CVEs published in August 2014
471 vulnerabilities, 60 critical, 3 exploited.
- codeaurora android-msm The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android... 3.3 Low
- codeaurora android-msm A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services... 5.0 Medium
- codeaurora android-msm app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation... 6.6 Medium
- code aurora acdb audio driver, codeaurora android-msm +1 more Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver... 7.2 High
- codeaurora android-msm The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3... 7.2 High
-
openjdk-7Debian openjdk-7 - regression update No score - amazon kindle The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates... 5.8 Medium
- cisco cloud portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not... 4.3 Medium
- vmturbo operations manager vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to... 7.5 High
- mcafee network security manager Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network... 6.8 Medium
- spi-inc ganeti The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0... 2.1 Low
- xen Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the... 4.3 Medium
- wordpress mobile pack project mobile pack, wpmobilepack wordpress mobile pack +1 more The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to... 5.0 Medium
- iii encore discovery solution Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which... 5.0 Medium
- iii encore discovery solution Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote... 5.8 Medium
- zohocorp manageengine eventlog analyzer Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog... 4.3 Medium
- arubanetworks clearpass policy manager The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users... 9.0 High
- sixapart movable type Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT)... 4.3 Medium
- ibm security appscan The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x... 5.5 Medium
- cisco cloud portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider... 5.0 Medium
- cisco cloud portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL... 4.0 Medium
- cisco cloud portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types... 4.0 Medium
- cisco transport gateway installation software The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway... 6.3 Medium
- ibm powervc IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, ... 2.1 Low
- ibm maximo asset management, smartcloud control desk, tivoli asset management for it +2 more IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6;... 4.9 Medium
- ibm maximo asset management, smartcloud control desk +1 more Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1... 6.0 Medium
- ibm flex system manager The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x,... 3.5 Low
- ibm mobile foundation, worklight +1 more IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation,... 4.9 Medium
- novell groupwise FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote... 7.8 High
- ibm monitoring agent for unix logs, monitoring server \(ms\) and shared libraries \(ax\) +1 more Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6... 7.2 High
- cisco ios, 1801 integrated service router, 1802 integrated service router +5 more +7 more Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled,... 5.4 Medium
- cisco transport gateway installation software The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway... 5.0 Medium
- vmware tools, vm-support, workstation +2 more vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other... 4.7 Medium
- vmware tools, vm-support, workstation +2 more vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other... 6.3 Medium
- openstack horizon, fedoraproject fedora, opensuse +1 more +3 more OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly... 5.0 Medium
- invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware SQL Injection 7.5
- invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Input Validation 2.1
- invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Cross-site Scripting 7.5
- emc rsa identity management and governance EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01,... 9.3 High
- cisco transport gateway installation software Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport... 4.3 Medium
- invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Inadequate Encryption Strength 2.1
- invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Inadequate Encryption Strength 7.8
- cg automation epaq-9410 substation gateway CG Automation ePAQ-9410 Substation Gateway Improper Input Validation 4.7
- cg automation epaq-9410 substation gateway CG Automation ePAQ-9410 Substation Gateway Improper Input Validation 7.1
- lua, canonical ubuntu linux, debian linux +2 more +4 more Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows... 5.0 Medium
- squid-cache squid HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to... 5.0 Medium
- google chrome Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC,... 10.0 High
- google chrome Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC,... 10.0 High
- google chrome The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome... 6.4 Medium
- google chrome extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '... 6.4 Medium
- Show olderLoading…