Skip to content
OpenAdvisories

Archive

15 February 2014

Vulnerabilities first published on this day (UTC), newest first.

← January 2014 2014 / February /15 March 2014 →
  1. 19
  2. 27
  3. 35
  4. 424
  5. 523
  6. 648
  7. 77
  8. 810
  9. 9 
  10. 1019
  11. 1111
  12. 1235
  13. 1316
  14. 1436
  15. 1520
  16. 16 
  17. 1710
  18. 1812
  19. 19 
  20. 2010
  21. 214
  22. 2224
  23. 23 
  24. 2414
  25. 256
  26. 2623
  27. 2749
  28. 2820
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2011-1835

    The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not prop…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1832

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1836

    utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, whi…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1831

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1837

    The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to ove…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1834

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error condit…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-3589

    The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2…

  • Unscored —
    CVE-2011-3590

    The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2…

  • Unscored —
    CVE-2011-3588

    The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.10…

  • Unscored —
    CVE-2011-2909

    The do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel before 3.1 allows local users…

  • Unscored —
    CVE-2011-2500

    The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to…

    nfs-utils Debian
  • Unscored —
    CVE-2013-4737

    The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr…

  • Unscored —
    CVE-2013-6167 Public exploit

    Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set…

  • Unscored —
    CVE-2013-6166 Public exploit

    Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set re…

  • Unscored —
    CVE-2012-1171

    The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and re…

  • Unscored —
    CVE-2012-1088

    iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by …

  • Unscored —
    CVE-2012-6108

    HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp…

  • Unscored —
    CVE-2012-6638

    The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to…

    linux Debian
  • Unscored —
    CVE-2012-2663

    extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow …

    iptables iptables Debian Ubuntu
  • Unscored —
    CVE-2013-0346

    Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to…