CVEs published in June 2014
477 vulnerabilities, 102 critical, 0 exploited.
- cisco wireless lan controllerCisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service ...5.7 Medium
- cisco webex meetings serverThe web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply...5.0 Medium
- cisco unified communications domain managerThe web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly...5.0 Medium
- cisco unified communications domain managerThe web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly...5.0 Medium
- emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1...7.5 High
- emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1...8.5 High
- emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1...8.5 High
- libavMultiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have...10.0 High
- devexpress aspxfilemanager control for webforms and mvcDirectory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager...6.5 Medium
- ddsn cm3 acora content management systemDDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other...5.0 Medium
- ddsn cm3 acora content management systemDDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other...5.0 Medium
- ddsn cm3 acora content management systemDDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other...5.0 Medium
- ddsn cm3 acora content management systemDDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other...5.0 Medium
- myheritage sequeryobject activex controlMultiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery...9.3 High
- corosyncThe init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly...5.0 Medium
- apereo phpcasphpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject...5.8 Medium
- condor project condorThe standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0...10.0 High
- mediawikiCross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1...2.6 Low
- emc documentum digital asset managerThe thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5...7.5 High
- xenXen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual...7.4 High
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM...5.5 Medium
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return...5.5 Medium
- radiothermostat ct50, ct80, ct50 firmware +1 more +3 moreRadio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the...8.3 High
- network-weathermap .network weathermapDirectory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows...5.0 Medium
- network-weathermap .network weathermapCross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows...4.3 Medium
- corel paintshop pro x5, paintshop pro x6 +1 moreUntrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and...9.3 High
- corel quattro pro x6The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro...4.3 Medium
- a10networks advanced core operating systemBuffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1...5.0 Medium
- auracmsAbsolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers...5.0 Medium
- auracmsCross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows...4.3 Medium
- frontaccountingMultiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote...7.5 High
- samsung ipolis device managerStack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE...9.3 High
- ipswitch imail serverMultiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail...4.3 Medium
- bottomline transform foundation serverMultiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline...4.3 Medium
- copa-data zenon dnp3 ng driver (dnp3 master), zenon dnp3 process gateway (dnp3 outstation), copadata zenon dnp3 ng driver +1 more +3 moreCOPA-DATA zenon DNP3 Improper Input Validation4.0
- copa-data zenon dnp3 ng driver (dnp3 master), zenon dnp3 process gateway (dnp3 outstation), copadata zenon dnp3 ng driver +1 more +3 moreCOPA-DATA zenon DNP3 Improper Input Validation7.1
- n-i-agroinformatics soy cmsCross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c...4.3 Medium
- aten cn8000, cn8000 firmware +1 moreThe ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to...7.8 High
- owncloud serverownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP...7.5 High
- owncloud, owncloud server +1 moreownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote...4.0 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain...5.0 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which...4.0 Medium
- freebsdThe (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14,...4.9 Medium
- openssl, fedoraproject fedora, mariadb +2 more +4 moreThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...6.8 Medium
- ingy spoonSpoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function...7.5 High
- jochen wiedmann html\Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw...7.5 High
- stephen adkins app\The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw...7.5 High
- owncloudownCloud Server before 6.0.1 does not properly check permissions, which allows remote...4.0 Medium
- videos tube project tubeMultiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute...7.5 High
- xnau participants databaseSQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5...7.5 High
- Show moreLoading…