available6.9 MediumMay 2, 2014
dynamixsolutions arabic prawnArabic Prawn allows remote attackers to execute arbitrary commands via shell metacharactersCVE-2014-23227.5 HighMay 2, 2014
citrix netscaler access gateway, netscaler access gateway firmware +1 moreCross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access...CVE-2014-18994.3 MediumMay 2, 2014
virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...CVE-2014-0189Fix available2.1 LowMay 2, 2014
plonePlone Privilege escalation through exposed underlying APICVE-2013-7061Fix available5.5 MediumMay 2, 2014
plonePlone Filesystem path information leakCVE-2013-7060Fix available5.0 MediumMay 2, 2014
unitrends enterprise backuprecoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to...CVE-2014-3139Public exploit7.5 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to...CVE-2014-21757.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict...CVE-2014-21737.2 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreBuffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows...CVE-2014-21726.6 MediumMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreHeap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE...CVE-2014-217110.0 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x...CVE-2014-21709.0 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow...CVE-2014-21699.0 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreBuffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows...CVE-2014-21687.6 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0...CVE-2014-21677.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote...CVE-2014-21667.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0...CVE-2014-21657.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0...CVE-2014-21647.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows...CVE-2014-21637.8 HighMay 2, 2014
cisco telepresence tc software, telepresence te software +1 moreThe SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0...CVE-2014-21627.8 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreThe H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote...CVE-2014-21617.8 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreThe H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote...CVE-2014-21607.8 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreThe H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote...CVE-2014-21597.8 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreCisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a...CVE-2014-21587.8 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreCisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a...CVE-2014-21577.1 HighMay 2, 2014
cisco tandberg 2000 mxp, tandberg 550 mxp, tandberg 770 mxp +10 more +12 moreCisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a...CVE-2014-21567.1 HighMay 2, 2014
cybozu garoonCybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access...CVE-2014-19896.0 MediumMay 2, 2014
cybozu garoonThe Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated...CVE-2014-19883.5 LowMay 2, 2014
coreftp core ftpCore FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive...CVE-2014-14434.0 MediumMay 2, 2014
coreftp core ftpDirectory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote...CVE-2014-14424.0 MediumMay 2, 2014
coreftp core ftpCore FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service ...CVE-2014-14414.3 MediumMay 2, 2014
transifexTransifex command-line client has improper certificate validationCVE-2013-7110Fix available4.3 MediumMay 2, 2014
transifexTransifex command-line client before 0.9 does not validate X.509 certificates, which allows man...CVE-2013-2073Fix available4.3 MediumMay 2, 2014
xerox docushareSQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1...CVE-2014-3138Public exploit6.5 MediumMay 2, 2014
openssl, debian linux, fedoraproject fedora +6 more +8 moreThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...CVE-2014-0198Fix availableEPSS 40.3%4.3 MediumMay 2, 2014
ibm tivoli netcool\/omnibusCross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in...CVE-2014-09423.5 LowMay 1, 2014
ibm tivoli netcool\/omnibusCross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in...CVE-2014-09413.5 LowMay 1, 2014
ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote...CVE-2014-08964.3 MediumMay 1, 2014
ibm websphere application serverThe web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8...CVE-2014-08595.0 MediumMay 1, 2014
ibm websphere application serverThe Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x...CVE-2014-08574.0 MediumMay 1, 2014
ibm websphere application serverIBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote...CVE-2014-08234.3 MediumMay 1, 2014
emc rsa access managerThe runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4...CVE-2014-06466.9 MediumMay 1, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open