Skip to content
OpenAdvisories

Archive

26 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /26 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2013-7141

    Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2013-7143

    Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2013-7299

    framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information…

    tntnet Debian
  • Unscored —
    CVE-2013-7298

    query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and …

    cxxtools Debian
  • Unscored —
    CVE-2013-7142

    Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2013-7140

    XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows …

  • Unscored —
    CVE-2013-4304

    The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a v…

  • Unscored —
    CVE-2013-6466

    Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daem…

  • Unscored —
    CVE-2013-6467

    Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon…

  • Unscored —
    CVE-2014-0794 Public exploit

    SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenti…

  • Unscored —
    CVE-2014-1664 Public exploit

    The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which …

  • Unscored —
    CVE-2014-1607

    Cross-site scripting (XSS) vulnerability in the EventCalendar module for Drupal 7.14 allows remote attackers to inject …

    Web / CMS
  • Medium —
    CVE-2013-6429 EPSS 91%

    Cross-Site Request Forgery in Spring Framework

    The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attack…

    libspring-java org.springframework:spring-web Debian Maven
  • Unscored —
    CVE-2014-0022

    The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value o…

    yum Ubuntu
  • Unscored —
    CVE-2014-1642

    The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, f…

    xen Debian
  • Unscored —
    CVE-2014-1666

    The do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to t…

    xen Debian
  • Unscored —
    CVE-2013-7247 Public exploit

    cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allow…

  • Unscored —
    CVE-2013-7296

    The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier with…

  • Unscored —
    CVE-2013-7248 Public exploit

    Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password f…

  • Unscored —
    CVE-2013-7137 Public exploit EPSS 16%

    The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication an…

  • Unscored —
    CVE-2013-6853

    Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Ma…

  • Unscored —
    CVE-2013-6891

    lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary fi…

    cups Debian
  • Unscored —
    CVE-2013-5364

    Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Li…

  • Unscored —
    CVE-2014-0027

    The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a …

    flite Debian
  • Unscored —
    CVE-2014-1671 Public exploit

    Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remo…

  • Unscored —
    CVE-2014-1673

    Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via…

  • Unscored —
    CVE-2014-1672

    Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing tabl…

  • Unscored —
    CVE-2014-1626

    XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, pe…

    libmarc-xml-perl Debian