Skip to content
OpenAdvisories

Archive

9 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /9 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2013-7283

    Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has…

  • Unscored —
    CVE-2013-7138

    Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and…

  • Unscored —
    CVE-2013-7139 Public exploit

    SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows re…

  • Unscored —
    CVE-2013-6462 EPSS 10%

    Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 a…

    libxfont Debian
  • Unscored —
    CVE-2013-6923 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.133…

  • Unscored —
    CVE-2013-7174

    Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2013-6955 Public exploit EPSS 85%

    webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before…

  • High 7.5
    CVE-2014-0752

    Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere

    The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

    Ecava IntegraXor
  • Unscored —
    CVE-2013-4353 EPSS 12%

    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial …

    openssl Debian
  • Unscored —
    CVE-2013-6997

    Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and earlier allow remote attack…

  • Unscored —
    CVE-2013-5357

    Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2013-5359

    Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to e…

  • Unscored —
    CVE-2013-5349

    Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2013-5358

    Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a craft…