Skip to content
OpenAdvisories

Archive

February 2014

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.3

    ICONICS GENESIS32 Exposed Dangerous Method or Function

    An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.

  • Critical 9.1

    Python Swift client is vulnerable to Missing SSL Certificate Check

    The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • Critical —

    Heap Based Buffer Overflow in libyaml

    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, whic…