Skip to content
OpenAdvisories

Archive

6 March 2014

Vulnerabilities first published on this day (UTC), newest first.

← February 2014 2014 / March /6 April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2014-0092 EPSS 30%

    lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when veri…

    gnutls28 gnutls26 Debian Ubuntu
  • Unscored —
    CVE-2014-1959

    lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate C…

    gnutls28 gnutls26 Debian Ubuntu
  • Unscored —
    CVE-2009-5138

    GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificat…

  • Unscored —
    CVE-2011-3153

    dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink att…

    lightdm Debian
  • Medium —
    CVE-2013-6437

    OpenStack Nova DoS through ephemeral disk backing files

    The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the…

    nova nova Debian PyPI
  • Unscored —
    CVE-2012-6619

    The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users t…

  • Unscored —
    CVE-2014-1906 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5…

  • Unscored —
    CVE-2014-1907 Public exploit EPSS 11%

    Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wo…

  • Unscored —
    CVE-2013-6315

    IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 …

  • Unscored —
    CVE-2013-6201

    Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows…

  • Unscored —
    CVE-2013-6719 Public exploit EPSS 27%

    delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP…

  • Unscored —
    CVE-2013-6304

    Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow…

  • Unscored —
    CVE-2013-6314

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterp…

  • Unscored —
    CVE-2013-6720 Public exploit EPSS 29%

    Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf C…

  • Unscored —
    CVE-2013-3706

    Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows …

  • Unscored —
    CVE-2014-0629

    EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between…

  • Unscored —
    CVE-2014-0630

    EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitr…

  • Unscored —
    CVE-2014-0701

    Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly de…

  • Unscored —
    CVE-2014-0706

    Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers …

  • Unscored —
    CVE-2014-0705

    The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.…

  • Unscored —
    CVE-2014-0890

    The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.co…

  • Unscored —
    CVE-2014-0624

    EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authentica…

  • Unscored —
    CVE-2014-0683 Public exploit EPSS 11%

    The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmwar…

  • Unscored —
    CVE-2014-0336

    Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows rem…

  • Unscored —
    CVE-2014-0703

    Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition …

  • Unscored —
    CVE-2014-0707

    Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial…

  • Unscored —
    CVE-2014-0704

    The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, a…

  • Unscored —
    CVE-2014-0335

    Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow …

  • Unscored —
    CVE-2014-1911

    The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image d…