Skip to content
OpenAdvisories

Archive

11 March 2014

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2013-4467 Public exploit EPSS 31%

    Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-4…

  • Unscored —
    CVE-2013-3928 Public exploit EPSS 37%

    Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote att…

  • Unscored —
    CVE-2013-3961 Public exploit

    SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to ex…

  • Unscored —
    CVE-2013-2289 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inje…

  • Unscored —
    CVE-2013-2754 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hi…

  • Unscored —
    CVE-2013-5639 Public exploit

    Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitra…

  • Unscored —
    CVE-2012-6290 Public exploit

    SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL …

  • Unscored —
    CVE-2014-2321 Public exploit Scanner template EPSS 59%

    web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd…

  • Unscored —
    CVE-2013-6031 Public exploit

    The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remo…

  • Unscored —
    CVE-2014-2299 Public exploit EPSS 47%

    Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.1…