CVEs published in July 2014
666 vulnerabilities, 80 critical, 2 exploited.
- dlink dsl2740u, dsl2750u, netgear mr-adsl-dg834 +2 more +4 moreBuffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614...7.8 High
- x xf86-video-intelDirectory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911...4.6 Medium
- blogengine e2SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary...7.5 High
- siemens wincc, simatic pcs7 +1 moreThe Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and...6.8 Medium
- siemens wincc, simatic pcs7 +1 moreSiemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain...4.6 Medium
- siemens wincc, simatic pcs7 +1 moreThe database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products,...6.0 Medium
- siemens wincc, simatic pcs7 +1 moreThe WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products,...4.9 Medium
- siemens wincc, simatic pcs7 +1 moreThe WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products,...5.0 Medium
- cisco ios xr, asr 9000 rsp440 router, asr 9001 +5 more +7 moreCisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling...6.1 Medium
- honeywell falcon xlweb linux controller, falcon xlweb xlwebexe +1 moreMultiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller...4.3 Medium
- micropact icomplaintsCross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0...3.5 Low
- huawei e355, e355 firmware, e355 web ui +2 moreCross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem...4.3 Medium
- honeywell falcon xlweb linux controller, falcon xlweb xlwebexe +1 moreHoneywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe...7.6 High
- omron ns10, ns12, ns15 +8 more +10 moreOmron NS Series HMI Improper Neutralization of Input During Web Page Generation4.0
- omron ns10, ns12, ns15 +8 more +10 moreOmron NS Series HMI Cross-Site Request Forgery4.6
- oleumtech sensor wireless i/o modules, wio dh2 wireless gateway, sensor wireless i\/o module +2 moreOleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator7.8
- oleumtech sensor wireless i/o modules, wio dh2 wireless gateway, sensor wireless i\/o module +2 moreOleumTech WIO Family Key Management Errors7.2
- oleumtech sensor wireless i/o modules, wio dh2 wireless gateway, sensor wireless i\/o module +2 moreOleumTech WIO Family Improper Input Validation5.0
- attachmate verastream process designerUnrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6...10.0 High
- tenable nessus, web ui +1 moreThe /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7...5.0 Medium
- cgminer project cgminer, sgminer project sgminer +1 moreThe parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1...4.3 Medium
- bfgminer, sgminer project sgminer +1 moreMultiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2,...10.0 High
- bfgminer, cgminer project cgminer, sgminer project sgminer +2 moreMultiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner...10.0 High
- autodesk sketchbook proHeap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to...9.3 High
- autodesk sketchbook proInteger overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute...9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0,...10.0 High
- kde kauth, kdelibs, canonical ubuntu linux +1 more +3 moreKDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a...6.9 Medium
- openstack neutronOpenStack Neutron allows remote authenticated users to cause a denial of service4.0 Medium
- citrix xenserverUnspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to...6.4 Medium
- citrix xenserverBuffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and...10.0 High
- redhat jboss enterprise application platformXML External Entity Reference in org.picketlink:picketlink-common7.5 High
- redhat jboss enterprise application platform, jboss enterprise brms platform, jboss enterprise portal platform +1 more +3 morejmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform ...6.8 Medium
- gitlistRepository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to...6.8 Medium
- gitlistGitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell...7.5 High
- elastic logstashElasticsearch Logstash allows remote attackers to execute arbitrary commands7.5 High
- sophos anti-virusMultiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux...4.3 Medium
- gitlistGitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file...7.5 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof...5.8 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow...9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31...9.3 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox...5.8 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and...10.0 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox...9.3 High
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and...10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0,...10.0 High
- mozilla firefox, firefox esr, network security services +1 more +3 moreUse-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla...10.0 High
- Show moreLoading…