Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
June

CVEs published in June 2014

477 vulnerabilities, 102 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

hp executive scorecardDirectory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40...CVE-2014-2611EPSS 11.9%9.0 HighJune 19, 2014
hp executive scorecardDirectory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP...CVE-2014-26107.1 HighJune 19, 2014
hp executive scorecardThe Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require...CVE-2014-2609EPSS 12.9%10.0 HighJune 19, 2014
jreast jr east japanThe East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify...CVE-2014-20015.8 MediumJune 19, 2014
d-bus project d-bus, freedesktop dbus +1 moreThe dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends...CVE-2014-3477Fix available2.1 LowJune 18, 2014
alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read...CVE-2014-4153Public exploit7.8 HighJune 18, 2014
alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute...CVE-2014-415210.0 HighJune 18, 2014
alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create...CVE-2014-415110.0 HighJune 18, 2014
symantec web gatewayMultiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web...CVE-2014-16522.3 LowJune 18, 2014
symantec web gatewaySQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway...CVE-2014-16515.8 MediumJune 18, 2014
symantec web gatewaySQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG)...CVE-2014-16505.2 MediumJune 18, 2014
symantec web gatewaySNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote...CVE-2013-50179.8 CriticalJune 18, 2014
axigen mail serverCross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to...CVE-2012-2592Public exploit4.3 MediumJune 18, 2014
musl-libc muslMultiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl...CVE-2014-3484Fix available9.8 CriticalJune 18, 2014
novell open enterprise serverCross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1...CVE-2014-05994.3 MediumJune 18, 2014
novell open enterprise serverDirectory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before...CVE-2014-059810.0 HighJune 18, 2014
wiresharkwiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote...CVE-2014-4174Fix available9.3 HighJune 18, 2014
wiresharkThe dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in...CVE-2014-4020Fix available4.3 MediumJune 18, 2014
ibm curam social program managementMultiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5...CVE-2014-30133.5 LowJune 18, 2014
ibm curam social program managementMultiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6...CVE-2014-30123.5 LowJune 18, 2014
f5 arx data managerSQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows...CVE-2014-29496.5 MediumJune 18, 2014
microsoft malware protection enginempengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to...CVE-2014-2779EPSS 13.4%4.3 MediumJune 18, 2014
cisco adaptive security appliance softwareThe WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier...CVE-2014-21514.0 MediumJune 18, 2014
ntt 050 plusThe NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive...CVE-2014-20002.6 LowJune 18, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6...CVE-2014-0910Public exploit3.5 LowJune 18, 2014
hp service virtualizationDirectory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before...CVE-2013-6221Public exploitEPSS 77.9%10.0 HighJune 18, 2014
openfilerMultiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to...CVE-2014-43094.3 MediumJune 18, 2014
nice recording expressMultiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech...CVE-2014-43084.3 MediumJune 18, 2014
webtitanSQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers...CVE-2014-4307Public exploit7.5 HighJune 18, 2014
webtitanDirectory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers...CVE-2014-4306Public exploit5.0 MediumJune 18, 2014
nice recording expressMultiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7...CVE-2014-43057.5 HighJune 18, 2014
sqlbuddy sql buddyCross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows...CVE-2014-43044.3 MediumJune 18, 2014
drupac touchMultiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for...CVE-2014-43032.1 LowJune 18, 2014
ham3d shop engineCross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote...CVE-2014-43024.3 MediumJune 18, 2014
ajentiEugene Pankov Ajenti Cross-site scripting VulnerabilitiesCVE-2014-4301Fix available4.3 MediumJune 18, 2014
ulli horlacher fexIncomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex...CVE-2014-3877Fix available4.3 MediumJune 18, 2014
ulli horlacher fexMultiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex)...CVE-2014-3876Fix available4.3 MediumJune 18, 2014
citrix access gateway plug-inHeap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in...CVE-2011-2592EPSS 14.9%9.3 HighJune 18, 2014
openstack neutron, canonical ubuntu linux +1 moreThe L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...CVE-2014-4167Fix available3.5 LowJune 18, 2014
dell bsafe shareThe TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended...CVE-2014-41935.0 MediumJune 17, 2014
dell bsafe shareThe Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes...CVE-2014-41925.0 MediumJune 17, 2014
dell bsafe shareThe TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series...CVE-2014-41915.0 MediumJune 17, 2014
powerpc-utils project powerpc-utilssnap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially...CVE-2014-4040Fix available5.0 MediumJune 17, 2014
ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...CVE-2014-4039Fix available2.1 LowJune 17, 2014
ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...CVE-2014-4038Fix available4.4 MediumJune 17, 2014
emc rsa bsafe toolkits, rsa data protection manager +1 moreThe default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM)...CVE-2013-60785.8 MediumJune 17, 2014
huawei campus lsw s9700, campus s2350, campus s2750 +10 more +12 moreMultiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700,...CVE-2014-41907.8 HighJune 17, 2014
hitachi tuning manager, jp1\/performance management-manager web option +1 moreCross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before...CVE-2014-41894.3 MediumJune 17, 2014
hitachi tuning manager, jp1\/performance management-manager web option +1 moreCross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x...CVE-2014-41886.8 MediumJune 17, 2014
clip-bucket clipbucketCross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to...CVE-2014-41874.3 MediumJune 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open