Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
June

CVEs published in June 2014

477 vulnerabilities, 102 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

gnu glibc, opensuse +1 moreThe posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path...CVE-2014-4043Fix available7.5 HighJune 13, 2014
openssl Ubuntuopenssl regressionUSN-2232-2Fix availableNo scoreJune 12, 2014
debian advanced package toolAPT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle...CVE-2014-0478Fix available4.0 MediumJune 12, 2014
ckeditor fckeditorCross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server...CVE-2014-40374.3 MediumJune 11, 2014
impresscmsImpressCMS Cross-site scripting VulnerabilityCVE-2014-40364.3 MediumJune 11, 2014
bestsoftinc advance hotel booking systemCross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance...CVE-2014-4035Public exploit4.3 MediumJune 11, 2014
aas9 zerocmsSQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to...CVE-2014-4034Public exploit7.5 HighJune 11, 2014
efrontlearning efrontCross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis...CVE-2014-4033Public exploit4.3 MediumJune 11, 2014
fiyo cmsCross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7...CVE-2014-40324.3 MediumJune 11, 2014
daiki ueno libfeplibfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace,...CVE-2014-39804.6 MediumJune 11, 2014
pulseaudioThe pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and...CVE-2014-3970Fix available2.9 LowJune 11, 2014
rocketsoftware rocket servergraphThe userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph...CVE-2014-391510.0 HighJune 11, 2014
samsung ipolis device managerSamsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via...CVE-2014-39119.3 HighJune 11, 2014
member approval plugin project approvalCross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for...CVE-2014-38506.8 MediumJune 11, 2014
dotclearMultiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the...CVE-2014-37826.0 MediumJune 11, 2014
dotclearThe dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows...CVE-2014-37815.8 MediumJune 11, 2014
castor project castor, opensuse +1 moreImproper Restriction of XML External Entity Reference in CastorCVE-2014-3004Public exploitFix available4.3 MediumJune 11, 2014
directfb, opensuse, suse linux enterprise desktop +3 more +5 moreThe Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4...CVE-2014-297810.0 HighJune 11, 2014
directfb, opensuse, suse linux enterprise desktop +3 more +5 moreMultiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher...CVE-2014-297710.0 HighJune 11, 2014
fedoraproject sssd, redhat enterprise linux +1 moreThe System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership...CVE-2014-0249Fix available3.3 LowJune 11, 2014
ricardo villalba smplayer, mplayer2 +1 moreStack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used...CVE-2011-3625Public exploitFix availableEPSS 24.1%9.3 HighJune 11, 2014
jzipStack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a...CVE-2010-5300Public exploitEPSS 14.6%6.8 MediumJune 11, 2014
google chromeBuffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows...CVE-2014-3156Fix available7.5 HighJune 11, 2014
mozilla firefoxMultiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in...CVE-2014-15437.5 HighJune 11, 2014
mozilla firefox, opensuse, oracle solaris +2 moreBuffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0...CVE-2014-1542Fix available6.8 MediumJune 11, 2014
mozilla firefoxUse-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function...CVE-2014-1540Fix available9.3 HighJune 11, 2014
mozilla firefox, thunderbird +1 moreMozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the...CVE-2014-15395.0 MediumJune 11, 2014
mozilla firefoxUse-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in...CVE-2014-1537Fix available10.0 HighJune 11, 2014
mozilla firefoxThe PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows...CVE-2014-1536Fix available10.0 HighJune 11, 2014
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow...CVE-2014-1534Fix available10.0 HighJune 11, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11...CVE-2014-0536Fix availableEPSS 10.9%10.0 HighJune 11, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11...CVE-2014-0535Fix availableEPSS 10.1%7.5 HighJune 11, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11...CVE-2014-0534Fix available7.5 HighJune 11, 2014
adobe air, air sdk, flash player +2 moreCross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before...CVE-2014-0533Fix available4.3 MediumJune 11, 2014
adobe air, air sdk, flash player +2 moreCross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before...CVE-2014-0532Fix available4.3 MediumJune 11, 2014
adobe air, air sdk, flash player +2 moreCross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before...CVE-2014-0531Fix available4.3 MediumJune 11, 2014
microsoft office compatibility pack, word +1 moreMicrosoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute...CVE-2014-2778EPSS 19.9%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script...CVE-2014-2777Public exploitEPSS 23.0%7.5 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-2776Public exploitEPSS 21.6%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-2775Public exploitEPSS 20.0%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or...CVE-2014-2773Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-2772Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-2771Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-2770Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-2769Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or...CVE-2014-2768Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a...CVE-2014-2767Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-2766Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-2765Public exploitEPSS 20.5%9.3 HighJune 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-2764Public exploitEPSS 20.5%9.3 HighJune 11, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open