Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
June

CVEs published in June 2014

477 vulnerabilities, 102 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

digium asteriskThe PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a...CVE-2014-40484.3 MediumJune 17, 2014
digium asterisk, certified asterisk +1 moreAsterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and...CVE-2014-4047Fix available5.0 MediumJune 17, 2014
digium asterisk, certified asterisk +1 moreAsterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6...CVE-2014-4046Fix available6.5 MediumJune 17, 2014
digium asteriskThe Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before...CVE-2014-40454.3 MediumJune 17, 2014
openafsOpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote...CVE-2014-4044Fix available5.0 MediumJune 17, 2014
puppet enterprisePuppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via...CVE-2014-32495.0 MediumJune 17, 2014
libxml2 Ubuntulibxml2 regressionUSN-2214-3Fix availableNo scoreJune 17, 2014
openstack keystone, suse cloud +1 moreOpenStack Identity Keystone is vulnerable to Block delegation escalation of privilegeCVE-2014-3476Fix available6.0 MediumJune 17, 2014
canonical ubuntu linuxThe OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0...CVE-2013-1068Fix available5.0 MediumJune 17, 2014
shoutcast dnasCross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows...CVE-2014-4166Public exploit4.3 MediumJune 16, 2014
ntop, opensuse +1 moreCross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web...CVE-2014-4165Fix available4.3 MediumJune 16, 2014
algosec fireflowCross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to...CVE-2014-41644.3 MediumJune 16, 2014
featured comments plugin project commentsMultiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1...CVE-2014-4163Public exploit6.8 MediumJune 16, 2014
zyxel p-660hwMultiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless...CVE-2014-4162Public exploit6.8 MediumJune 16, 2014
reviewboard djbletsDjblets Cross-site scripting VulnerabilityCVE-2014-3995Fix available4.3 MediumJune 16, 2014
reviewboard djblets, reviewboard +1 moreDjiblets Cross-site scripting Vulnerability via JSON ObjectsCVE-2014-3994Fix available4.3 MediumJune 16, 2014
yealink voip phone, voip phone firmware +1 moreCross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows...CVE-2014-34284.3 MediumJune 16, 2014
echoping project echopingMultiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a...CVE-2010-51116.8 MediumJune 16, 2014
iij seil\%2fb1 firmware, seil\%2fneu 2fe plus firmware, seil\%2fturbo firmware +9 more +11 moreThe PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1...CVE-2014-20045.0 MediumJune 16, 2014
justsystems ichitaro, just online update +1 moreJustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not...CVE-2014-20037.6 HighJune 16, 2014
s48 scheme48The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write...CVE-2014-4150Fix available5.5 MediumJune 16, 2014
php, debian linux, opensuse +2 moreHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...CVE-2014-4049Fix availableEPSS 10.9%5.1 MediumJune 16, 2014
cisco ios xeThe mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic...CVE-2014-32904.8 MediumJune 14, 2014
cisco ios xr, asr 9001, asr 9006 +4 more +6 moreCisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used,...CVE-2014-21767.1 HighJune 14, 2014
c-board moyuku project moyukuCross-site scripting (XSS) vulnerability in C-BOARD Moyuku 1.01b6 and earlier allows remote...CVE-2014-20024.3 MediumJune 14, 2014
ibm pureapplication systemIBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote...CVE-2014-09606.6 MediumJune 14, 2014
redhat enterprise linuxA certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote...CVE-2014-01865.0 MediumJune 14, 2014
cisco nx-osThe HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass...CVE-2014-32954.8 MediumJune 14, 2014
sap supplier relationship managementCross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship...CVE-2014-41614.3 MediumJune 13, 2014
sap netweaver business clientMultiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver...CVE-2014-41604.3 MediumJune 13, 2014
sap supplier relationship managementOpen redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM)...CVE-2014-41595.8 MediumJune 13, 2014
senkas kolibriStack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via...CVE-2014-4158Public exploitEPSS 14.3%7.5 HighJune 13, 2014
juniper screenos, netscreen-5200, netscreen-5400 +2 moreThe Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to...CVE-2014-38147.8 HighJune 13, 2014
juniper screenos, netscreen-5200, netscreen-5400 +2 moreUnspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS...CVE-2014-38137.8 HighJune 13, 2014
juniper ive os, fips infranet controller 6500, fips secure access 4000 +15 more +17 moreThe Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x...CVE-2014-38125.0 MediumJune 13, 2014
alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute...CVE-2014-3805Public exploitEPSS 13.1%10.0 HighJune 13, 2014
alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute...CVE-2014-3804Public exploitEPSS 72.4%10.0 HighJune 13, 2014
webedition cmsMultiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition...CVE-2014-2303Public exploit7.5 HighJune 13, 2014
sharetronixSharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX...CVE-2013-53567.5 HighJune 13, 2014
sharetronixUnrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix...CVE-2013-53536.8 MediumJune 13, 2014
sharetronixSharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via...CVE-2013-53526.8 MediumJune 13, 2014
jogamp joal, jogamp +1 moreMultiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow...CVE-2013-409910.0 HighJune 13, 2014
monkey-project monkeyStack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey...CVE-2013-3843EPSS 20.2%6.8 MediumJune 13, 2014
google sketchupHeap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp)...CVE-2013-3663EPSS 31.9%9.3 HighJune 13, 2014
monkey-project monkeyThe Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers...CVE-2013-2182Public exploit5.8 MediumJune 13, 2014
monkey-project monkeyMonkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service ...CVE-2013-21635.0 MediumJune 13, 2014
seamons net-serverNet-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves...CVE-2013-1841Fix available4.3 MediumJune 13, 2014
qbnz geshiGeSHi vulnerable to Directory TraversalCVE-2012-3521Fix available5.0 MediumJune 13, 2014
senkas kolibriStack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via...CVE-2010-5301Public exploitEPSS 10.7%7.5 HighJune 13, 2014
isc bindlibdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote...CVE-2014-38595.0 MediumJune 13, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open