cve.nowby Sazabi

CVEs published February 27, 2014

49 CVEs were published on February 27, 2014: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 49
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 49
Now in CISA KEV: 0
Fix available: 1

Most affected products

ember-source: 1

Medium, low and unrated 49

CVE-2014-0333The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a…UnratedFeb 27, 2014
CVE-2014-0679Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated…UnratedFeb 27, 2014
CVE-2014-0858IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrictions and conduct…UnratedFeb 27, 2014
CVE-2014-2103Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via…UnratedFeb 27, 2014
CVE-2014-0046Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before…ember-sourceUnratedFix availableFeb 27, 2014
CVE-2014-1223Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162…UnratedFeb 27, 2014
CVE-2014-1597SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to…UnratedFeb 27, 2014
CVE-2014-1854SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through…UnratedFeb 27, 2014
CVE-2014-2035Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP)…UnratedFeb 27, 2014
CVE-2014-2231Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web…UnratedFeb 27, 2014
CVE-2014-2075TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication…UnratedFeb 27, 2014
CVE-2014-0740Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration…UnratedFeb 27, 2014
CVE-2014-0741The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications…UnratedFeb 27, 2014
CVE-2014-0742The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager…UnratedFeb 27, 2014
CVE-2014-0743The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows…UnratedFeb 27, 2014
CVE-2014-0745Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified…UnratedFeb 27, 2014
CVE-2014-0746The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain…UnratedFeb 27, 2014
CVE-2014-0747The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and…UnratedFeb 27, 2014
CVE-2014-0816Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors.UnratedFeb 27, 2014
CVE-2014-0817Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to…UnratedFeb 27, 2014
CVE-2014-0820Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote…UnratedFeb 27, 2014
CVE-2014-0821SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated…UnratedFeb 27, 2014
CVE-2014-1243Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause…UnratedFeb 27, 2014
CVE-2014-1244Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service…UnratedFeb 27, 2014
CVE-2014-1245Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service…UnratedFeb 27, 2014

Show all 49 entriesShow fewer entries