Total
22706 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2014-1706 | 1 Google | 1 Chrome Os | 2014-03-25 | 7.5 HIGH | N/A |
crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors. | |||||
CVE-2014-1708 | 1 Google | 1 Chrome Os | 2014-03-25 | 10.0 HIGH | N/A |
The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2011-5274 | 1 Gplhost | 1 Domain Technologie Control | 2014-03-24 | 7.5 HIGH | N/A |
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/. | |||||
CVE-2013-7344 | 1 Owncloud | 1 Owncloud | 2014-03-24 | 6.5 MEDIUM | N/A |
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions. | |||||
CVE-2013-0303 | 1 Owncloud | 1 Owncloud | 2014-03-24 | 6.5 MEDIUM | N/A |
Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344. | |||||
CVE-2014-2292 | 1 Juniper | 1 Ive Os | 2014-03-17 | 7.2 HIGH | N/A |
Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors. | |||||
CVE-2013-0381 | 1 Oracle | 1 E-business Suite | 2014-03-15 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Application Framework. | |||||
CVE-2013-0364 | 1 Oracle | 2 Database Lite, Database Mobile\/lite Server | 2014-03-15 | 7.8 HIGH | N/A |
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0363. | |||||
CVE-2013-0366 | 1 Oracle | 1 Database Mobile\/lite Server | 2014-03-15 | 10.0 HIGH | N/A |
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0361. | |||||
CVE-2013-0363 | 1 Oracle | 1 Database Mobile\/lite Server | 2014-03-15 | 7.8 HIGH | N/A |
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0364. | |||||
CVE-2013-0361 | 1 Oracle | 2 Database Lite, Database Mobile\/lite Server | 2014-03-15 | 10.0 HIGH | N/A |
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0366. | |||||
CVE-2013-0397 | 1 Oracle | 1 E-business Suite | 2014-03-15 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics. | |||||
CVE-2013-0354 | 1 Oracle | 2 Enterprise Manager Database Control, Enterprise Manager Grid Control | 2014-03-15 | 4.3 MEDIUM | N/A |
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework. | |||||
CVE-2012-3190 | 1 Oracle | 1 E-business Suite | 2014-03-15 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity, related to UWQ Server Issues. | |||||
CVE-2013-4189 | 1 Plone | 1 Plone | 2014-03-11 | 6.5 MEDIUM | N/A |
Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors. | |||||
CVE-2013-6941 | 1 Citrix | 1 Netscaler Application Delivery Controller Firmware | 2014-03-11 | 10.0 HIGH | N/A |
Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors. | |||||
CVE-2013-6938 | 1 Citrix | 1 Netscaler Application Delivery Controller Firmware | 2014-03-11 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to the "Virtual Machine Daemon." | |||||
CVE-2013-6939 | 1 Citrix | 1 Netscaler Application Delivery Controller Firmware | 2014-03-11 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication." | |||||
CVE-2012-6612 | 1 Apache | 1 Solr | 2014-03-07 | 7.5 HIGH | N/A |
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407. | |||||
CVE-2011-3944 | 1 Ffmpeg | 1 Ffmpeg | 2014-03-07 | 6.8 MEDIUM | N/A |
The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data. |