Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
June

CVEs published in June 2014

477 vulnerabilities, 102 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelArray index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3...CVE-2014-0206Fix available2.1 LowJune 25, 2014
openstack neutron, oslo, pycadf +3 more +5 moreThe notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2...CVE-2014-4615Fix available5.0 MediumJune 24, 2014
openssl Ubuntuopenssl regressionUSN-2232-3Fix availableNo scoreJune 23, 2014
linux kernelarch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does...CVE-2014-4157Fix available4.6 MediumJune 23, 2014
linux kernel, canonical ubuntu linux +1 moremm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between...CVE-2014-4171Fix available4.7 MediumJune 23, 2014
linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 LowJune 23, 2014
libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 HighJune 23, 2014
linux kernelThe capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that...CVE-2014-4014Public exploitFix available6.2 MediumJune 22, 2014
netiq identity managerThe MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell...CVE-2014-45094.6 MediumJune 21, 2014
webmin userminUsermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via...CVE-2014-38836.8 MediumJune 21, 2014
symantec encryption desktop, pgp desktop +1 moreSymantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X...CVE-2014-34314.3 MediumJune 21, 2014
cisco webex meetings serverThe XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier...CVE-2014-32964.0 MediumJune 21, 2014
ibm security access manager for mobile appliance, security access manager for mobile software, security access manager for web appliance +1 more +3 moreUnspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security...CVE-2014-307310.0 HighJune 21, 2014
ibm security access manager for mobile appliance, security access manager for mobile software, security access manager for web 8.0 firmware +2 more +4 moreThe Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with...CVE-2014-30538.0 HighJune 21, 2014
ibm security access manager for web 8.0 firmware, security access manager for web appliance +1 moreThe reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2...CVE-2014-30523.3 LowJune 21, 2014
ibm storwize unified v7000, storwize unified v7000 software +1 moreIBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly...CVE-2013-67374.0 MediumJune 21, 2014
kryo iodine(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass...CVE-2014-4168Fix available5.0 MediumJune 21, 2014
apache strutsImproper Input Validation in Apache StrutsCVE-2015-0899Fix availableEPSS 21.3%7.5 HighJune 20, 2014
pdns Mageia, pdns-recursor Mageia +1 moreUpdated pdns & pdns-recursor packages fix a denial of service vulnerabilityMGASA-2014-0272Fix availableNo scoreJune 20, 2014
smb4k project smb4k, fedoraproject fedora +1 moreSmb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid...CVE-2014-2581Fix available7.5 HighJune 20, 2014
ansible MageiaUpdated ansible package provides minor security fixesMGASA-2014-0269Fix availableNo scoreJune 20, 2014
freefloat ftp serverStack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to...CVE-2012-5106Public exploitEPSS 14.1%10.0 HighJune 20, 2014
theforeman foremanDirectory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1...CVE-2014-45076.4 MediumJune 20, 2014
louis jimenez custom metaCross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x...CVE-2014-45062.1 LowJune 20, 2014
roger padilla camacho easy breadcrumbCross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10...CVE-2014-45054.3 MediumJune 20, 2014
redhat openshift, openshift origin +1 morecartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote...CVE-2014-3496Fix available10.0 HighJune 20, 2014
theforeman foremanThe Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute...CVE-2014-0007Public exploitFix available7.5 HighJune 20, 2014
emailarchitect email serverMultiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0...CVE-2012-2591Public exploit4.3 MediumJune 20, 2014
postieplugin postieCross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15,...CVE-2012-2580Public exploit4.3 MediumJune 20, 2014
wp simplemail project simplemailMultiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for...CVE-2012-2579Public exploit4.3 MediumJune 20, 2014
hans alshoff minalicMultiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute...CVE-2012-02737.5 HighJune 20, 2014
dlink dir-601, dir-601 firmware +1 moreDirectory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router...CVE-2011-48215.0 MediumJune 20, 2014
openstack swiftOpenStack Swift Cross-site Scriping vulnerabilityCVE-2014-3497Fix available4.3 MediumJune 20, 2014
linuxfoundation cups-filterscups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access...CVE-2014-4338Fix available4.0 MediumJune 19, 2014
linuxfoundation cups-filtersThe process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1...CVE-2014-4337Fix available4.3 MediumJune 19, 2014
linuxfoundation cups-filtersThe generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before...CVE-2014-4336Fix available5.8 MediumJune 19, 2014
adobe photoshop cs5, photoshop cs5.1 +1 moreStack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0...CVE-2012-2052Public exploitEPSS 23.3%9.3 HighJune 19, 2014
barracudadriveMultiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote...CVE-2014-43354.3 MediumJune 19, 2014
ubi rayman legendsStack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers...CVE-2014-4334Public exploitEPSS 15.2%7.5 HighJune 19, 2014
boonex dolphinCross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4...CVE-2014-43336.8 MediumJune 19, 2014
zte zxv10 w300, zxv10 w300 firmware +1 moreCross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1...CVE-2014-4155Public exploit6.8 MediumJune 19, 2014
boonex dolphinSQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier...CVE-2014-38106.5 MediumJune 19, 2014
commscope arris sbg901Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly...CVE-2014-3778Public exploit6.8 MediumJune 19, 2014
mindreantre threewp email reflectorCross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for...CVE-2012-2572Public exploit4.3 MediumJune 19, 2014
synametrics xeamsCross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows...CVE-2012-2569Public exploit4.3 MediumJune 19, 2014
apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka...CVE-2012-16214.3 MediumJune 19, 2014
apache myfacesApache MyFaces Vulnerable to Path TraversalCVE-2011-4367Public exploitFix availableEPSS 33.7%5.0 MediumJune 19, 2014
ntop ntopngCross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote...CVE-2014-43294.3 MediumJune 19, 2014
belkin n150 f9k1009, n150 f9k1009 firmware +1 moreAbsolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1...CVE-2014-2962Public exploitEPSS 47.1%7.8 HighJune 19, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-2782Public exploitEPSS 22.3%9.3 HighJune 19, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open