Skip to content
OpenAdvisories

Archive

3 March 2014

Vulnerabilities first published on this day (UTC), newest first.

← February 2014 2014 / March /3 April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2014-2040

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) callback_multicheck, (2) callback_radio, and (3) callbac…

  • Unscored —
    CVE-2011-4696

    Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary…

  • Unscored —
    CVE-2013-1409 Public exploit

    Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2013-4981 Public exploit

    Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and poss…

  • Unscored —
    CVE-2013-4980 Public exploit

    Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and poss…

  • Unscored —
    CVE-2013-4977 Public exploit EPSS 17%

    Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), …

  • Unscored —
    CVE-2013-6493

    The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to…

    icedtea-web Debian
  • Unscored —
    CVE-2013-3259

    Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2013-3487

    Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 f…

  • Unscored —
    CVE-2013-3260

    Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2014-1840

    Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2014-1684 Public exploit

    The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Play…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-2211 Public exploit

    SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 before 3.3.0 allow…

  • Unscored —
    CVE-2014-2013 Public exploit EPSS 15%

    Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote …

    mupdf Debian
  • Unscored —
    CVE-2013-4710 Public exploit EPSS 43%

    Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly im…

  • Unscored —
    CVE-2012-6637

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expr…

  • Unscored —
    CVE-2012-6636 Public exploit EPSS 39%

    The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote att…

    cordova-ubuntu-3.4 Ubuntu
  • Unscored —
    CVE-2014-1939

    java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with cre…

  • Unscored —
    CVE-2014-1887

    The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers …

  • Unscored —
    CVE-2014-1881 EPSS 11%

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-…

  • Unscored —
    CVE-2014-1886

    The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to …

  • Unscored —
    CVE-2014-1885

    The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execu…

  • Unscored —
    CVE-2014-1882 EPSS 12%

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-…

  • Unscored —
    CVE-2014-1884

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict…

  • Unscored —
    CVE-2014-1883

    Adobe PhoneGap before 2.6.0 on Android uses the shouldOverrideUrlLoading callback instead of the proper shouldIntercept…