CVEs published in July 2014
666 vulnerabilities, 80 critical, 2 exploited.
- avg safeguard, secure search toolbar +1 moreScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search...9.3 High
- emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1...8.2 High
- emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1...8.2 High
- emc centerstage, documentum foundation services, my documentum for desktop +1 more +3 moreThe JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before...6.8 Medium
- php, debian linux +1 moreThe SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that...7.5 High
- christos zoulas file, php, debian linux +1 more +3 moreThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...4.3 Medium
- custom banners project bannersCross-site scripting (XSS) vulnerability in the Custom Banners plugin 1.2.2.2 for WordPress...4.3 Medium
- easy banners plugin project bannersCross-site scripting (XSS) vulnerability in the Easy Banners plugin 1.4 for WordPress allows...4.3 Medium
- ocsinventory-ng ocsinventory ngMultiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS...4.3 Medium
- foxitsoftware foxit pdf sdk dllBuffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows...6.8 Medium
- redhat cloudforms 3.0 management enginelib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a...4.3 Medium
- redhat cloudforms 3.0 management engineThe (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib...6.9 Medium
- redhat jboss enterprise application platformorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application...5.0 Medium
- redhat jboss enterprise application platform, jboss enterprise web platform, jboss web framework kit +2 moreorg.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss...6.8 Medium
- redhat cloudforms 3.0 management engineRed Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when...4.9 Medium
- redhat cloudforms 3.0 management engineThe wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0...5.0 Medium
- redhat cloudforms 3.0 management engineCross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0...4.3 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreCleartext Transmission of Sensitive Information in Apache CXF4.3 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreImproper Input Validation in Apache CXF4.3 Medium
- dlink dir-645, dir-645 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with...4.3 Medium
- rubyonrails railsActive Record contains SQL Injection via improper range quoting7.5 High
- rubyonrails rails, ruby on rails +1 moreSQL Injection in Active Record7.5 High
- cisco ios xr, asr 9000 rsp440 router, asr 9001 +5 more +7 moreCisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows...6.4 Medium
- cisco unified cdm application software, unified communications domain manager +1 moreThe BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in...7.5 High
- realnetworks realplayerMultiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to...9.3 High
- netgear gs108pe, gs108pe firmware +1 moreNETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of...8.3 High
- autodesk vredAutodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code...10.0 High
- hp universal configuration management databaseUnspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute...10.0 High
- hp universal configuration management databaseUnspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute...7.5 High
- hp universal configuration management databaseUnspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute...7.5 High
- hp sitescopeUnspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows...7.5 High
- cisco unified cdm platform software, unified communications domain manager +1 moreCisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2...10.0 High
- cisco unified cdm application software, unified communications domain manager +1 moreThe Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM)...9.0 High
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...3.5 Low
- ibm storwize unified v7000, storwize unified v7000 software +1 moreActive Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote...3.5 Low
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...4.3 Medium
- ibm algo credit limits, algorithmics +1 moreMultiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM)...4.3 Medium
- ibm algo credit limits, algorithmics +1 moreThe decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7...4.3 Medium
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...4.9 Medium
- ibm algo credit limits, algorithmics +1 morercore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0...5.8 Medium
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...4.3 Medium
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...4.9 Medium
- ibm algo credit limitsMultiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo...6.8 Medium
- ibm advanced management module, integrated management module, integrated management module ii +3 more +5 moreThe firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware...5.0 Medium
- microfocus security managerDirectory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in...7.5 High
- ibm flex system managerIBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate...5.0 Medium
- ibm infosphere biginsightsIBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended...3.5 Low
- php, debian linux +1 moreThe phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14...2.6 Low
- file project file, php, debian linux +1 more +3 moreThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...4.3 Medium
- Show moreLoading…