Skip to content
OpenAdvisories

Archive

25 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /25 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 6.8
    CVE-2014-0751

    GE Proficy HMI/SCADA Path Traversal

    The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as…

    GE Proficy HMI/SCADA–CIMPLICITY Proficy Process Systems with CIMPLICITY
  • Unscored —
    CVE-2014-0678

    The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote…

  • High 7.5
    CVE-2014-0750 Public exploit EPSS 70%

    GE Proficy HMI/SCADA Path Traversal

    Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via …

    GE Proficy HMI/SCADA–CIMPLICITY Proficy Process Systems with CIMPLICITY
  • Unscored —
    CVE-2014-0673

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome ca…

  • Unscored —
    CVE-2014-1670 EPSS 14%

    The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vect…

  • High —
    CVE-2014-1202 Public exploit

    Code injection via property expansion in SoapUI

    The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

    com.smartbear.soapui:soapui Maven