Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
July

CVEs published in July 2014

666 vulnerabilities, 80 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle mojarraImproper Neutralization of Input During Web Page Generation in MojarraCVE-2013-5855Fix available4.3 MediumJuly 17, 2014
linux kernelThe net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x...CVE-2014-7284Fix available6.4 MediumJuly 17, 2014
ruby-lang ruby, canonical ubuntu linux, debian linux +4 more +6 moreOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...CVE-2014-4975Fix available5.0 MediumJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4268Fix available5.0 MediumJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect...CVE-2014-4266Fix available5.0 MediumJuly 17, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and...CVE-2014-4263Fix available4.0 MediumJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4262Fix available9.3 HighJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4252Fix available5.0 MediumJuly 17, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and...CVE-2014-4244Fix available4.0 MediumJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect...CVE-2014-4219Fix available9.3 HighJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4218Fix available5.0 MediumJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4216Fix available9.3 HighJuly 17, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers...CVE-2014-4209Fix available6.4 MediumJuly 17, 2014
apple cups, canonical ubuntu linux, fedoraproject fedora +2 moreThe web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files...CVE-2014-3537Fix available1.2 LowJuly 17, 2014
debian linux, hp hp-ux, oracle jdk +1 more +3 moreUnspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows...CVE-2014-2490Fix available9.3 HighJuly 17, 2014
sonicwall scrutinizerMultiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote...CVE-2014-4977Public exploitEPSS 74.9%6.5 MediumJuly 16, 2014
sonicwall scrutinizerDell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via...CVE-2014-49765.5 MediumJuly 16, 2014
citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access...CVE-2014-43475.0 MediumJuly 16, 2014
citrix netscaler application delivery controller, netscaler access gateway, netscaler access gateway firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler...CVE-2014-43464.3 MediumJuly 16, 2014
zte zxv10 w300, zxv10 w300 firmware +1 moreZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web...CVE-2014-4154Public exploit5.0 MediumJuly 16, 2014
zte zxv10 w300, zxv10 w300 firmware +1 moreThe ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for...CVE-2014-4018Public exploit7.8 HighJuly 16, 2014
reportico php report designerDirectory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote...CVE-2014-37775.0 MediumJuly 16, 2014
yealink voip phone firmwareCRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote...CVE-2014-3427Public exploit5.0 MediumJuly 16, 2014
yealink sip-t38gconfig/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA...CVE-2013-5755Public exploit10.0 HighJuly 16, 2014
hp intelligent management center, imc branch intelligent management system software module +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and...CVE-2014-26228.5 HighJuly 16, 2014
hp intelligent management center, imc branch intelligent management system software module +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and...CVE-2014-26217.8 HighJuly 16, 2014
hp intelligent management center, imc branch intelligent management system software module +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and...CVE-2014-26207.8 HighJuly 16, 2014
hp intelligent management center, imc branch intelligent management system software module +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and...CVE-2014-26197.8 HighJuly 16, 2014
hp intelligent management center, imc branch intelligent management system software module +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and...CVE-2014-26187.8 HighJuly 16, 2014
hp storevirtual vsa, storage management software, storevirtual 4130 +7 more +9 moreUnspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0...CVE-2014-26069.0 HighJuly 16, 2014
hp storevirtual vsa, storage management software, storevirtual 4130 +7 more +9 moreUnspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0...CVE-2014-26055.0 MediumJuly 16, 2014
oracle mysql, debian linux, mariadb +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5...CVE-2014-4260Fix available5.5 MediumJuly 16, 2014
oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 MediumJuly 16, 2014
oracle mysql, debian linux, mariadb +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows...CVE-2014-4207Fix available4.0 MediumJuly 16, 2014
oracle mysql, debian linux, mariadb +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows...CVE-2014-2494Fix available4.0 MediumJuly 16, 2014
shopizerMultiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote...CVE-2014-4965Public exploit4.3 MediumJuly 15, 2014
shopizerMultiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow...CVE-2014-4964Public exploit6.8 MediumJuly 15, 2014
shopizerShopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary...CVE-2014-4963Public exploit6.8 MediumJuly 15, 2014
shopizerShopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping...CVE-2014-4962Public exploit6.4 MediumJuly 15, 2014
binarymoon timthumb, wordthumb +1 moreTimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote...CVE-2014-4663Public exploit6.8 MediumJuly 15, 2014
arubanetworks clearpassThe Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x...CVE-2014-40314.0 MediumJuly 15, 2014
freebsdFreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly...CVE-2014-39534.9 MediumJuly 15, 2014
freebsdFreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly...CVE-2014-39524.9 MediumJuly 15, 2014
infoblox netmriInfoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database...CVE-2014-34197.2 HighJuly 15, 2014
infoblox netmriconfig/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute...CVE-2014-3418Public exploit10.0 HighJuly 15, 2014
bestpractical rt, email\ \ +1 moreAlgorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0...CVE-2014-1474Fix available5.0 MediumJuly 15, 2014
cisco unified communications managerDirectory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified...CVE-2014-33196.8 MediumJuly 14, 2014
cisco unified communications managerDirectory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA)...CVE-2014-33175.5 MediumJuly 14, 2014
raritan dpxr20a-16, px +1 moreRaritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication...CVE-2014-295510.0 HighJuly 14, 2014
datumsystems snipDatum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the...CVE-2014-295110.0 HighJuly 14, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open