Skip to content
OpenAdvisories

Archive

12 August 2014

Vulnerabilities first published on this day (UTC), newest first.

79 results · Feed

  • Unscored —
    CVE-2014-1222 Public exploit

    Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote auth…

  • Unscored —

    The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not pr…

  • Unscored —

    The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not p…

  • Unscored —

    Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via …

  • Unscored —

    Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM)…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remot…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, A…

  • Unscored —

    The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated use…

  • Unscored —

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  • Unscored —
    CVE-2014-0316 EPSS 11%

    Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windo…

  • High 8.8
    CVE-2014-0546 Exploited EPSS 22%

    Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox pro…

    KEV May 25, 2022
  • Unscored —

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  • Unscored —

    The Windows Installer in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind…

  • Unscored —
    CVE-2014-1820 EPSS 15%

    Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-…

  • Unscored —

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, W…

  • Unscored —
    CVE-2014-4050 EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2014-4052 EPSS 17%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2014-4060 EPSS 23%

    Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1…

  • Unscored —
    CVE-2014-4063 EPSS 23%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-4057 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2014-4067 EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2014-4055 EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2014-4062 EPSS 14%

    Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mech…

  • Unscored —
    CVE-2014-4058 EPSS 17%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-4051 EPSS 17%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-4056 EPSS 17%

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-4061 EPSS 26%

    Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing o…

  • Unscored —
    CVE-2014-2826 EPSS 17%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-2818 EPSS 17%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2014-2824 EPSS 17%

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2014-2819 EPSS 12%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  • Unscored —
    CVE-2014-2816 EPSS 16%

    Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated us…

  • Unscored —
    CVE-2014-2815 Public exploit EPSS 44%

    Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers c…

  • Unscored —
    CVE-2014-2808 EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…