Skip to content
OpenAdvisories

Archive

24 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /24 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2013-1853

    Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive …

    almanah Debian
  • Unscored —
    CVE-2013-6434

    The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client in…

  • Unscored —
    CVE-2013-6458

    Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) …

    libvirt Debian
  • Unscored —
    CVE-2013-6457

    The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not p…

    libvirt Debian
  • Low —
    CVE-2013-2192

    Improper Authentication in Apache Hadoop

    The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensiti…

    org.apache.hadoop:hadoop-common Maven
  • Unscored —
    CVE-2014-0028

    libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains …

    libvirt Debian
  • Unscored —
    CVE-2014-1475

    The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other use…

  • Unscored —
    CVE-2014-1476

    The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restr…

  • Unscored —
    CVE-2014-1447 Public exploit

    Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to caus…

    libvirt Debian
  • Unscored —
    CVE-2013-1886

    Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possi…

  • Unscored —
    CVE-2013-1885

    Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate Sys…

  • Unscored —
    CVE-2013-7316 Public exploit

    Cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to injec…

  • Unscored —
    CVE-2013-7184 Public exploit

    Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruptio…

  • Unscored —
    CVE-2013-7317

    Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2013-5350

    The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php i…

  • Unscored —
    CVE-2014-0809

    Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for And…

  • Unscored —
    CVE-2014-1252

    Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2013-7175

    Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated us…

  • Unscored —
    CVE-2013-6030

    Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch w…

  • Unscored —
    CVE-2013-5668

    The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the ad…

  • Unscored —
    CVE-2013-5669

    The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which a…

  • Unscored —
    CVE-2013-5667

    The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_useri…

  • Unscored —
    CVE-2014-0674

    Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, whic…