Skip to content
OpenAdvisories

Archive

10 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /10 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2014-0977

    Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before …

  • Unscored —
    CVE-2014-0978

    Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to …

    graphviz Debian
  • Unscored —
    CVE-2013-7288

    Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBull…

  • Unscored —
    CVE-2013-7289

    Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 …

  • Unscored —
    CVE-2013-5010

    The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4…

  • Unscored —
    CVE-2013-5009

    The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoi…

  • Unscored —
    CVE-2013-5011

    Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and…

  • Unscored —
    CVE-2014-0663

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote…

  • Unscored —
    CVE-2014-0664

    The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) v…

  • Unscored —
    CVE-2014-0658

    Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP hea…

  • Unscored —
    CVE-2014-1408

    The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, whic…

  • Unscored —
    CVE-2014-1407

    Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allo…

  • Unscored —
    CVE-2014-1406

    CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 …

  • Unscored —
    CVE-2014-1405

    Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote atta…

  • Unscored —
    CVE-2010-5291

    Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login at…

  • Unscored —
    CVE-2010-5292

    Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users t…

  • Unscored —
    CVE-2013-4460

    Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1.2.15 allows remote aut…

  • Unscored —
    CVE-2014-1236

    Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to h…

    graphviz Debian
  • Unscored —
    CVE-2013-7282 Public exploit

    The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with f…

  • Unscored —
    CVE-2013-6321

    SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Gove…

  • Unscored —
    CVE-2013-6974

    Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote…

  • Unscored —
    CVE-2013-6334

    IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.…

  • Low —
    CVE-2014-1234

    Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor

    The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process.

    paratrooper-newrelic RubyGems
  • Low —
    CVE-2014-1233

    Local API Login Credentials Disclosure in paratrooper-pingdom

    The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process.

    paratrooper-pingdom RubyGems