CVEs published February 5, 2014
23 CVEs were published on February 5, 2014: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 23
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- Red Hat Network Satellite Server v · Red Hat Enterprise Lin…
- 4
- org.apache.activemq:activemq-core
- 1
- Red Hat Network Proxy v · Red Hat Network Satellite Serv… +1
- 1
- Rockwell Automation RSLogix 5000 software
- 1
High 1
Medium, low and unrated 22
- CVE-2011-3377The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (S
- CVE-2011-4613The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, w
- CVE-2013-2074kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an
- CVE-2014-1439The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x b
- CVE-2011-1594Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterRed Hat Network Satellite Server v · Red Hat Enterprise Lin…
- CVE-2011-2919Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arb
- CVE-2011-2920Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.Red Hat Network Satellite Server v · Red Hat Enterprise Lin…
- CVE-2011-2927Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsRed Hat Network Satellite Server v · Red Hat Enterprise Lin…
- CVE-2011-3344Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password formRed Hat Network Satellite Server v · Red Hat Enterprise Lin…
- CVE-2012-0059Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesRed Hat Network Proxy v · Red Hat Network Satellite Serv… +1
- CVE-2013-1880Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 alloorg.apache.activemq:activemq-core
- CVE-2013-4449The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial
- CVE-2014-1833Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar
- CVE-2013-1466Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HT
- CVE-2013-1470Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 a
- CVE-2013-1852SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute a
- CVE-2013-1967Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before
- CVE-2013-2691Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2
- CVE-2013-3639Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or
- CVE-2013-4978Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary cod
- CVE-2014-1403Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTM
- CVE-2014-0755Rockwell RSLogix 5000 Insufficiently Protected CredentialsRockwell Automation RSLogix 5000 software