Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
June

CVEs published in June 2014

477 vulnerabilities, 102 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

opennmsMultiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote...CVE-2014-39604.3 MediumJune 4, 2014
jo hasenau gridelementsCross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements)...CVE-2014-39493.5 LowJune 4, 2014
alex kellner powermailCross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the...CVE-2014-39484.3 MediumJune 4, 2014
ericom accessnow serverStack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote...CVE-2014-3913Public exploitEPSS 60.9%10.0 HighJune 4, 2014
owncloud, owncloud server +1 moreownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which...CVE-2014-38384.0 MediumJune 4, 2014
owncloud, owncloud server +1 moreThe document application in ownCloud Server before 6.0.3 uses sequential values for the file_id,...CVE-2014-38374.0 MediumJune 4, 2014
owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow...CVE-2014-38366.8 MediumJune 4, 2014
owncloud, owncloud server +1 moreownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the...CVE-2014-38355.5 MediumJune 4, 2014
owncloud, owncloud server +1 moreownCloud Server before 6.0.3 does not properly check permissions, which allows remote...CVE-2014-38347.5 HighJune 4, 2014
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in...CVE-2014-38334.3 MediumJune 4, 2014
owncloud serverCross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x...CVE-2014-38324.3 MediumJune 4, 2014
lucidcrew pixieMultiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact...CVE-2014-37864.3 MediumJune 4, 2014
owncloud server, phpdocx +1 morePHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers...CVE-2014-20567.5 HighJune 4, 2014
fruux sabredav, owncloud server +1 moreXXE in SabreDAVCVE-2014-2055Fix available7.5 HighJune 4, 2014
owncloud server, phpexcel project phpexcel +1 morePHPExcel vulnerable to XXE attacks through libxmlCVE-2014-2054Fix available7.5 HighJune 4, 2014
getid3, owncloud server +1 moregetID3 is vulnerable to XML External Entity (XXE)CVE-2014-2053Fix available7.5 HighJune 4, 2014
owncloud, owncloud server +1 moreThe installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5...CVE-2013-19415.0 MediumJune 4, 2014
owncloud serversettings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute...CVE-2013-02044.6 MediumJune 4, 2014
owncloud, owncloud server +1 morelib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable,...CVE-2012-53364.0 MediumJune 4, 2014
owncloud, owncloud server +1 moreCRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject...CVE-2012-50574.3 MediumJune 4, 2014
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote...CVE-2012-50564.3 MediumJune 4, 2014
sendmail, fedoraproject fedora, freebsd +1 more +3 moreThe sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong...CVE-2014-3956Fix available1.9 LowJune 4, 2014
ibm smart analytics system 7700, smart analytics system 7710 +1 moreUnspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP...CVE-2014-09354.6 MediumJune 4, 2014
kernel util-linux, fedoraproject fedora, opensuse +2 moreBlkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.CVE-2014-9114Fix available7.8 HighJune 4, 2014
emc rsa adaptive authentication hostedCross-site scripting (XSS) vulnerability in rsa_fso.swf in EMC RSA Adaptive Authentication ...CVE-2014-25024.3 MediumJune 4, 2014
bottlepy bottleBottle does not properly limit content-typesCVE-2014-3137Fix available6.8 MediumJune 4, 2014
python-gnupg project python-gnupgpython-gnupg vulnerable to shell injectionCVE-2014-1929Fix available4.4 MediumJune 4, 2014
python-gnupg project python-gnupgpython-gnupg's shell_quote function does not properly escape charactersCVE-2014-1928Fix available4.6 MediumJune 4, 2014
python-gnupg project python-gnupgpython-gnupg's shell_quote function does not properly quote stringsCVE-2014-1927Fix available7.5 HighJune 4, 2014
vinay sajip python-gnupgpython-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharactersCVE-2013-7323Fix available7.5 HighJune 4, 2014
gnu gnutls, debian linux, redhat enterprise linux +2 moreGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...CVE-2015-0294Fix available7.5 HighJune 3, 2014
gnu gnutlsGnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...CVE-2015-0282Fix available5.0 MediumJune 3, 2014
gnu gnutlsGnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,...CVE-2014-81554.3 MediumJune 3, 2014
f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP...CVE-2014-39594.3 MediumJune 3, 2014
lucas clemente vella libpam-pgsqllibpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password...CVE-2013-01915.0 MediumJune 3, 2014
cisco unified communications domain managerThe web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and...CVE-2014-32804.0 MediumJune 3, 2014
chkrootkit, canonical ubuntu linux +1 moreThe slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows...CVE-2014-0476Public exploitFix available3.7 LowJune 3, 2014
quantum scalar i500, dell powervault ml6000, powervault ml6000 firmware +1 more +3 morelogViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103)...CVE-2014-29599.0 HighJune 2, 2014
huawei e303 modem, e303 modem firmware, webui +2 moreCross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01...CVE-2014-2946Public exploit6.8 MediumJune 2, 2014
alfrescoMultiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow...CVE-2014-29394.3 MediumJune 2, 2014
gnu gnutlsThe gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...CVE-2014-3465Fix available5.0 MediumJune 2, 2014
gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 MediumJune 2, 2014
gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 HighJune 2, 2014
gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 MediumJune 2, 2014
ajaydsouza contextual related postsSQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress...CVE-2014-39377.5 HighJune 2, 2014
redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00424.3 MediumJune 2, 2014
redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00414.3 MediumJune 2, 2014
redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...CVE-2014-00404.3 MediumJune 2, 2014
dleviet datalife engineSession fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers...CVE-2013-7387Public exploit6.8 MediumJune 2, 2014
universityofcalifornia boinc clientFormat string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp...CVE-2013-7386Fix available5.0 MediumJune 2, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open