Skip to content
OpenAdvisories

Archive

22 February 2014

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, wh…

  • Unscored —

    The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows re…

  • Unscored —

    The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attacker…

  • Unscored —

    The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6,…

  • Unscored —

    IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, wh…

  • Unscored —

    The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-th…

  • Unscored —

    The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 …

  • Unscored —

    The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows rem…

  • Unscored —

    The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attacke…

  • Unscored —

    The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote att…

  • Unscored —

    Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute a…

  • Unscored —

    Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI c…

  • Unscored —

    Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6,…

  • Unscored —

    The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a sessio…

  • Unscored —

    Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (An…

  • Unscored —

    Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) an…

  • Unscored —

    Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject a…

  • Unscored —

    Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier all…

  • Unscored —

    The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attac…

  • Unscored —

    The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust r…

  • Unscored —
    CVE-2014-1266 Public exploit

    The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature i…