Skip to content
OpenAdvisories

Archive

22 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /22 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2014-0806

    The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for…

  • Critical 9.1
    CVE-2014-0808

    EC-CUBE vulnerable to authorization bypass

    Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' informati…

    EC-CUBE S‑cubism EC-CUBE EC-Orange Packagist
  • Unscored —
    CVE-2014-0661

    The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(4…

  • Unscored —
    CVE-2014-0807

    data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, al…

  • Unscored —
    CVE-2014-0677

    The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2014-0676

    Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka B…

  • Unscored —
    CVE-2014-0662

    The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a den…

  • Unscored —
    CVE-2014-0660

    Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-…

  • Unscored —
    CVE-2013-7305

    fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset pa…

  • Unscored —
    CVE-2013-7304

    Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for cl…

  • Unscored —
    CVE-2013-2750 Public exploit

    Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in e107 before 1.0.3 allow…

  • Unscored —
    CVE-2014-1637 Public exploit

    Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which …

  • Unscored —
    CVE-2014-1636 Public exploit

    Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to ex…

  • Unscored —
    CVE-2013-6343 Public exploit

    Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allo…

  • Unscored —
    CVE-2013-6746

    Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2…

  • Unscored —
    CVE-2014-0670

    Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers t…

  • Unscored —
    CVE-2014-0672

    The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows re…

  • Unscored —
    CVE-2014-0669

    The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series …

  • Unscored —
    CVE-2014-0671

    Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and co…