Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
July

CVEs published in July 2014

666 vulnerabilities, 80 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

file project file, php, debian linux +1 more +3 moreThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...CVE-2014-3479Fix availableEPSS 14.9%4.3 MediumJuly 4, 2014
christos zoulas file, php +1 moreBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the...CVE-2014-3478Fix availableEPSS 15.2%5.0 MediumJuly 4, 2014
ffmpegInteger overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x...CVE-2014-4610Fix available8.8 HighJuly 4, 2014
phpUse-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14...CVE-2014-4698Fix available4.6 MediumJuly 4, 2014
phpUse-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14...CVE-2014-4670Fix available4.6 MediumJuly 4, 2014
yiiframeworkYii PHP Framework arbitrary PHP scripts executionCVE-2014-4672Fix available7.5 HighJuly 3, 2014
usvn user-friendly svnCross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN ...CVE-2014-47194.3 MediumJuly 3, 2014
lunarcms lunar cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote...CVE-2014-4718Public exploit6.8 MediumJuly 3, 2014
sharethis simple share buttons adderMultiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder...CVE-2014-4717Public exploit6.8 MediumJuly 3, 2014
thomson twg87ouirCross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to...CVE-2014-4716Public exploit6.8 MediumJuly 3, 2014
aas9 zerocmsCross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote...CVE-2014-41954.3 MediumJuly 3, 2014
kanboardCross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers...CVE-2014-39206.8 MediumJuly 3, 2014
kerio controlMultiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly...CVE-2014-3857Public exploit6.5 MediumJuly 3, 2014
invisionpower ip.nexus, invisioncommunity invision power board +1 moreCross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3...CVE-2014-31494.3 MediumJuly 3, 2014
spamtitanCross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows...CVE-2014-29654.3 MediumJuly 3, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2014-0325EPSS 16.1%9.3 HighJuly 3, 2014
yann collet lz4Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond...CVE-2014-4715Fix available5.0 MediumJuly 3, 2014
linux kernelInteger overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and...CVE-2014-4611Fix available5.0 MediumJuly 3, 2014
christos zoulas file, debian linux, php +2 morefile before 5.19 does not properly restrict the amount of data read during a regex search, which...CVE-2014-3538Fix availableEPSS 11.8%5.0 MediumJuly 3, 2014
piwigoMultiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote...CVE-2014-46146.8 MediumJuly 2, 2014
zeenshare project zeenshareCross-site scripting (XSS) vulnerability in redirect_to_zeenshare.php in the ZeenShare plugin 1.0...CVE-2014-46064.3 MediumJuly 2, 2014
wp social invitations project social invitationsCross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1...CVE-2014-45974.3 MediumJuly 2, 2014
wp picasa image project picasa imageCross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image plugin 1.0...CVE-2014-45914.3 MediumJuly 2, 2014
wpcb project wpcbCross-site scripting (XSS) vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for...CVE-2014-45814.3 MediumJuly 2, 2014
vn-calendar project vn-calendarMultiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0...CVE-2014-45714.3 MediumJuly 2, 2014
verification code for comments project code for commentsMultiple cross-site scripting (XSS) vulnerabilities in vcc.js.php in the Verification Code for...CVE-2014-45654.3 MediumJuly 2, 2014
url cloak \& encrypt project cloak \& encryptCross-site scripting (XSS) vulnerability in go.php in the URL Cloak & Encrypt (url-cloak-encrypt)...CVE-2014-45634.3 MediumJuly 2, 2014
style it project itCross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and...CVE-2014-45554.3 MediumJuly 2, 2014
ss downloads project downloadsCross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin...CVE-2014-45544.3 MediumJuly 2, 2014
woocommerce sagepay direct payment gateway project sagepay direct payment gatewayMultiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce...CVE-2014-45494.3 MediumJuly 2, 2014
rezgo project rezgoCross-site scripting (XSS) vulnerability in book_ajax.php in the Rezgo plugin 1.4.2 and earlier...CVE-2014-45464.3 MediumJuly 2, 2014
html5 video player with playlist plugin project video player with playlist pluginMultiple cross-site scripting (XSS) vulnerabilities in videoplayer/autoplay.php in the HTML5...CVE-2014-45344.3 MediumJuly 2, 2014
storespriteCross-site scripting (XSS) vulnerability in templates/defaultheader.php in Lamp Design...CVE-2014-37372.6 LowJuly 2, 2014
zdstatistics project zdstatisticsCross-site scripting (XSS) vulnerability in cal/test.php in the ZdStatistics (zdstats) plugin 2.0...CVE-2014-46054.3 MediumJuly 2, 2014
your-text-manager project your-text-managerCross-site scripting (XSS) vulnerability in settings/pwsettings.php in the Your Text Manager...CVE-2014-46044.3 MediumJuly 2, 2014
yahoo\! updates for wordpress plugin project updates for wordpress pluginMultiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo!...CVE-2014-46034.3 MediumJuly 2, 2014
wu-rating project wu-ratingCross-site scripting (XSS) vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and...CVE-2014-46014.3 MediumJuly 2, 2014
wp ultimate email marketer project ultimate email marketerMultiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email...CVE-2014-46004.3 MediumJuly 2, 2014
wp-business directory project directoryMultiple cross-site scripting (XSS) vulnerabilities in forms/search.php in the WP-Business...CVE-2014-45994.3 MediumJuly 2, 2014
wp-tmkm-amazon project wp-tmkm-amazonCross-site scripting (XSS) vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon...CVE-2014-45984.3 MediumJuly 2, 2014
snapapp project snapappMultiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp...CVE-2014-45964.3 MediumJuly 2, 2014
wp restful project restfulMultiple cross-site scripting (XSS) vulnerabilities in the WP RESTful plugin 0.1 and earlier for...CVE-2014-45954.3 MediumJuly 2, 2014
wordpress responsive preview project responsive previewCross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin...CVE-2014-45944.3 MediumJuly 2, 2014
wp plugin manager project plugin managerCross-site scripting (XSS) vulnerability in wp-plugins-net/index.php in the WP Plugin Manager ...CVE-2014-45934.3 MediumJuly 2, 2014
wp microblogs project microblogsCross-site scripting (XSS) vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier...CVE-2014-45904.3 MediumJuly 2, 2014
wp silverlight media player project silverlight media playerCross-site scripting (XSS) vulnerability in uploader.php in the WP Silverlight Media Player (wp...CVE-2014-45894.3 MediumJuly 2, 2014
hot files\ file sharing and download manager projectCross-site scripting (XSS) vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and...CVE-2014-45884.3 MediumJuly 2, 2014
wp guestmap project guestmap projectMultiple cross-site scripting (XSS) vulnerabilities in the WP GuestMap plugin 1.8 and earlier for...CVE-2014-45874.3 MediumJuly 2, 2014
wp consultant project consultantCross-site scripting (XSS) vulnerability in admin/admin_show_dialogs.php in the WP Consultant...CVE-2014-45824.3 MediumJuly 2, 2014
wp blipbot project blipbotCross-site scripting (XSS) vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and...CVE-2014-45804.3 MediumJuly 2, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open