Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
May

CVEs published in May 2014

554 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-0310EPSS 20.1%9.3 HighMay 14, 2014
microsoft windows server 2008, windows server 2012 +1 moreMicrosoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause...CVE-2014-0256EPSS 41.8%5.0 MediumMay 14, 2014
microsoft windows server 2008, windows server 2012 +1 moreMicrosoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers...CVE-2014-0255EPSS 41.8%5.0 MediumMay 14, 2014
microsoft office web apps server, project server, sharepoint designer +5 more +7 moreMicrosoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and...CVE-2014-0251EPSS 14.2%9.0 HighMay 14, 2014
strongswan, strongswan vpn client, canonical ubuntu linux +1 more +3 morestrongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP...CVE-2015-4171Fix available2.6 LowMay 14, 2014
cobblerd cobblerCobbler Path Traversal vulnerabilityCVE-2014-3225Public exploitFix available4.0 MediumMay 14, 2014
lxmllxml Cross-site Scripting Via Control CharactersCVE-2014-3146Public exploitFix available4.3 MediumMay 14, 2014
bmc patrol agentUntrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain...CVE-2014-25916.9 MediumMay 14, 2014
broadcom pipa c211, pipa c211 web interface +1 morecgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly...CVE-2014-2046Public exploit9.7 HighMay 14, 2014
google android debug bridge, android sdk platform tools, opensuse +2 moreInteger signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...CVE-2014-1909Fix available7.5 HighMay 14, 2014
foscam ip camera firmwareFoscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates...CVE-2014-1849Public exploitEPSS 12.1%10.0 HighMay 14, 2014
google chromeUse-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing...CVE-2014-1742Fix available7.5 HighMay 14, 2014
google chromeMultiple integer overflows in the replace-data functionality in the CharacterData interface...CVE-2014-1741Fix available7.5 HighMay 14, 2014
google chromeMultiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets...CVE-2014-1740Fix available7.5 HighMay 14, 2014
djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to Cache PoisoningCVE-2014-1418Fix available6.4 MediumMay 14, 2014
phppgadmin project phppgadmin, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4...CVE-2012-1600Fix available4.3 MediumMay 14, 2014
canonical software-properties, ubuntu linux +1 moreppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when...CVE-2011-4407Fix available4.3 MediumMay 14, 2014
redhat icedtea-web, icedtea6 +1 moreThe Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and...CVE-2011-2514Fix available6.8 MediumMay 14, 2014
redhat icedtea-web, icedtea6 +1 moreThe Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and...CVE-2011-2513Fix available5.0 MediumMay 14, 2014
google androidAndroid OS before 2.2 does not display the correct SSL certificate in certain cases, which might...CVE-2010-48324.3 MediumMay 14, 2014
gitlabCross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2...CVE-2014-34564.3 MediumMay 13, 2014
madeofcode omniauth-facebookomniauth-facebook Cross-Site Request Forgery vulnerabilityCVE-2013-4562Fix available6.8 MediumMay 13, 2014
drupalauth project drupalauthlib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows...CVE-2013-45527.5 HighMay 13, 2014
gitlab, gitlab gitlab-shell +1 moreThe repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote...CVE-2013-45466.5 MediumMay 13, 2014
monster menus project menusThe Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node...CVE-2013-45042.6 LowMay 13, 2014
feed element mapper project element mapperCross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows...CVE-2013-45032.1 LowMay 13, 2014
nathan haug filefield sourcesThe FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does...CVE-2013-45024.0 MediumMay 13, 2014
quiz module project quizThe default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to...CVE-2013-45015.0 MediumMay 13, 2014
quiz module project quizThe Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the ...CVE-2013-45004.9 MediumMay 13, 2014
gitlab, gitlab gitlab-shell +1 moreThe SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5...CVE-2013-4490Public exploitEPSS 42.1%6.5 MediumMay 13, 2014
o-dyn collabtiveSQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute...CVE-2014-3246Public exploit6.5 MediumMay 13, 2014
open assessment technologies taoCross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows...CVE-2014-2989Public exploit6.8 MediumMay 13, 2014
tipsandtricks-hq wordpress simple paypal shopping cartCross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart...CVE-2013-27056.8 MediumMay 13, 2014
openvpn access serverCross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access...CVE-2013-26926.8 MediumMay 13, 2014
netweblogic events manager, events manager pro +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and...CVE-2013-14074.3 MediumMay 13, 2014
atlassian confluence serverCross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6...CVE-2012-63426.8 MediumMay 13, 2014
disk pool manager project pool managerMultiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in...CVE-2011-49707.5 HighMay 13, 2014
dovecotDovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not...CVE-2014-3430Fix available5.0 MediumMay 13, 2014
x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3)...CVE-2014-0211Fix available7.5 HighMay 13, 2014
x libxfont, canonical ubuntu linux +1 moreMultiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow...CVE-2014-0210Fix available7.5 HighMay 13, 2014
x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org...CVE-2014-0209Fix available4.6 MediumMay 13, 2014
mediawikiMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) CreateProperty, (2)...CVE-2014-34556.8 MediumMay 12, 2014
mediawikiCross-site request forgery (CSRF) vulnerability in Special:CreateCategory in the SemanticForms...CVE-2014-34546.8 MediumMay 12, 2014
makina-corpus soappySOAPpy vulnerable to XXE attacksCVE-2014-3243Fix available5.0 MediumMay 12, 2014
makina-corpus soappySOAPpy vulnerable to XML External Entity attacksCVE-2014-32425.0 MediumMay 12, 2014
f5 big-ip edge gateway, big-ip access policy manager, big-ip application security manager +6 more +8 moreThe iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4...CVE-2014-2928Public exploitEPSS 40.1%7.1 HighMay 12, 2014
bscwOrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf...CVE-2014-23015.0 MediumMay 12, 2014
microweberDirectory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber...CVE-2013-59846.4 MediumMay 12, 2014
simpleriskCross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk...CVE-2013-57494.3 MediumMay 12, 2014
simpleriskCross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in...CVE-2013-5748Public exploit6.8 MediumMay 12, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open