Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
August

CVEs published in August 2014

471 vulnerabilities, 60 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle mysql, juniper junos space, mariadb +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier,...CVE-2014-6559Fix available4.3 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows...CVE-2014-6555Fix available6.5 MediumAugust 19, 2014
oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-6551Fix available2.1 LowAugust 19, 2014
oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2014-6530Fix available6.5 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated...CVE-2014-6520Fix available4.0 MediumAugust 19, 2014
oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier,...CVE-2014-6507Fix available4.3 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2014-6505Fix available4.0 MediumAugust 19, 2014
oracle mysql, juniper junos space, mariadb +1 more +3 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier,...CVE-2014-6500Fix available7.5 HighAugust 19, 2014
oracle mysql, juniper junos space, mariadb +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier,...CVE-2014-6496Fix available4.3 MediumAugust 19, 2014
oracle mysql, juniper junos space, mariadb +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2014-6495Fix available4.3 MediumAugust 19, 2014
oracle mysql, juniper junos space, mariadb +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier,...CVE-2014-6494Fix available4.3 MediumAugust 19, 2014
oracle mysql, juniper junos space, mariadb +1 more +3 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows...CVE-2014-6491Fix available7.5 HighAugust 19, 2014
oracle mysql, mariadb +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated...CVE-2014-6489Fix available5.5 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2014-6484Fix available4.0 MediumAugust 19, 2014
oracle mysql, juniper junos space, mariadb +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2014-6478Fix available4.3 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated...CVE-2014-6474Fix available3.5 LowAugust 19, 2014
oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows...CVE-2014-6469Fix available6.8 MediumAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows...CVE-2014-6464Fix available4.0 MediumAugust 19, 2014
oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-6463Fix available3.3 LowAugust 19, 2014
oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-4287Fix available4.0 MediumAugust 19, 2014
oracle mysql, mariadb, oracle solaris +2 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-4274Fix available4.1 MediumAugust 19, 2014
opensslThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not...CVE-2014-3569Fix availableEPSS 19.5%5.0 MediumAugust 19, 2014
bitdefender gravityzoneMultiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow...CVE-2014-5350Public exploitEPSS 63.9%5.0 MediumAugust 19, 2014
baidu spark browserStack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to...CVE-2014-5349Public exploit5.0 MediumAugust 19, 2014
riverbed steelapp traffic managerCross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka...CVE-2014-53484.3 MediumAugust 19, 2014
disqus comment systemMultiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin...CVE-2014-5347Public exploit6.8 MediumAugust 19, 2014
disqus comment systemMultiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2...CVE-2014-5346Public exploit6.8 MediumAugust 19, 2014
disqus comment systemCross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin...CVE-2014-5345Public exploit4.3 MediumAugust 19, 2014
mobiloudMultiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin)...CVE-2014-53444.3 MediumAugust 19, 2014
fengoffice feng officeCross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject...CVE-2014-53434.3 MediumAugust 19, 2014
redhat jboss enterprise application platform, resteasy +1 moreIncorrect Privilege Assignment in RESTEasyCVE-2014-3490Fix available7.5 HighAugust 19, 2014
redhat jboss enterprise application platformThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...CVE-2014-34724.9 MediumAugust 19, 2014
redhat jboss enterprise application platformThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...CVE-2014-34645.5 MediumAugust 19, 2014
openstack horizon, opensuse +1 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interfaceCVE-2014-3594Fix available3.5 LowAugust 19, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11...CVE-2014-5333Fix available4.3 MediumAugust 19, 2014
kk-osk advance-flow, advance-flow forms +1 moreSQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and...CVE-2014-39067.5 HighAugust 19, 2014
jayj cakifoCross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress...CVE-2014-39033.5 LowAugust 19, 2014
cisco nexus 5000, nx-os, nexus 5010 +12 more +14 moreThe SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides...CVE-2014-3341Public exploit5.0 MediumAugust 19, 2014
wordpresswp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before...CVE-2014-5203Fix available7.5 HighAugust 18, 2014
blackberry os, q10, q5 +2 more +4 moreThe Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30...CVE-2014-23886.1 MediumAugust 18, 2014
blackberry enterprise service, enterprise server, enterprise server express +2 moreBlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log...CVE-2014-14694.9 MediumAugust 18, 2014
dhcpcd MageiaUpdated dhcpcd package fixes security vulnerabilityMGASA-2014-0334Fix availableNo scoreAugust 18, 2014
fedoraproject 389 directory server, redhat directory server, enterprise linux +2 moreRed Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote...CVE-2014-3562Fix available5.0 MediumAugust 18, 2014
gnupg libgcrypt, debian linux +1 moreLibgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext...CVE-2014-5270Fix available2.1 LowAugust 18, 2014
siemens simatic s7-1500 cpu firmware, simatic s7-1511-1 pn cpu, simatic s7-1513-1 pn cpu +5 more +7 moreSiemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a...CVE-2014-5074Public exploit7.1 HighAugust 17, 2014
ibm infosphere master data management, infosphere master data management server for product information management +1 moreIBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x...CVE-2014-47755.0 MediumAugust 17, 2014
ibm business process manager, websphere application server +1 morecallService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi...CVE-2014-30874.0 MediumAugust 17, 2014
ibm global console manager 16 firmware, global console manager 32 firmware +1 moresystest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20...CVE-2014-3085Public exploit7.1 HighAugust 17, 2014
ibm global console manager 16 firmware, global console manager 32 firmware +1 moreprodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20...CVE-2014-3081Public exploit6.3 MediumAugust 17, 2014
ibm global console manager 16 firmware, global console manager 32 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager...CVE-2014-3080Public exploit4.3 MediumAugust 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open