Skip to content
OpenAdvisories

Archive

8 January 2014

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages w…

  • Unscored —

    Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted R…

  • Unscored —

    The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly han…

  • Unscored —

    The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirement…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote atta…

  • Unscored —

    The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers …

  • Unscored —

    Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface…

  • Unscored —

    The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers …

  • Unscored —

    The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value w…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress al…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote att…

  • Unscored —
    CVE-2013-7280 Public exploit

    Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of servi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.98…

  • Unscored —
    CVE-2013-7274 Public exploit

    Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attacker…

  • Unscored —
    CVE-2013-7097 Public exploit

    Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2013-7278 Public exploit

    SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2014-0620 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote at…

  • Unscored —
    CVE-2014-0621 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow re…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote at…