Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
August

CVEs published in August 2014

471 vulnerabilities, 60 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm infosphere master data management, infosphere master data management server for product information management +1 moreIBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x...CVE-2014-30637.5 HighAugust 17, 2014
ibm infosphere master data management, infosphere master data management server for product information management +1 moreCross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master...CVE-2014-09696.8 MediumAugust 17, 2014
ibm infosphere master data management, infosphere master data management server for product information management +1 moreSQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management -...CVE-2014-09666.5 MediumAugust 17, 2014
ibm infosphere biginsightsIBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in...CVE-2014-09052.9 LowAugust 17, 2014
ibm tivoli storage managerBuffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive...CVE-2014-08762.1 LowAugust 17, 2014
iridium pilot below deck equipment, open port +1 moreThe Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on...CVE-2014-03279.3 HighAugust 17, 2014
iridium pilot below deck equipment, open port +1 moreThe Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals...CVE-2014-03269.3 HighAugust 17, 2014
tenfourzero shutterCross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to...CVE-2014-39054.3 MediumAugust 17, 2014
tenfourzero shutterSQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers...CVE-2014-39047.5 HighAugust 17, 2014
piwigoCross-site scripting (XSS) vulnerability in admin/picture_modify.php in the photo-edit subsystem...CVE-2014-39004.3 MediumAugust 17, 2014
novell open enterprise serverUnspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled...CVE-2014-060910.0 HighAugust 17, 2014
xml-dt project xml-dtThe (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite...CVE-2014-5260Fix available6.3 MediumAugust 16, 2014
ibm websphere datapower soa appliance, websphere datapower soa appliance firmware +1 moreIBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6...CVE-2014-08524.3 MediumAugust 16, 2014
linecorp lineLINE 3.2.1.83 and earlier on Windows and 3.2.1 and earlier on OS X does not verify X.509...CVE-2013-71444.3 MediumAugust 16, 2014
cyberagent amebaThe CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509...CVE-2014-39025.8 MediumAugust 15, 2014
cobham aviator 700d, aviator 700e +1 moreCobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2)...CVE-2014-29646.9 MediumAugust 15, 2014
cobham ailor 6110 mini-c gmdss, sailor 6006 message terminal, sailor 6222 vhf +1 more +3 more** DISPUTED ** Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which...CVE-2014-2941Disputed7.1 HighAugust 15, 2014
cobham sailor 6000 series firmware, sailor 900 firmware +1 moreCobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have...CVE-2014-294010.0 HighAugust 15, 2014
cobham ailor 6110 mini-c gmdss, sailor 6006 message terminal, sailor 6222 vhf +1 more +3 moreThe thraneLINK protocol implementation on Cobham devices does not verify firmware signatures,...CVE-2014-03289.3 HighAugust 15, 2014
cobham aviator 200, explorer bgan, sailor 900 vsat +6 more +8 moreCobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200,...CVE-2013-71807.8 HighAugust 15, 2014
openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Domain-scoped tokens don't get revokedCVE-2014-5253Fix available4.9 MediumAugust 15, 2014
openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation eventsCVE-2014-5252Fix available4.9 MediumAugust 15, 2014
openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) Multiple vulnerabilities in revocation eventsCVE-2014-5251Fix available4.9 MediumAugust 15, 2014
biblio autocomplete project autocompleteUnspecified vulnerability in the AJAX autocompletion callback in the Biblio Autocomplete module 6...CVE-2014-52507.5 HighAugust 14, 2014
biblio autocomplete project autocompleteSQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio...CVE-2014-52497.5 HighAugust 14, 2014
mybbCross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject...CVE-2014-52484.3 MediumAugust 14, 2014
zpanelcp zpanelMultiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to...CVE-2012-66547.5 HighAugust 14, 2014
zpanelcp zpanelSQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute...CVE-2012-5685Public exploit7.5 HighAugust 14, 2014
zpanelcp zpanelCross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to...CVE-2012-5684Public exploit4.3 MediumAugust 14, 2014
zpanelcp zpanelMultiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow...CVE-2012-5683Public exploit6.8 MediumAugust 14, 2014
arialsoftware campaign enterpriseMultiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise...CVE-2012-38207.5 HighAugust 14, 2014
testlinkMultiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated...CVE-2012-09396.5 MediumAugust 14, 2014
testlinkMultiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote...CVE-2012-0938Public exploit6.5 MediumAugust 14, 2014
mozilla bugzillaThe response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in...CVE-2014-1546Fix available4.3 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13906.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13896.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13886.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13876.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13866.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13856.8 MediumAugust 14, 2014
apple safariWebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to...CVE-2014-13846.8 MediumAugust 14, 2014
microsoft outlook.comThe Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509...CVE-2014-52394.0 MediumAugust 14, 2014
fujitsu serverview operations managerCross-site scripting (XSS) vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through...CVE-2014-38984.3 MediumAugust 14, 2014
piwigoCross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2...CVE-2014-19804.3 MediumAugust 14, 2014
linux kernel, canonical ubuntu linux +1 morefs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV,...CVE-2014-5207Public exploitFix available6.2 MediumAugust 13, 2014
linux kernel, canonical ubuntu linux +1 moreThe do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain...CVE-2014-5206Fix available7.2 HighAugust 13, 2014
google chrome, debian linux +1 moreMultiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to...CVE-2014-3167Fix available7.5 HighAugust 13, 2014
debian linux, google chrome +1 moreThe Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS...CVE-2014-3166Fix available4.3 MediumAugust 13, 2014
google chrome, debian linux +1 moreUse-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the...CVE-2014-3165Fix available7.5 HighAugust 13, 2014
compfight project compfightCross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for...CVE-2014-52023.5 LowAugust 12, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open