Skip to content
OpenAdvisories

Archive

7 March 2014

Vulnerabilities first published on this day (UTC), newest first.

← February 2014 2014 / March /7 April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2013-7322

    usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-passw…

    oath-toolkit Debian
  • Unscored —
    CVE-2013-1893

    SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated user…

  • Unscored —
    CVE-2013-1890

    Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject ar…

  • Unscored —
    CVE-2013-4971

    Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote …

  • Unscored —
    CVE-2013-4966

    The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consol…

  • Unscored —
    CVE-2013-6233 Public exploit

    Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary we…

  • Unscored —
    CVE-2013-6232 Public exploit

    Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary we…

  • Unscored —
    CVE-2013-2045

    SQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote authenticated users to ex…

  • Unscored —
    CVE-2013-2046

    SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows rem…

  • Unscored —
    CVE-2013-2270

    Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 a…

  • Unscored —
    CVE-2014-1599

    Multiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote at…

  • Unscored —
    CVE-2014-1944 Public exploit

    Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-1945 Public exploit

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2014-2315

    Multiple cross-site scripting (XSS) vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow re…

  • Unscored —
    CVE-2014-2316

    SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remo…

  • Unscored —
    CVE-2014-2317 Public exploit

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2014-2313

    Directory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows remote attackers to cre…

  • Unscored —
    CVE-2014-2314 Public exploit EPSS 26%

    Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers …