CVEs published in June 2014
477 vulnerabilities, 102 critical, 0 exploited.
- puppet, redhat linux +1 more The default vhost configuration file in Puppet before 3.6.2 does not include the... 6.5 Medium
- puppet facter, hiera, puppet +2 more +4 more facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability 6.2 Medium
- cacti, opensuse +1 more Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to... 4.3 Medium
- hp enterprise maps HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL... 3.5 Low
- piwigo SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7... 6.5 Medium
- piwigo Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related... 10.0 High
- hp release control Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003... 9.0 High
- hp release control Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003... 4.0 Medium
- intercom web kyukincho Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030... 6.8 Medium
- intercom web kyukincho Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows... 4.3 Medium
- ibm websphere application server IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x... 5.0 Medium
- ibm marketing platform SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated... 6.5 Medium
- ibm marketing platform Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote... 3.5 Low
- ibm marketing platform IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and... 6.0 Medium
- ibm marketing platform IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing... 4.9 Medium
- ibm openpages grc platform IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection... 5.0 Medium
- ibm openpages grc platform Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote... 6.4 Medium
- ctdb project ctdb, opensuse, mageia +2 more ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has... 7.5 High
- symantec data insight Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x... 4.3 Medium
- symantec data insight Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x... 4.3 Medium
- x.org x server The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before... 7.5 High
- opensuse, x.org x server +1 more X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote... 6.4 Medium
- x.org x11, debian linux, x.org x server +2 more The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System ... 6.5 Medium
- x.org x11, xfree86, x server +2 more The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... 6.5 Medium
- x.org x11, xfree86, x server +2 more The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... 6.5 Medium
- x.org x11, xfree86, x server +2 more The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... 6.5 Medium
- x.org x11, xfree86, debian linux +1 more +3 more The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server ... 6.5 Medium
- x.org x11, x server +1 more The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver... 6.5 Medium
- x.org x11, debian linux, x.org x server +2 more The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or... 6.5 Medium
- x.org x11, debian linux, x.org x server +2 more The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver... 6.5 Medium
- debian linux, oracle solaris, x.org x server +2 more Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka... 6.5 Medium
- x.org x11, xfree86, x server +2 more Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or... 6.5 Medium
- x.org x11, x server +1 more Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka... 6.5 Medium
- x.org x11, x server +1 more X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before... 4.3 Medium
- email\ \ Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows... 5.0 Medium
- email\ \, fedoraproject fedora +1 more The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular... 5.0 Medium
- python, simplejson project simplejson, opensuse +2 more simplejson before 2.6.1 vulnerable to array index error 5.9 Medium
- qemu Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS... 5.5 Medium
- dlink dsl-2760u-e1 Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote... 4.3 Medium
- cacti superlinks SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows... 7.5 High
- coreftp core ftp Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP... 5.0 Medium
- longtailvideo jw player for flash \& html5 video plugin Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for... 6.8 Medium
-
php5Ubuntu php5 updates No score - phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x... 3.5 Low
- phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote... 3.5 Low
- 12net login rebuilder Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for... 6.8 Medium
- cisco ios Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via... 6.8 Medium
- sophos enterprise console Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not... 6.8 Medium
- python, redhat enterprise linux, software collections +2 more The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL... 9.8 Critical
- gnupg, debian linux, opensuse +2 more The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24... 5.0 Medium
- Show olderLoading…