CVEs published in July 2014
666 vulnerabilities, 80 critical, 2 exploited.
- canonical acpi-support, ubuntu linux +1 moreRace condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows...6.9 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...7.5 High
- ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x...4.3 Medium
- limesurveyIncomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey...4.3 Medium
- limesurveySQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in...7.5 High
- limesurveyMultiple cross-site scripting (XSS) vulnerabilities in LimeSurvey 2.05+ Build 140618 allow remote...4.3 Medium
- joomlaboat com youtubegalleryMultiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery ...7.5 High
- e107Cross-site scripting (XSS) vulnerability in e107_admin/db.php in e107 2.0 alpha2 and earlier...4.3 Medium
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreThe acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT...7.8 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...7.6 High
- phpmyadmin, opensuse +1 moreserver_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote...4.0 Medium
- phpmyadminphpMyAdmin cross-site scripting Vulnerability in Table or Column Names3.5 Low
- phpmyadminCross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte...3.5 Low
- phpmyadminCross-site scripting (XSS) vulnerability in the PMA_getHtmlForActionLinks function in libraries...3.5 Low
- php kobo multifunctional mailform freeCross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and...4.3 Medium
- nexatechnologies meridianCross-site scripting (XSS) vulnerability in Nexa Meridian before 2014 allows remote attackers to...4.3 Medium
- webminCross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is...2.6 Low
- webminCross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users...4.3 Medium
- webmin userminCross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to...4.3 Medium
- apache http serverMemory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the...5.0 Medium
- google chromeThe WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android...7.5 High
- google chromeThe WebContentsDelegateAndroid::OpenURLFromTab function in components...6.4 Medium
- fuelphpThe auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote...7.5 High
- cybozu garoonCybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access...7.5 High
- cybozu garoonCross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and...3.5 Low
- cybozu garoonCross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x...3.5 Low
- cybozu garoonThe Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated...4.0 Medium
- cybozu garoonCross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3...3.5 Low
- cybozu garoonThe CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute...10.0 High
- nextapp file explorerDirectory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for...5.0 Medium
- apache http serverThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...4.3 Medium
- drupalCross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows...4.3 Medium
- drupalCross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7...2.1 Low
- drupalThe File module in Drupal 7.x before 7.29 does not properly check permissions to view files,...4.9 Medium
- drupalThe multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to...5.0 Medium
- mit kerberos, kerberos 5, debian linux +4 more +6 moreMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a...5.0 Medium
- mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 moreMIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ...5.0 Medium
- google chrome, debian linux +1 moreMultiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to...5.0 Medium
- google chrome, debian linux +1 moreThe ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in...6.8 Medium
- apache http serverThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Medium
- apache http server, debian linux, oracle enterprise manager ops center +2 more +4 moreRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Medium
- apache http server, debian linux, redhat jboss enterprise application platform +2 moreThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Medium
- apache http server, apple mac os x +1 moreThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...4.3 Medium
- octavocmsCross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers...4.3 Medium
- cisco unified customer voice portalMultiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP)...4.3 Medium
- emc recoverpoint applianceThe default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable...5.8 Medium
- redhat enterprise mrgCumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with...5.0 Medium
- entity api project apiThe Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b)...5.0 Medium
- entity api project apiThe Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node...4.0 Medium
- ibm infosphere master data management server for product information management, infosphere master data management collaboration server +1 moreThe GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x...6.3 Medium
- Show moreLoading…