Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
July

CVEs published in July 2014

666 vulnerabilities, 80 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm tivoli application dependency discovery managerDirectory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency...CVE-2013-30043.5 LowJuly 1, 2014
google sketchupHeap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp)...CVE-2013-7388EPSS 13.2%9.3 HighJuly 1, 2014
google sketchupTrimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to...CVE-2013-3664Public exploitEPSS 29.8%9.3 HighJuly 1, 2014
google sketchupTimbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to...CVE-2013-3662EPSS 31.9%9.3 HighJuly 1, 2014
kde kdelibs, opensuse +1 morekio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not...CVE-2014-3494Fix available4.3 MediumJuly 1, 2014
theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5...CVE-2014-34924.3 MediumJuly 1, 2014
theforeman foremanCross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows...CVE-2014-34914.3 MediumJuly 1, 2014
xen carousel plugin project carouselMultiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN...CVE-2014-46024.3 MediumJuly 1, 2014
mnt-tech wp-facethumbCross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for...CVE-2014-45854.3 MediumJuly 1, 2014
wp-easybooking plugin project wp-easybookingCross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1...CVE-2014-45844.3 MediumJuly 1, 2014
wp-contact plugin project wp-contact-sidebar-widgetMultiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp...CVE-2014-45834.3 MediumJuly 1, 2014
wikipop plugin project wikipopCross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier...CVE-2014-45754.3 MediumJuly 1, 2014
videowhisper live streaming integrationCross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming...CVE-2014-45694.3 MediumJuly 1, 2014
validated plugin project pluginCross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier...CVE-2014-45644.3 MediumJuly 1, 2014
swipe checkout for eshop project checkout for eshopCross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop...CVE-2014-45564.3 MediumJuly 1, 2014
pro quoter plugin project quoterMultiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0...CVE-2014-45454.3 MediumJuly 1, 2014
malware finder plugin project finderCross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and...CVE-2014-45384.3 MediumJuly 1, 2014
geo redirector plugin project redirectorCross-site scripting (XSS) vulnerability in ajax_functions.php in the GEO Redirector plugin 1.0.1...CVE-2014-45334.3 MediumJuly 1, 2014
fbpromotions project fbpromotionsMultiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go...CVE-2014-45284.3 MediumJuly 1, 2014
diversesolutions dsidxpress idx pluginCross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before...CVE-2014-45214.3 MediumJuly 1, 2014
dmca watermarkerCross-site scripting (XSS) vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1...CVE-2014-45204.3 MediumJuly 1, 2014
d-coda contactmeCross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com...CVE-2014-45184.3 MediumJuly 1, 2014
bic media widget plugin media widgetCross-site scripting (XSS) vulnerability in bicm-carousel-preview.php in the BIC Media Widget...CVE-2014-45164.3 MediumJuly 1, 2014
anyfont plugin project anyfontCross-site scripting (XSS) vulnerability in mce_anyfont/dialog.php in the AnyFont plugin 2.2.3...CVE-2014-45154.3 MediumJuly 1, 2014
activehelper livehelp live chatMultiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper...CVE-2014-45134.3 MediumJuly 1, 2014
apple tvosApple TV before 6.1.2 allows remote authenticated users to bypass an intended password...CVE-2014-13835.5 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13826.8 MediumJuly 1, 2014
apple mac os xThunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API...CVE-2014-138110.0 HighJuly 1, 2014
apple mac os xThe Security - Keychain component in Apple OS X before 10.9.4 does not properly implement...CVE-2014-13802.6 LowJuly 1, 2014
apple mac os xGraphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a...CVE-2014-137910.0 HighJuly 1, 2014
apple mac os xIOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection...CVE-2014-13782.1 LowJuly 1, 2014
apple mac os xArray index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute...CVE-2014-137710.0 HighJuly 1, 2014
apple mac os xIntel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API...CVE-2014-137610.0 HighJuly 1, 2014
apple mac os xIntel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR...CVE-2014-13752.1 LowJuly 1, 2014
apple mac os xIntel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified...CVE-2014-137310.0 HighJuly 1, 2014
apple mac os xGraphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during...CVE-2014-13724.9 MediumJuly 1, 2014
apple mac os x, mac os x server +1 moreArray index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code...CVE-2014-13717.5 HighJuly 1, 2014
apple mac os x, mac os x server +1 moreThe byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers...CVE-2014-13706.8 MediumJuly 1, 2014
apple safariWebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to...CVE-2014-13694.3 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13686.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13676.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13666.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13656.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13646.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13636.8 MediumJuly 1, 2014
apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13626.8 MediumJuly 1, 2014
apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2...CVE-2014-13615.0 MediumJuly 1, 2014
apple iphone osLockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which...CVE-2014-13602.1 LowJuly 1, 2014
apple iphone os, mac os x, tvos +2 moreInteger underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135910.0 HighJuly 1, 2014
apple iphone os, mac os x, tvos +2 moreInteger overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135810.0 HighJuly 1, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open