CVEs published in August 2014
471 vulnerabilities, 60 critical, 3 exploited.
- ibm power 710, power 720, power 730 +12 more +14 moreUnspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40...4.6 Medium
- schrack technik microcontrol, technik microcontrol firmware +1 moreThe web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a...7.5 High
- wp content source control project content source controlDirectory traversal vulnerability in the file_get_contents function in downloadfiles/download.php...5.0 Medium
- check mk project mkMultiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before...3.5 Low
- tenda a5s, a5s firmware +1 moreThe Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers...10.0 High
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...4.7 Medium
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...4.7 Medium
- esri arcgis serverOpen redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect...5.8 Medium
- esri arcgis serverMultiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote...4.3 Medium
- freereprintables articlefrMultiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow...7.5 High
- bssys rbs bs-clientMultiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow...7.5 High
- apache traffic serverUnspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x...10.0 High
- apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load...7.1 High
- symantec encryption desktop, pgp desktop +1 moreSymantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10...5.0 Medium
- ibm rational directory administrator, rational directory server +1 moreThe RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004...4.9 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x...5.0 Medium
- ibm websphere application serverThe addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere...5.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x...4.3 Medium
- djangoproject django, opensuse +1 moreDjango data leakage via querystring manipulation in admin3.5 Low
- djangoproject django, opensuse +1 moreDjango Middleware Enables Session Hijacking6.0 Medium
- djangoproject django, debian linux, opensuse +2 moreDjango denial of service via file upload naming4.3 Medium
- djangoproject django, opensuse +1 moreDjango Incorrectly Validates URLs5.8 Medium
- shopizercom/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not...5.0 Medium
- binarymoon timthumbCross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb...4.3 Medium
- binarymoon timthumbCross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 ...4.3 Medium
- binarymoon timthumb, prothemedesign mimbo pro +1 moreCross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in...4.3 Medium
- freebsd, netbsd +1 moreThe VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context...5.0 Medium
- freebsd, netbsd +1 moreThe HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context...5.0 Medium
- alienvault open source security information managementSQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to...6.5 Medium
- alienvault open source security information managementThe av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute...10.0 High
- alienvault open source security information managementSQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0...7.5 High
- alienvault open source security information managementThe (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in...10.0 High
- phpmyadmin, opensuse +1 morephpMyAdmin cross-site scripting vulnerability in crafted view name3.5 Low
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x...3.5 Low
- phpMultiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32...6.8 Medium
- python pillow, debian python-imaging, opensuse +2 morePillow denial of service via Crafted Block Size5.0 Medium
- christos zoulas file, php +1 moreInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...4.3 Medium
- apache httpasyncclient, httpclient +1 moreImproper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient5.8 Medium
- schrack technik microcontrol, technik microcontrol firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik...4.3 Medium
- owncloud, owncloud server +1 moreDirectory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6...6.8 Medium
- ibm powervcIBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring...2.9 Low
- ibm powervcIBM PowerVC 1.2.0 before FixPack3 does not properly use the known_hosts file, which allows man-in...4.3 Medium
- emc documentum content serverEMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote...8.5 High
- rubyonrails railsActive Record subject to strong parameters protection bypass7.5 High
- cisco webex meetmenowDirectory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx...4.0 Medium
- cisco asr 5000 series softwareThe Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series...4.3 Medium
- emc documentum content serverEMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote...6.3 Medium
- Show moreLoading…