Skip to content
OpenAdvisories

Archive

March 2014

Vulnerabilities first published in this month (UTC), newest first.

← February 2014 2014 / March April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

540 results · Feed

  • Unscored —
    CVE-2014-1276

    IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary ap…

  • Unscored —
    CVE-2014-1293

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1280

    Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service (NULL…

  • Unscored —
    CVE-2014-1285

    Springboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended access restrictions and re…

  • Unscored —
    CVE-2014-1291

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1289

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1290

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1279

    Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by rea…

  • Unscored —
    CVE-2014-1272

    CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbit…

  • Unscored —
    CVE-2014-1273

    dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging…

  • Unscored —
    CVE-2014-1292

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1281

    Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows …

  • Unscored —
    CVE-2014-1286

    SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service (lock-screen hang)…

  • Unscored —
    CVE-2014-1294

    WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2014-1275

    Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2014-2319

    The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit…

  • Unscored —
    CVE-2014-2265

    Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit …

  • Unscored —
    CVE-2013-3729 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hij…

  • Unscored —
    CVE-2013-3728 Public exploit

    Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissi…

  • Unscored —
    CVE-2013-3727 Public exploit

    SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL c…

  • Unscored —
    CVE-2014-1877

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2014-2043 Public exploit

    SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows r…

  • Medium 4.0
    CVE-2013-7335

    DotNetNuke (DNN) Open redirect vulnerability

    Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2013-1636 Public exploit

    Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in…

  • Medium —
    CVE-2013-4649

    DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter

    Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default URI.

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2013-3943

    Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authentica…

  • Unscored —
    CVE-2013-5117 Public exploit

    SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetN…

  • Unscored —
    CVE-2014-2240

    Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote …

    freetype Debian
  • Unscored —
    CVE-2014-0317 EPSS 10%

    The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server …

  • Unscored —
    CVE-2014-0298 EPSS 13%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-0311 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-0301 EPSS 14%

    Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wind…

  • Unscored —
    CVE-2014-0321 EPSS 13%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2014-0303 EPSS 20%

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2014-0309 EPSS 20%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-0503

    Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.…

  • Unscored —
    CVE-2014-0308 EPSS 14%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-0313 EPSS 22%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2014-0324 EPSS 20%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-0314 EPSS 20%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…