Skip to content
OpenAdvisories

Archive

20 February 2014

Vulnerabilities first published on this day (UTC), newest first.

← January 2014 2014 / February /20 March 2014 →
  1. 19
  2. 27
  3. 35
  4. 424
  5. 523
  6. 648
  7. 77
  8. 810
  9. 9 
  10. 1019
  11. 1111
  12. 1235
  13. 1316
  14. 1436
  15. 1520
  16. 16 
  17. 1710
  18. 1812
  19. 19 
  20. 2010
  21. 214
  22. 2224
  23. 23 
  24. 2414
  25. 256
  26. 2623
  27. 2749
  28. 2820
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2013-4420

    Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.…

    libtar libtar Debian Azure Linux
  • Medium —
    CVE-2014-0082

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consump…

    rails actionpack Debian RubyGems
  • Medium —
    CVE-2014-0081

    Rails vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (…

    rails actionpack rails Debian RubyGems
  • Medium —
    CVE-2014-0080

    Array data injection vulnerability in activerecord

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via…

    activerecord RubyGems
  • Unscored —
    CVE-2014-0733

    The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier…

  • Unscored —
    CVE-2014-1879

    Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to …

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2014-0735

    Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications M…

  • Unscored —
    CVE-2014-0734

    SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communic…

  • Unscored —
    CVE-2014-0736

    Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco U…

  • Unscored —
    CVE-2014-0732

    The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and e…