CVEs published July 24, 2014
22 CVEs were published on July 24, 2014: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- OleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…
- 3
- Omron NS15 · Omron NS12 +3
- 2
Medium, low and unrated 22
- CVE-2014-0607Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to exe
- CVE-2014-1419Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecif
- CVE-2014-2360OleumTech WIO Family Improper Input ValidationOleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…
- CVE-2014-2361OleumTech WIO Family Key Management ErrorsOleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…
- CVE-2014-2362OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number GeneratorOleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…
- CVE-2014-2369Omron NS Series HMI Cross-Site Request ForgeryOmron NS15 · Omron NS12 +3
- CVE-2014-2370Omron NS Series HMI Improper Neutralization of Input During Web Page GenerationOmron NS15 · Omron NS12 +3
- CVE-2014-2717Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow r
- CVE-2014-2968Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 1
- CVE-2014-2971Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated user
- CVE-2014-3110Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb
- CVE-2014-3322Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers
- CVE-2014-4682The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive
- CVE-2014-4683The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain p
- CVE-2014-4684The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privi
- CVE-2014-4685Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object
- CVE-2014-4686The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption k
- CVE-2014-4736SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @
- CVE-2014-4910Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwr
- CVE-2014-4927Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote atta
- CVE-2014-5015bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows r
- CVE-2014-5024Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attacker