Archive

24 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /24 May 2014 →

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

Unscored —

CVE-2014-2734 Public exploit

The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, whic…

Apr 24, 2014
Unscored —

CVE-2014-2601

The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of serv…

Apr 24, 2014
Unscored —

CVE-2014-0188

The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authenti…

Apr 24, 2014
Unscored —

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local gues…

xen Ubuntu

Apr 24, 2014
Unscored —

CVE-2014-2736

Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL…

Apr 24, 2014
Unscored —

CVE-2013-6738

Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-…

Apr 24, 2014
Unscored —

CVE-2012-3946

Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances b…

Apr 24, 2014
Unscored —

CVE-2012-5723

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial…

Apr 24, 2014
Unscored —

CVE-2014-2907

The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 do…

wireshark wireshark Debian Ubuntu

Apr 24, 2014