CVEs published in June 2014
477 vulnerabilities, 102 critical, 0 exploited.
- google chromeUse-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread...7.5 High
- mozilla netscape portable runtimeMozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute...10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation...10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox...10.0 High
- mozilla firefox, firefox esr +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...10.0 High
- conversionninja conversion ninjaCross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows...4.3 Medium
- freebsdThe ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3...2.1 Low
- gomlab gom media playerGOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service ...4.3 Medium
- cloudera managerCloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain...4.0 Medium
- offis dcmtk(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc...7.2 High
- fail2banThe (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf...4.7 Medium
- cisco webex meetings serverCisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote...4.0 Medium
- cisco unified communications managerThe Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager ...5.5 Medium
- cisco content security management appliance, web security appliance, email security appliance firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the...4.3 Medium
- cisco unified communications managerSQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco...4.0 Medium
- ibm cics transaction serverIBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT...4.0 Medium
- sap open hub serviceSAP Open Hub Service has hardcoded credentials, which makes it easier for remote attackers to...5.0 Medium
- sap capacity levelingSAP Capacity Leveling has hardcoded credentials, which makes it easier for remote attackers to...5.0 Medium
- sap transaction data poolSAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers...5.0 Medium
- sap computing center management system monitoringSAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote...5.0 Medium
- sap web services toolSAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote...5.0 Medium
- sap upgrade toolsThe SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote...5.0 Medium
- sap oil industry solution traders and schedulers workbenchThe SAP Trader's and Scheduler's Workbench (TSW) for SAP Oil & Gas has hardcoded credentials,...5.0 Medium
- sap brazilSAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain...5.0 Medium
- sap project systemThe (1) Structures and (2) Project-Oriented Procurement components in SAP Project System has...5.0 Medium
- sap netweaverThe System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify...7.5 High
- livezillaLiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file,...2.1 Low
- qnap photo station, photo station firmware +1 moreQNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user...5.0 Medium
- misery project miseryThe Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay...4.3 Medium
- rik de boer revisioningThe Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access...4.0 Medium
- gordon heydon secure pagesThe Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which...4.3 Medium
- jojocms jojo-cmsCross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before...4.3 Medium
- jojocms jojo-cmsSQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo...7.5 High
- mambo-foundation mambo cmsMambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth...5.0 Medium
- mambo-foundation mambo cmsMambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to...2.1 Low
- mambo-foundation mambo cmsMambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which...2.1 Low
- autocomplete widgets project widgetsThe autocomplete callback in Autocomplete Widgets for Text and Number Fields ...4.0 Medium
- mark evans dragonfly gemDragonfly Code Injection vulnerability7.5 High
libxml2Ubuntulibxml2 regressionNo score- miniupnp project miniupnp, opensuse +1 moreThe getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a...5.0 Medium
- ibm aix, vios +1 morelibodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files...6.9 Medium
- ibm system storage virtualization engine ts7700, system storage virtualization engine ts7700 firmware +1 moreUnspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local...6.0 Medium
- ibm spss modelerIBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which...3.6 Low
- ibm api managementUnspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for...4.3 Medium
- ibm security appscan sourceIBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not...4.3 Medium
- ibm connectionsCross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections...6.0 Medium
- cisofy lynisinclude/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files...3.3 Low
- cisofy lynisinclude/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary...3.3 Low
- phpacinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to...3.3 Low
- ibm security identity manager, tivoli identity manager +1 moreCross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before...6.0 Medium
- Show moreLoading…