Skip to content
OpenAdvisories

Archive

5 February 2014

Vulnerabilities first published on this day (UTC), newest first.

← January 2014 2014 / February /5 March 2014 →
  1. 19
  2. 27
  3. 35
  4. 424
  5. 523
  6. 648
  7. 77
  8. 810
  9. 9 
  10. 1019
  11. 1111
  12. 1235
  13. 1316
  14. 1436
  15. 1520
  16. 16 
  17. 1710
  18. 1812
  19. 19 
  20. 2010
  21. 214
  22. 2224
  23. 23 
  24. 2414
  25. 256
  26. 2623
  27. 2749
  28. 2820
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2011-4613 Public exploit

    The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user…

    xorg Debian
  • Unscored —
    CVE-2011-3377

    The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the …

    icedtea-web Debian
  • Unscored —
    CVE-2013-2074

    kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted requ…

  • Unscored —
    CVE-2014-1439

    The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) bef…

  • Unscored —
    CVE-2011-2919

    Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote at…

  • Medium —
    CVE-2013-1880

    Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet

    Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a differ…

    org.apache.activemq:activemq-core Maven
  • Unscored —
    CVE-2013-4449 EPSS 11%

    The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attacke…

    openldap openldap Debian Ubuntu
  • Unscored —
    CVE-2014-1833

    Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via…

    devscripts devscripts Debian Ubuntu
  • Medium 4.9
    CVE-2012-0059

    Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages

    A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server …

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Medium 5.4
    CVE-2011-3344

    Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form

    A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions wi…

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Medium 5.4
    CVE-2011-2927

    Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

    A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HTML into web pages viewed by other users. The flaw is triggered through vectors r…

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Medium 5.5
    CVE-2011-2920

    Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

    A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. Thi…

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Medium 6.5
    CVE-2011-1594

    Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

    A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phis…

    Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Red Hat Network Satellite Server v 5.4 Linux
  • Unscored —
    CVE-2013-1466 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2013-1852 Public exploit

    SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote a…

  • Unscored —
    CVE-2013-1470

    Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.…

  • Unscored —
    CVE-2013-1967

    Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud…

  • Unscored —
    CVE-2013-4978 Public exploit

    Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to …

  • Unscored —
    CVE-2013-3639 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2013-2691

    Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2014-1403

    Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitr…

  • Medium 6.3
    CVE-2014-0755

    Rockwell RSLogix 5000 Insufficiently Protected Credentials

    Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

    Rockwell Automation RSLogix 5000 software ICS / OT
  • High 8.8
    CVE-2014-0497 Exploited Public exploit EPSS 100%

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…

    KEV Sep 17, 2024