CVEs published in August 2014
471 vulnerabilities, 60 critical, 3 exploited.
- microsoft windows 7, windows 8, windows 8.1 +4 more +6 moreMemory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows...7.5 High
- gallery objects project objectsSQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote...7.5 High
- fb gorilla project gorillaSQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote...7.5 High
- wordpress file upload project file uploadCross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file...6.8 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3...4.3 Medium
- splunkDirectory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk...4.0 Medium
- improved user search in backend project user search in backendCross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the...4.3 Medium
- microcart project microcartMultiple cross-site scripting (XSS) vulnerabilities in Microcart 1.0 allow remote attackers to...4.3 Medium
- megalab the uploaderSQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote...7.5 High
- citrix access gateway plug-inInteger overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix...6.8 Medium
- zoll monitor\/defibrillatorZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service...4.9 Medium
- zoll monitor\/defibrillatorZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System...4.9 Medium
- ibm security appscan sourceUnspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0...7.2 High
- hp nonstop safeguard securityHP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01...4.0 Medium
drupalMageiaUpdated drupal packages fix security vulnerabilityNo scorewordpressMageiaUpdated wordpress packages fix security vulnerabilitiesNo score- ibm websphere portalOpen redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through...5.8 Medium
- ibm security access manager for mobileCross-site scripting (XSS) vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0...4.3 Medium
- ibm websphere portalIBM WebSphere Portal 8.0.0 before 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error...5.0 Medium
- gomlab gom playerGretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service ...4.3 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8...3.5 Low
- hp operations agentUnspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users...4.4 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6...4.3 Medium
python2.6Debianpython2.6 - regression updateNo score- ibm content collectorThe Outlook Extension in IBM Content Collector 4.0.0.x before 4.0.0.0-ICC-OE-IF004 allows local...2.1 Low
- apache subversion, apple xcode, canonical ubuntu linux +1 more +3 moreThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10...4.0 Medium
- serf project serf, apache subversion, canonical ubuntu linux +2 moreThe (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate...4.0 Medium
- ibm websphere real time, lotus domino, lotus notes +2 moreUnspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3...7.5 High
- ibm curam social program managementMultiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social...3.5 Low
- ibm tivoli business service managerCross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2...3.5 Low
- hp application lifecycle managementUnspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and...4.6 Medium
- hp enterprise mapsUnspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain...4.0 Medium
- ibm infosphere optim data growth solution for siebel crmThe Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has...4.0 Medium
- cisco nexus 9000, nx-os +1 moreCisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy...5.0 Medium
- cisco ios, ios xe +1 moreThe EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG,...7.8 High
- ibm business process managerIBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain...5.0 Medium
- subnet substation server 2 telegyr 8979 master protocol, substation server +1 moreSUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol Improper Input Validation8.3
- cisco unity connectionSQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier...6.5 Medium
- cisco unity connectionThe server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...9.0 High
- cisco unified communications managerCisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions...4.0 Medium
acpi-supportDebianacpi-support - regression updateNo score- drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to...6.8 Medium
- drupal, wordpress, debian linux +2 moreThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 Medium
- drupal, wordpress, debian linux +2 moreThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 Medium
- wordpress, debian linux +1 moreCross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2,...2.1 Low
- wordpresswp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation...6.8 Medium
- wordpress, debian linux +1 morewp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different...6.8 Medium
apache-mod_wsgiMageiaUpdated apache-mod_wsgi package fixes security vulnerabilityNo score- mit kerberos 5Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap...8.5 High
- ayatana project unityUnity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the...7.2 High
- Show moreLoading…