Skip to content
OpenAdvisories

Archive

28 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /28 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2013-5094 Public exploit

    Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to in…

  • Unscored —
    CVE-2013-6649

    Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, a…

  • Unscored —
    CVE-2013-6650

    The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrom…

    chromium-browser libv8-3.14 Ubuntu
  • Unscored —
    CVE-2014-1681

    Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, rela…

  • Unscored —
    CVE-2013-7135

    The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows…

    libproc-daemon-perl Debian
  • Unscored —
    CVE-2013-6838

    An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0…

  • Unscored —
    CVE-2012-5192 Public exploit EPSS 52%

    Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to re…

  • Unscored —
    CVE-2014-0647

    The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library…

  • Unscored —
    CVE-2014-1639

    syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends …

    syncevolution Debian
  • Low —
    CVE-2014-1624

    pyxdg Arbitrary File Overwrite via Race Condition

    Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to…

    pyxdg pyxdg pyxdg Debian Ubuntu PyPI
  • Low —
    CVE-2014-1604

    RPLY Predictable Tmpfile Names Allows Cache Spoofing

    The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.

    python-rply rply Debian PyPI
  • Unscored —
    CVE-2014-1638

    (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe tempora…

    localepurge Debian
  • Unscored —
    CVE-2014-1640

    axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original …

    axiom Debian