Skip to content
OpenAdvisories

Archive

28 March 2014

Vulnerabilities first published on this day (UTC), newest first.

← February 2014 2014 / March /28 April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2014-0981 Public exploit

    VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x be…

  • Unscored —
    CVE-2014-0983 Public exploit

    Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/…

  • Unscored —
    CVE-2014-1982 Public exploit

    The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH fir…

  • Unscored —
    CVE-2013-0662 Public exploit EPSS 22%

    Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allo…

  • Unscored —
    CVE-2014-0632

    Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to…

  • Unscored —
    CVE-2014-0635

    Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web s…

  • Unscored —
    CVE-2014-0633

    The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might…

  • Unscored —
    CVE-2014-0634

    EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecif…

  • High 7.5
    CVE-2014-0050 Public exploit EPSS 83%

    Commons FileUpload Denial of service vulnerability

    MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a…

    org.apache.tomcat:tomcat commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven
  • Unscored —
    CVE-2014-2590

    The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS…

  • Unscored —
    CVE-2014-0065

    Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, an…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0062

    Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x befo…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0066

    The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0061

    The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x befo…

    postgresql-9.3 postgresql-9.1 postgresql-plsh Debian Ubuntu
  • Unscored —
    CVE-2014-0063

    Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x befo…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0067

    The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Medium —
    CVE-2014-0086

    JBoss RichFaces Improper Input Validation vulnerability

    The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.

    org.richfaces:richfaces Maven
  • Unscored —
    CVE-2014-0064

    Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-0060

    PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not…

    postgresql-9.3 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-2669

    Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x …

    postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2014-2668 Public exploit EPSS 23%

    Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via …

  • Unscored —
    CVE-2013-0734

    Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote…

  • Unscored —
    CVE-2013-0807 Public exploit

    Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CM…

  • Unscored —
    CVE-2013-2694

    Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to red…

  • Unscored —
    CVE-2013-2695

    Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows rem…

  • Unscored —
    CVE-2014-0133

    Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remot…

    nginx Debian
  • Unscored —
    CVE-2014-2525

    Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependen…

    libyaml-libyaml-perl libyaml Debian
  • Unscored —
    CVE-2014-2599

    The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local …

    xen xen Debian Ubuntu