Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
July

CVEs published in July 2014

666 vulnerabilities, 80 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

debian linux, linux kernel +1 morearch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not...CVE-2014-3534Fix available7.2 HighJuly 29, 2014
elastic elasticsearchElasticsearch Improper Access Control vulnerabilityCVE-2014-3120In KEVPublic exploitFix availableEPSS 88.6%8.1 HighJuly 28, 2014
apache subversionThe daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges...CVE-2013-7393Fix available2.4 LowJuly 28, 2014
apache subversionsvnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in...CVE-2013-4262Fix available2.4 LowJuly 28, 2014
cisco webex meetings serverThe OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user...CVE-2014-33045.0 MediumJuly 28, 2014
cisco webex meetings serverThe web framework in Cisco WebEx Meetings Server does not properly restrict the content of query...CVE-2014-33034.0 MediumJuly 28, 2014
silver-peak vxCross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4...CVE-2014-29754.3 MediumJuly 28, 2014
silver-peak vxCross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through...CVE-2014-29746.8 MediumJuly 28, 2014
h3c secbladefw, secpath1000fe, f1000-e vpn firewall +12 more +14 moreUnspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20...CVE-2013-48407.8 HighJuly 28, 2014
visualware myconnection serverMultiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server...CVE-2014-51134.3 MediumJuly 28, 2014
netfortris trixboxmaint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary...CVE-2014-5112Public exploit7.5 HighJuly 28, 2014
netfortris trixboxMultiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read...CVE-2014-5111Public exploitEPSS 21.6%5.0 MediumJuly 28, 2014
netfortris trixboxCross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows...CVE-2014-51104.3 MediumJuly 28, 2014
netfortris trixboxSQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox...CVE-2014-5109Public exploit7.5 HighJuly 28, 2014
concrete5, concretecms concrete cms +1 moreCross-site scripting (XSS) vulnerability in single_pages\download_file.php in concrete5 before 5...CVE-2014-51084.3 MediumJuly 28, 2014
concrete5, concretecms concrete cms +1 moreconcrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct...CVE-2014-51075.0 MediumJuly 28, 2014
invisioncommunity invision power boardCross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4...CVE-2014-51064.3 MediumJuly 28, 2014
ol-commerce project ol-commerceMultiple cross-site scripting (XSS) vulnerabilities in ol-commerce 2.1.1 allow remote attackers...CVE-2014-51054.3 MediumJuly 28, 2014
ol-commerce project ol-commerceMultiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute...CVE-2014-5104Public exploit7.5 HighJuly 28, 2014
mailpoet newslettersUnspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8...CVE-2014-47267.5 HighJuly 27, 2014
mailpoet newslettersThe MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote...CVE-2014-4725Public exploitEPSS 60.7%7.5 HighJuly 27, 2014
apple cups, canonical ubuntu linux +1 moreThe web interface in CUPS before 2.0 does not check that files have world-readable permissions,...CVE-2014-5031Fix available5.0 MediumJuly 27, 2014
apple cups, canonical ubuntu linux +1 moreCUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html...CVE-2014-5030Fix available1.9 LowJuly 27, 2014
apple cups, canonical ubuntu linux +1 moreThe web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a...CVE-2014-5029Fix available1.5 LowJuly 27, 2014
microsoft windows xpMicrosoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which...CVE-2014-4971Public exploitEPSS 23.0%7.2 HighJuly 26, 2014
gurock testrailCross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers...CVE-2014-48574.3 MediumJuly 26, 2014
ibm sametimeCross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x...CVE-2014-47484.3 MediumJuly 26, 2014
ibm sametimeThe Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate...CVE-2014-47472.1 LowJuly 26, 2014
caucho resinThe ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode...CVE-2014-29665.0 MediumJuly 26, 2014
hp network virtualizationDirectory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6...CVE-2014-2626EPSS 19.4%9.4 HighJuly 26, 2014
hp network virtualizationDirectory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 ...CVE-2014-26258.5 HighJuly 26, 2014
owncloud MageiaUpdated owncloud packages fix an unspecified security vulnerabilityMGASA-2014-0301Fix availableNo scoreJuly 26, 2014
avidemux MageiaUpdated avidemux packages fix security issues in the bundles ffmpegMGASA-2014-0297Fix availableNo scoreJuly 26, 2014
apple quicktimeApple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service ...CVE-2014-49799.3 HighJuly 26, 2014
sabreairlinesolutions crew management, crew operations, crew planning +2 more +4 moreMultiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2...CVE-2014-48587.5 HighJuly 26, 2014
cisco unified presence serverThe Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to...CVE-2014-33285.0 MediumJuly 26, 2014
cisco security managerSQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows...CVE-2014-33266.5 MediumJuly 26, 2014
cisco telepresence server softwareMultiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web...CVE-2014-33244.3 MediumJuly 26, 2014
cisco webex meetings serverCross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings...CVE-2014-33056.8 MediumJuly 26, 2014
cisco webex meetings serverThe ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows...CVE-2014-33015.0 MediumJuly 26, 2014
ibm infosphere information serverCross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere...CVE-2014-30714.3 MediumJuly 26, 2014
morpho itemiser 3Morpho Itemiser 3 Hard-Coded CredentialCVE-2014-236310.0 July 26, 2014
zohocorp manageengine eventlog analyzerCross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000...CVE-2014-51034.3 MediumJuly 25, 2014
vbulletinSQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to...CVE-2014-51027.5 HighJuly 25, 2014
webidsupport webidMultiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to...CVE-2014-5101Public exploit4.3 MediumJuly 25, 2014
omekaMultiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote...CVE-2014-5100Public exploit6.8 MediumJuly 25, 2014
reviewboard review boardCross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0...CVE-2014-50274.3 MediumJuly 25, 2014
ui unifi videoThe default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video ...CVE-2014-2227Public exploit6.0 MediumJuly 25, 2014
sonicwall analyzer, global management system, uma em5000 +2 moreCross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer,...CVE-2014-50244.3 MediumJuly 24, 2014
eterna bozohttpd, netbsd +1 morebozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when...CVE-2014-5015Fix available5.0 MediumJuly 24, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open