CVEs published in July 2014
666 vulnerabilities, 80 critical, 2 exploited.
- wp appointments schedules project appointments schedulesCross-site scripting (XSS) vulnerability in js/test.php in the Appointments Scheduler plugin 1.5...4.3 Medium
- wp app maker project app makerCross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker...4.3 Medium
- wordpress social login project social loginCross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social...4.3 Medium
- webengage project webengageCross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for...4.3 Medium
- walk score project scoreMultiple cross-site scripting (XSS) vulnerabilities in frame-maker.php in the Walk Score plugin 0...4.3 Medium
- votecount for balatarin project for balatarinCross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1...4.3 Medium
- videowhisper video presentationMultiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin...4.3 Medium
- videowhisper video posts webcam recorderCross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts...4.3 Medium
- verweise-wordpress-twitter project verweise-wordpress-twitterCross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se -...4.3 Medium
- toolpage project toolpageCross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and...4.3 Medium
- jigoshop swipe hq checkout for jigoshopCross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop ...4.3 Medium
- spotlightyourCross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress...4.3 Medium
- social connect project connectCross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0...4.3 Medium
- rezgo online bookingMultiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the...4.3 Medium
- pay per media player project per media playerMultiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media...4.3 Medium
- ooorl project ooorlCross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows...4.3 Medium
- omfg mobile project mobileCross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in...4.3 Medium
- oleggo livestream project livestreamCross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo...4.3 Medium
- keyword strategy internal links project strategy internal linksCross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links...4.3 Medium
- garagesale project garagesaleCross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the...4.3 Medium
- game tabs project tabsCross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and...4.3 Medium
- flash photo gallery project photo galleryCross-site scripting (XSS) vulnerability in fpg_preview.php in the Flash Photo Gallery plugin 0.7...4.3 Medium
- envialosimple email marketing y newslettersMultiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the...4.3 Medium
- efence project efenceMultiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2...4.3 Medium
- wp easy post types project easy post typesCross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post...4.3 Medium
- dssearchagent project dssearchagentCross-site scripting (XSS) vulnerability in client-assist.php in the dsSearchAgent: WordPress...4.3 Medium
- silex sx-2000wg firmwaresilex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of...5.0 Medium
- silex sx-2000wg firmwaresilex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of...5.0 Medium
- netgate pfsense, pfsense suricata package +1 moreMultiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2...5.8 Medium
- netgate pfsense, pfsense snort package +1 moreMultiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1...5.8 Medium
- netgate pfsense, pfsense suricata package +1 moreMultiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata...4.3 Medium
- netgate pfsense, pfsense snort package +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for...4.3 Medium
- netgate pfsensepfSense before 2.1.4, when HTTP is used, does not include the HTTPOnly flag in a Set-Cookie...4.3 Medium
- netgate pfsenseSession fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web...6.8 Medium
- netgate pfsenseMultiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers...5.0 Medium
- netgate pfsenseAbsolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote...5.0 Medium
- netgate pfsensepfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the...6.5 Medium
- netgate pfsenseMultiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote...4.3 Medium
- cisco universal small cell series firmwareThe DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products...6.8 Medium
- cisco cloud portalForm Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords...4.0 Medium
- cisco cloud portalCisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the...4.0 Medium
- ibm aix, vios +1 moreThe runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666...7.2 High
- ibm tivoli endpoint managerIBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files...5.0 Medium
- cherokee-project cherokee, fedoraproject fedora, mageia project mageia +2 moreThe cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier,...6.8 Medium
- google androidStack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore...5.1 Medium
- freedesktop dbus, debian linux, mageia project mageia +1 more +3 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...2.1 Low
- debian linux, freedesktop dbus, mageia +2 more +4 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,...2.1 Low
- openstack keystoneOpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...6.5 Medium
- thekelleys dnsmasq, oracle solaris +1 moreThe tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of...6.4 Medium
- ibm sametime meeting serverstconf.nsf in IBM Sametime Meeting Server 8.5.1 relies on the client to validate the file format...5.5 Medium
- Show moreLoading…