Skip to content
OpenAdvisories

Archive

18 February 2014

Vulnerabilities first published on this day (UTC), newest first.

← January 2014 2014 / February /18 March 2014 →
  1. 19
  2. 27
  3. 35
  4. 424
  5. 523
  6. 648
  7. 77
  8. 810
  9. 9 
  10. 1019
  11. 1111
  12. 1235
  13. 1316
  14. 1436
  15. 1520
  16. 16 
  17. 1710
  18. 1812
  19. 19 
  20. 2010
  21. 214
  22. 2224
  23. 23 
  24. 2414
  25. 256
  26. 2623
  27. 2749
  28. 2820
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.1
    CVE-2013-6396

    Python Swift client is vulnerable to Missing SSL Certificate Check

    The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

    python-swiftclient python-swiftclient Debian PyPI
  • Unscored —
    CVE-2014-1943

    Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU con…

    file Debian
  • Unscored —
    CVE-2013-7226

    Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause …

  • Unscored —
    CVE-2013-7328

    Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote at…

  • Unscored —
    CVE-2013-7327

    The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote att…

  • Unscored —
    CVE-2014-1861

    The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FIL…

  • Unscored —
    CVE-2014-1903 Public exploit EPSS 52%

    admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12…

  • Unscored —
    CVE-2014-2020

    ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive…

  • Unscored —
    CVE-2014-2019

    The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requi…

  • Unscored —
    CVE-2014-0627

    The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers t…

  • Unscored —
    CVE-2014-0625

    The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before …

  • Unscored —
    CVE-2014-0626

    The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote …