Total
22706 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2014-2907 | 1 Wireshark | 1 Wireshark | 2014-05-22 | 4.3 MEDIUM | N/A |
The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. | |||||
CVE-2014-3412 | 1 Juniper | 3 Junos Space, Junos Space Ja1500 Appliance, Junos Space Ja2500 Appliance | 2014-05-21 | 10.0 HIGH | N/A |
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. | |||||
CVE-2013-4426 | 1 Leon Weber | 1 Pyxtrlock | 2014-05-19 | 3.6 LOW | N/A |
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash. | |||||
CVE-2014-2405 | 3 Canonical, Debian, Oracle | 3 Ubuntu Linux, Debian Linux, Openjdk | 2014-05-14 | 10.0 HIGH | N/A |
Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462. | |||||
CVE-2014-0462 | 3 Canonical, Debian, Oracle | 3 Ubuntu Linux, Debian Linux, Openjdk | 2014-05-14 | 10.0 HIGH | N/A |
Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405. | |||||
CVE-2014-1685 | 2 Fedoraproject, Zabbix | 2 Fedora, Zabbix | 2014-05-09 | 5.5 MEDIUM | N/A |
The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors. | |||||
CVE-2013-3571 | 1 Dest-unreach | 1 Socat | 2014-05-09 | 2.6 LOW | N/A |
socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions. | |||||
CVE-2014-2443 | 1 Oracle | 1 Peoplesoft Products | 2014-05-09 | 4.3 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology. | |||||
CVE-2014-3426 | 1 Illinois | 1 Ncsa Mosaic | 2014-05-08 | 2.1 LOW | N/A |
NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/Mosaic.pid file for every possible PID. | |||||
CVE-2014-3425 | 1 Illinois | 1 Ncsa Mosaic | 2014-05-08 | 2.1 LOW | N/A |
NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/xmosaic.pid file for every possible PID. | |||||
CVE-2014-2713 | 1 Juniper | 1 Junos | 2014-05-04 | 5.0 MEDIUM | N/A |
Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, allows remote attackers to cause a denial of service (PFE restart) via a crafted IP packet to certain (1) Trio or (2) Cassis-based Packet Forwarding Engine (PFE) modules. | |||||
CVE-2014-2601 | 1 Hp | 1 Integrated Lights-out 2 Firmware | 2014-05-04 | 7.8 HIGH | N/A |
The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool. | |||||
CVE-2012-2934 | 1 Xen | 1 Xen | 2014-05-04 | 1.9 LOW | N/A |
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217. | |||||
CVE-2010-1919 | 1 Emc | 1 Avamar | 2014-05-04 | 7.1 HIGH | N/A |
Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP. | |||||
CVE-2014-1988 | 1 Cybozu | 1 Garoon | 2014-05-02 | 3.5 LOW | N/A |
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors. | |||||
CVE-2013-7273 | 1 Gnome | 1 Gnome Display Manager | 2014-04-30 | 2.1 LOW | N/A |
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name. | |||||
CVE-2014-2449 | 1 Oracle | 1 Peoplesoft Products | 2014-04-24 | 4.0 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security. | |||||
CVE-2012-5422 | 1 Cisco | 5 As5400 Universal Gateway, As5400hpx Universal Gateway, As5400xm Media Gateway and 2 more | 2014-04-23 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors, aka Bug ID CSCub61009. | |||||
CVE-2012-5014 | 1 Cisco | 1 Ios | 2014-04-23 | 6.3 MEDIUM | N/A |
Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bug ID CSCto87436. | |||||
CVE-2012-4638 | 1 Cisco | 1 Ios | 2014-04-23 | 4.9 MEDIUM | N/A |
Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318. |