Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
July

CVEs published in July 2014

666 vulnerabilities, 80 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

datumsystems snipDatum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP...CVE-2014-29507.8 HighJuly 14, 2014
kaseya virtual system administratorkapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0...CVE-2014-29261.7 LowJuly 14, 2014
cisco adaptive security appliance softwareThe WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and...CVE-2013-66916.8 MediumJuly 14, 2014
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported...CVE-2013-55675.4 MediumJuly 14, 2014
horde groupware, internet mail program +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6...CVE-2014-4946Fix available4.3 MediumJuly 14, 2014
horde groupware, internet mail program +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6...CVE-2014-4945Fix available4.3 MediumJuly 14, 2014
bannersky bsk pdf managerMultiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin...CVE-2014-4944Public exploit6.5 MediumJuly 14, 2014
arubanetworks clearpassSQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x...CVE-2014-40134.9 MediumJuly 14, 2014
levelfourdevelopment wp-easycartThe EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain...CVE-2014-49425.0 MediumJuly 11, 2014
cross-rss plugin project wp-cross-rssAbsolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows...CVE-2014-49415.0 MediumJuly 11, 2014
tera charts plugin project tera-chartsMultiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for...CVE-2014-4940Public exploitEPSS 19.3%5.0 MediumJuly 11, 2014
enl newsletter plugin project enl-newsletterSQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress...CVE-2014-4939Public exploit6.5 MediumJuly 11, 2014
wp rss poster plugin project wp-rss-posterSQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress...CVE-2014-4938Public exploit7.5 HighJuly 11, 2014
bookx plugin project bookxDirectory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress...CVE-2014-4937Public exploit5.0 MediumJuly 11, 2014
fortinet fortiwebMultiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2...CVE-2014-47384.3 MediumJuly 11, 2014
juniper junos, srx100, srx110 +10 more +12 moreJuniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before...CVE-2014-38225.4 MediumJuly 11, 2014
juniper junosCross-site scripting (XSS) vulnerability in SRX Web Authentication (webauth) in Juniper Junos 11...CVE-2014-38214.3 MediumJuly 11, 2014
juniper junosJuniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45...CVE-2014-38197.8 HighJuly 11, 2014
juniper junos, srx100, srx110 +10 more +12 moreJuniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12...CVE-2014-38177.8 HighJuly 11, 2014
juniper junosJuniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45...CVE-2014-38169.0 HighJuly 11, 2014
juniper junos, srx100, srx110 +10 more +12 moreJuniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices...CVE-2014-38157.8 HighJuly 11, 2014
dahuasecurity dvr firmwareDahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and...CVE-2013-6117Public exploitEPSS 70.2%7.5 HighJuly 11, 2014
citrix xendesktopCitrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and...CVE-2014-47004.9 MediumJuly 11, 2014
dolibarr erp\/crmMultiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users...CVE-2014-3992Public exploit6.5 MediumJuly 11, 2014
dolibarr erp\/crmMultiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote...CVE-2014-3991Public exploit4.3 MediumJuly 11, 2014
apache syncopeApache Syncope uses a weak PNRGCVE-2014-3503Fix available5.0 MediumJuly 11, 2014
docker, fedoraproject fedora +1 morePrivilege Escalation in DockerCVE-2014-3499Fix available7.2 HighJuly 11, 2014
redhat enterprise virtualizationThe REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3...CVE-2014-3485Fix available4.0 MediumJuly 11, 2014
redhat enterprise mrgCumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the...CVE-2014-01744.3 MediumJuly 11, 2014
pnp4nagiosMultiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote...CVE-2014-49084.3 MediumJuly 11, 2014
pnp4nagios, op5 monitor +1 moreCross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in...CVE-2014-49074.3 MediumJuly 11, 2014
libxml2 Debianlibxml2 - security updateDSA-2978-1Fix availableNo scoreJuly 11, 2014
transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreInteger overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission...CVE-2014-4909Fix available6.8 MediumJuly 11, 2014
libavInteger overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9...CVE-2014-4609Fix available8.8 HighJuly 11, 2014
polldaddy polls \& ratings plugin project polls \& ratingsCross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25...CVE-2014-48564.3 MediumJuly 10, 2014
polylang plugin project polylangCross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows...CVE-2014-48554.3 MediumJuly 10, 2014
smartcatdesign wp contruction modeCross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress...CVE-2014-48544.3 MediumJuly 10, 2014
opendocmanCross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows...CVE-2014-48534.3 MediumJuly 10, 2014
thedigitalcraft atomcmsSQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0,...CVE-2014-4852Public exploit7.5 HighJuly 10, 2014
foecmsOpen redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to...CVE-2014-48515.8 MediumJuly 10, 2014
foecmsSQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary...CVE-2014-48507.5 HighJuly 10, 2014
foecmsMultiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers...CVE-2014-48494.3 MediumJuly 10, 2014
blogstand banner plugin project blogstand-smart-bannerCross-site scripting (XSS) vulnerability in the Blogstand Banner (blogstand-smart-banner) plugin...CVE-2014-48484.3 MediumJuly 10, 2014
buffercode random bannerCross-site scripting (XSS) vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows...CVE-2014-48474.3 MediumJuly 10, 2014
matchalabs metasliderCross-site scripting (XSS) vulnerability in the Meta Slider (ml-slider) plugin 2.5 for WordPress...CVE-2014-48464.3 MediumJuly 10, 2014
stillbreathing bannermanCross-site scripting (XSS) vulnerability in the BannerMan plugin 0.2.4 for WordPress allows...CVE-2014-48454.3 MediumJuly 10, 2014
yokogawa centum cs 1000, centum cs 3000, centum vp +12 more +14 moreStack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09...CVE-2014-3888Public exploitEPSS 62.3%8.3 HighJuly 10, 2014
cisco unified communications managerDirectory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA)...CVE-2014-33184.0 MediumJuly 10, 2014
cisco unified communications managerThe Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified...CVE-2014-33164.0 MediumJuly 10, 2014
cisco unified communications managerCross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer ...CVE-2014-33154.3 MediumJuly 10, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open