Skip to content
OpenAdvisories

Archive

March 2014

Vulnerabilities first published in this month (UTC), newest first.

← February 2014 2014 / March April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2014-0050 Public exploit EPSS 83%

    Commons FileUpload Denial of service vulnerability

    MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a…

    org.apache.tomcat:tomcat commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven
  • High 7.8
    CVE-2014-1761 Exploited Public exploit EPSS 78%

    Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Off…

    KEV Feb 15, 2022
  • High —
    CVE-2014-0002 EPSS 27%

    Apache Camel's XSLT component allows remote attackers to read arbitrary files

    The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity re…

    org.apache.camel:camel-core Maven
  • High —
    CVE-2014-0003

    Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

    The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

    org.apache.camel:camel-core Maven
  • High 8.3
    CVE-2014-0784 Public exploit EPSS 36%

    Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

    Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

    Yokogawa CENTUM CS 3000 ICS / OT
  • High 8.1
    CVE-2013-4197

    Plone Improper Access Control Vulnerability

    member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.

    plone PyPI