Skip to content
OpenAdvisories

Archive

4 February 2014

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of a…

  • Unscored —

    SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sens…

  • Unscored —

    Integer overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting a file, allows remote …

  • Unscored —

    Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, a…

  • Unscored —

    Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier a…

  • Unscored —
    CVE-2012-6493 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers…

  • Unscored —
    CVE-2013-3098 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 a…

  • Unscored —
    CVE-2013-3365 Public exploit

    TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in …

  • Unscored —

    Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm,…

  • Unscored —

    SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request Syste…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inj…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attacke…

  • Unscored —
    CVE-2013-7183 Public exploit

    cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) …

  • Unscored —
    CVE-2013-7179 Public exploit

    The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute a…

  • Unscored —

    cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and…

  • Unscored —

    The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn …

  • Unscored —

    The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x b…

  • Unscored —

    IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denia…

  • Unscored —
    CVE-2014-0329 Public exploit

    The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin accoun…

  • Unscored —

    Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privilege…