CVEs published in July 2014
666 vulnerabilities, 80 critical, 2 exploited.
- sap fi manager self-service SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote... 6.0 Medium
- sap solution manager The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass... 7.5 High
- sap netweaver business warehouse The SAP Netweaver Business Warehouse component does not properly restrict access to the functions... 3.5 Low
- sap hana extended application services SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions... 5.0 Medium
- sap hana Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA... 4.3 Medium
- sap hana extended application services SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that... 2.9 Low
- libndp Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause... 6.8 Medium
- netty Denial of service in Netty 5.0 Medium
- vitamin plugin project vitamin Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress... 5.0 Medium
-
unityUbuntu unity vulnerability No score - freedesktop poppler DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash... 4.3 Medium
- torproject tor Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound... 5.8 Medium
- innominate mguard, mguard firmware +1 more Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor 4.3
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +8 more +10 more Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6... 3.5 Low
- ibm rational software architect design manager, rhapsody design manager +1 more Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody... 6.0 Medium
- ibm rational software architect design manager Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6... 6.0 Medium
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +8 more +10 more Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6... 3.5 Low
- ibm maximo asset management, maximo service desk, smartcloud control desk +8 more +10 more Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x... 3.5 Low
- homepage decorator perlmailer project decorator perlmailer Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows... 4.3 Medium
- seeds acmailer Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer... 6.8 Medium
- iodata ts-ptcam camera, ts-wlc2 camera, ts-wlcam camera +9 more +11 more The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06... 6.4 Medium
- cisco prime data center network manager Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center... 4.3 Medium
- ibm websphere portal, websphere portal unified task list portlet +1 more Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere... 4.3 Medium
- ibm websphere portal, websphere portal unified task list portlet +1 more The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12... 5.0 Medium
- ibm websphere portal, websphere portal unified task list portlet +1 more SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x... 7.5 High
- ibm websphere portal, websphere portal unified task list portlet +1 more Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere... 5.8 Medium
- ibm rational team concert IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly... 3.5 Low
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +1 more +3 more CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through... 3.5 Low
- ibm embedded websphere application server, tivoli integrated portal +1 more install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli... 6.9 Medium
- ibm atlas ediscovery process management, atlas suite, disposal and governance management for it +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite),... 4.3 Medium
- apple cups Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2... 6.8 Medium
- cairographics cairo The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows... 5.0 Medium
- dirphp project dirphp Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary... 5.0 Medium
- webidsupport webid WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat... 7.5 High
- aas9 zerocms Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote... 4.3 Medium
- ui unifi controller Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages,... 2.6 Low
- zarafa webapp, zarafa, fedoraproject fedora +2 more WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which... 2.1 Low
- moodle Moodle does not enforce the moodle/site:accessallgroups capability requirement 4.9 Medium
- moodle The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x... 6.0 Medium
- moodle Moodle multiple cross-site scripting (XSS) vulnerabilities 3.5 Low
- moodle Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in... 4.3 Medium
- moodle Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event... 4.3 Medium
- moodle Moodle multiple cross-site scripting (XSS) vulnerabilities 4.3 Medium
- moodle Moodle multiple cross-site scripting (XSS) vulnerabilities 4.3 Medium
- moodle Moodle allows attackers to obtain username and course information 5.0 Medium
- moodle Moodle remote code execution via quiz questions 6.0 Medium
- moodle Moodle cross-site scripting (XSS) vulnerability 3.5 Low
- moodle Moodle Arbitrary File Read via XML External Entity vulnerability 4.3 Medium
- moodle Moodle allows remote attackers to read arbitrary files 4.3 Medium
- moodle Moodle vulnerable to PHP object injection attacks 7.5 High
- Show olderLoading…