Skip to content
OpenAdvisories

Archive

29 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /29 February 2014 →
  1. 11
  2. 222
  3. 32
  4. 49
  5. 54
  6. 69
  7. 712
  8. 820
  9. 914
  10. 1024
  11. 114
  12. 1212
  13. 136
  14. 1412
  15. 15142
  16. 1633
  17. 177
  18. 188
  19. 199
  20. 207
  21. 2138
  22. 2219
  23. 2325
  24. 2423
  25. 256
  26. 2628
  27. 271
  28. 2813
  29. 2923
  30. 3017
  31. 318
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2013-7318

    Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers…

  • Unscored —
    CVE-2013-4898 Public exploit

    Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine…

  • Unscored —
    CVE-2013-4661

    CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control (RBAC) restrict…

  • Medium —
    CVE-2013-4662

    CiviCRM SQL injection vulnerability via Quick Search API

    The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

    civicrm/civicrm-core Packagist
  • Unscored —
    CVE-2013-4888 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject a…

  • Unscored —
    CVE-2013-4889 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote atta…

  • Unscored —
    CVE-2013-4887

    SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2013-6141

    Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors rela…

  • Unscored —
    CVE-2013-2747

    The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users…

  • Unscored —
    CVE-2013-5092 Public exploit

    Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attack…

  • Unscored —
    CVE-2013-5005

    Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier…

  • Unscored —
    CVE-2012-6086

    libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not prop…

    zabbix Debian
  • Unscored —
    CVE-2014-1683 Public exploit EPSS 31%

    The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r24…

  • Unscored —
    CVE-2014-0681

    Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote …

  • Unscored —
    CVE-2014-0682

    Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and (1) join arbitrary mee…

  • Unscored —
    CVE-2014-0680

    Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity…

  • High 7.3
    CVE-2014-1692

    The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protoc…

  • Unscored —
    CVE-2013-6930

    SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2…

  • Unscored —
    CVE-2013-6749

    Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remo…

  • Unscored —
    CVE-2013-6748

    Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remo…

  • Unscored —
    CVE-2013-6931

    SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute…

  • Unscored —
    CVE-2013-2974

    The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote aut…

  • Unscored —
    CVE-2014-0810

    Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5, 2009 before update 6, and…