Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
May

CVEs published in May 2014

554 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

canonical ubuntu linux, robert ancell lightdm +1 moredebian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7...CVE-2012-0943Public exploit2.1 LowMay 22, 2014
bizagi business process management suiteSQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows...CVE-2014-29486.5 MediumMay 22, 2014
bizagi business process management suiteCross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows...CVE-2014-29474.3 MediumMay 22, 2014
hanon faceid, faceid f710 firmware, faceid f810 firmware +2 more +4 moreHanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to...CVE-2014-29388.3 HighMay 22, 2014
emerson deltavEmerson DeltaV Use of Hard-coded CredentialsCVE-2014-23502.4 May 22, 2014
emerson deltavEmerson DeltaV Use of Improper AuthorizationCVE-2014-23496.2 May 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret...CVE-2014-13465.0 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13446.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13436.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13426.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13416.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13396.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13386.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13376.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13366.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13356.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13346.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13336.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13316.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13306.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13296.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13276.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13266.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13246.8 MediumMay 22, 2014
apple safariWebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to...CVE-2014-13236.8 MediumMay 22, 2014
webmin MageiaUpdated webmin package fixes security vulnerabilitiesMGASA-2014-0233Fix availableNo scoreMay 22, 2014
flyingcart flying cartCross-site scripting (XSS) vulnerability in Flying Cart allows remote attackers to inject...CVE-2014-38464.3 MediumMay 22, 2014
tinymce color pickerCross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for...CVE-2014-38456.8 MediumMay 22, 2014
tinymce color pickerThe TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions,...CVE-2014-38445.0 MediumMay 22, 2014
zemanta search everythingCross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for...CVE-2014-38436.8 MediumMay 22, 2014
imember360Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9...CVE-2014-3842Public exploit4.3 MediumMay 22, 2014
tech-banker contact bankCross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress...CVE-2014-38414.3 MediumMay 22, 2014
dotclearSQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote...CVE-2014-37836.0 MediumMay 22, 2014
dotonpaper booking systemSQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar)...CVE-2014-3210Public exploit6.5 MediumMay 22, 2014
hp icewall mcrp, icewall sso +1 moreUnspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote...CVE-2014-26045.0 MediumMay 22, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers...CVE-2014-1770Public exploitEPSS 34.7%9.3 HighMay 22, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-09594.0 MediumMay 22, 2014
ibm websphere portalOpen redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1...CVE-2014-09585.8 MediumMay 22, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6...CVE-2014-09564.3 MediumMay 22, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when...CVE-2014-09554.3 MediumMay 22, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-09546.8 MediumMay 22, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in boot_config.jsp in IBM WebSphere Portal 6.1.0 through...CVE-2014-09524.3 MediumMay 22, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0...CVE-2014-09514.3 MediumMay 22, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-09495.0 MediumMay 22, 2014
barracudadriveMultiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7.2 allow remote...CVE-2014-38084.3 MediumMay 21, 2014
barracudadriveMultiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote...CVE-2014-38074.3 MediumMay 21, 2014
vmturbo operations managerDirectory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4...CVE-2014-3806Public exploit5.0 MediumMay 21, 2014
canonical ltsp display manager, ubuntu linux +1 moreThe default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote...CVE-2012-116610.0 HighMay 21, 2014
gnome gnome-terminal, opensuse, oracle solaris +2 moreThe "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows...CVE-2011-2198Fix available3.5 LowMay 21, 2014
google chromeMultiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to...CVE-2014-1749Fix available7.5 HighMay 21, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open