Skip to content
OpenAdvisories

Archive

January 2014

Vulnerabilities first published in this month (UTC), newest first.

← December 2013 2014 / January February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

558 results · Feed

  • Unscored —
    CVE-2014-0001

    Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a …

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2013-6143

    The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote atta…

  • Unscored —
    CVE-2013-4383

    Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote…

  • Unscored —
    CVE-2013-4979

    Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary co…

  • Medium —
    CVE-2013-6235

    Improper Neutralization of Input During Web Page Generation in JAMon

    Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parame…

    com.jamonapi:jamon Maven
  • Unscored —
    CVE-2014-1204 Public exploit

    SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated use…

  • Unscored —
    CVE-2013-6727

    The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java pl…

  • High 7.1
    CVE-2014-0757

    Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference

    Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.

    Smart Software Solutions (3S) CoDeSys Runtime Toolkit
  • Unscored —
    CVE-2014-1610 Public exploit EPSS 43%

    MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support i…

    mediawiki Debian
  • Unscored —
    CVE-2013-7303

    Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/fo…

    spip Debian
  • Unscored —
    CVE-2014-1837

    Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! all…

  • Unscored —
    CVE-2013-7246 Public exploit EPSS 11%

    Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allow…

  • Unscored —
    CVE-2014-0793 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for …

  • Unscored —
    CVE-2014-1612

    Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gat…

  • Unscored —
    CVE-2014-1611

    Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote a…

  • Unscored —
    CVE-2013-0177 Public exploit EPSS 21%

    Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business…

  • Unscored —
    CVE-2013-1376

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attacke…

  • Unscored —
    CVE-2013-3084

    Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to injec…

  • Unscored —
    CVE-2013-3090

    Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2013-3087

    Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-3000

    Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM…

  • Unscored —
    CVE-2014-0838

    The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2014-0836

    Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2014-0835

    Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers…

  • Unscored —
    CVE-2014-0837

    The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2013-7318

    Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers…

  • Unscored —
    CVE-2013-4898 Public exploit

    Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine…

  • Unscored —
    CVE-2013-4661

    CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control (RBAC) restrict…

  • Medium —
    CVE-2013-4662

    CiviCRM SQL injection vulnerability via Quick Search API

    The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

    civicrm/civicrm-core Packagist
  • Unscored —
    CVE-2013-4888 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject a…

  • Unscored —
    CVE-2013-4889 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote atta…

  • Unscored —
    CVE-2013-4887

    SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2013-6141

    Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors rela…

  • Unscored —
    CVE-2013-2747

    The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users…

  • Unscored —
    CVE-2013-5092 Public exploit

    Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attack…

  • Unscored —
    CVE-2013-5005

    Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier…

  • Unscored —
    CVE-2012-6086

    libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not prop…

    zabbix Debian
  • Unscored —
    CVE-2014-1683 Public exploit EPSS 31%

    The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r24…

  • Unscored —
    CVE-2014-0681

    Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote …

  • Unscored —
    CVE-2014-0682

    Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary mee…