CVEs published in August 2014
471 vulnerabilities, 60 critical, 3 exploited.
live-configDebianlive-config - security updateNo score- apache axisImproper Validation of Certificates in apache axis5.8 Medium
- s3ql project s3qlS3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to...7.5 High
- monkey-project monkeyMonkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error...4.3 Medium
- pandasecurity panda av pro 2014, panda global protection 2014, panda internet security 2014 +2 moreHeap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products...7.2 High
- opendaylightThe Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via...6.8 Medium
- mailpoet newslettersCross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters)...6.8 Medium
- ibm emptoris spend analysisCross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0...6.8 Medium
- ibm emptoris contract managementSQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10...6.5 Medium
- ibm emptoris spend analysisCross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10...3.5 Low
- ibm emptoris contract managementCross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6...3.5 Low
- kdirstat project kdirstat, opensuse +1 morekcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which...6.8 Medium
- kdirstat project kdirstat, opensuse +1 morekcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which...6.8 Medium
- ibm emptoris sourcing portfolio, emptoris spend analysis +1 moreIBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before...4.9 Medium
- cisco ios xr, asr 9000 rsp440 router, asr 9001 +5 more +7 moreCisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling...4.6 Medium
- ibm emptoris contract management, emptoris sourcing portfolio, emptoris spend analysis +2 moreCross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x before...6.0 Medium
- ibm emptoris sourcing portfolioCross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3,...3.5 Low
- ibm tivoli storage managerThe Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x...3.3 Low
openjdk-7Ubuntuopenjdk-7 regressionNo score- qemu, canonical ubuntu linux +1 moreOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...4.6 Medium
- qemuvmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the...6.8 Medium
- apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 moreThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...4.3 Medium
- apache openoffice, libreoffice +1 moreApache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly...9.3 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to...10.0 High
- google chromemodules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in...5.0 Medium
- google chromeThe WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls...5.0 Medium
- google chromeUse-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0...7.5 High
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as...7.5 High
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...7.5 High
- php-sqrl project php-sqrlSQL injection vulnerability in sqrl_verify.php in php-sqrl allows remote attackers to execute...7.5 High
- qnap ss-839, ts-459u, ts-469u +5 more +7 moreQNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world...2.1 Low
- social stats project statsCross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal...2.1 Low
- openvpn, privatetunnel +1 moreUnquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel...6.9 Medium
- sas visual analyticsUnrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1...6.0 Medium
- ubi uplay pcUbisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program...7.2 High
- innovaphone pbxMultiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and...6.8 Medium
- fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on...7.5 High
- redhat ansibleAnsible Arbitrary Code Execution9.8 Critical
- redhat ansibleAnsible Arbitrary Code Execution9.8 Critical
- red hat ansible, debian linux +1 moreAnsible Code Injection Vulnerability9.8 Critical
- apache commons-httpclientImproper certificate validation in org.apache.httpcomponents:httpclient4.3 Medium
- little kernel project kernel bootloaderThe cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed...7.2 High
- little kernel project kernel bootloaderThe boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as...1.9 Low
- little kernel project kernel bootloaderThe image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK)...7.2 High
- hp service managerUnspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34...9.4 High
- hp service managerCross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and...6.8 Medium
- hp service managerUnspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before...10.0 High
- hp service managerCross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog ...4.3 Medium
- phpgd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure...6.4 Medium
- saltstack saltSaltStack Salt Insecure Temporary File Creation7.2 High
- Show moreLoading…