CVEs published February 28, 2014
20 CVEs were published on February 28, 2014: 0 critical, 0 high.
- Published
- 20
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- org.jenkins-ci.main:jenkins-core
- 2
- Schneider Electric Floating License Manager
- 1
- Schneider Electric TLXCDSUOFS33 · Schneider Electric TLX… +3
- 1
Medium, low and unrated 20
- CVE-2011-3634methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which
- CVE-2014-1912Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x befor
- CVE-2014-2262Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote atta
- CVE-2014-2263The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, a
- CVE-2013-2498SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote att
- CVE-2014-1456Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitr
- CVE-2014-1695Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3
- CVE-2014-1888Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arb
- CVE-2014-2059Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 org.jenkins-ci.main:jenkins-core
- CVE-2014-2067Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenorg.jenkins-ci.main:jenkins-core
- CVE-2014-2080Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to
- CVE-2014-1878Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6,
- CVE-2014-0069The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that c
- CVE-2014-0759Schneider Electric Floating License Manager Unquoted Search Path or ElementSchneider Electric Floating License Manager
- CVE-2014-0774Schneider Electric OFS Stack Buffer OverflowSchneider Electric TLXCDSUOFS33 · Schneider Electric TLX… +3
- CVE-2014-0874Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject a
- CVE-2014-1690The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information fr
- CVE-2014-1874The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a
- CVE-2014-2038The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operati
- CVE-2014-2039arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack