Skip to content
OpenAdvisories

Archive

March 2014

Vulnerabilities first published in this month (UTC), newest first.

← February 2014 2014 / March April 2014 →
  1. 1 
  2. 217
  3. 325
  4. 44
  5. 524
  6. 629
  7. 718
  8. 8 
  9. 9 
  10. 109
  11. 1142
  12. 1230
  13. 135
  14. 1487
  15. 15 
  16. 1633
  17. 17 
  18. 1823
  19. 1930
  20. 2026
  21. 217
  22. 2217
  23. 2310
  24. 249
  25. 2520
  26. 2611
  27. 2720
  28. 2828
  29. 298
  30. 308
  31. 31 
All Critical High Medium Low Exploited only Public exploit

85 results · Clear filters · Feed

  • Unscored —
    CVE-2013-3728 Public exploit

    Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissi…

  • Unscored —
    CVE-2013-3727 Public exploit

    SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL c…

  • Unscored —
    CVE-2014-2043 Public exploit

    SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows r…

  • Unscored —
    CVE-2013-1636 Public exploit

    Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in…

  • Unscored —
    CVE-2013-5117 Public exploit

    SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetN…

  • Unscored —
    CVE-2014-0307 Public exploit EPSS 69%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2013-4467 Public exploit EPSS 31%

    Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-4…

  • Unscored —
    CVE-2013-3928 Public exploit EPSS 37%

    Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote att…

  • Unscored —
    CVE-2013-3961 Public exploit

    SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to ex…

  • Unscored —
    CVE-2013-2289 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inje…

  • Unscored —
    CVE-2013-2754 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hi…

  • Unscored —
    CVE-2013-5639 Public exploit

    Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitra…

  • Unscored —
    CVE-2012-6290 Public exploit

    SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL …

  • Unscored —
    CVE-2014-2321 Public exploit Scanner template EPSS 59%

    web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd…

  • Unscored —
    CVE-2013-6031 Public exploit

    The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remo…

  • Unscored —
    CVE-2014-2299 Public exploit EPSS 47%

    Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.1…

    wireshark wireshark Debian Ubuntu
  • Medium —
    CVE-2014-0094 Public exploit EPSS 99%

    ClassLoader manipulation in Apache Struts

    The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-6233 Public exploit

    Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary we…

  • Unscored —
    CVE-2013-6232 Public exploit

    Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary we…

  • Unscored —
    CVE-2014-1944 Public exploit

    Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-1945 Public exploit

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2014-2317 Public exploit

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2014-2314 Public exploit EPSS 26%

    Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers …

  • Unscored —
    CVE-2014-1906 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5…

  • Unscored —
    CVE-2014-1907 Public exploit EPSS 11%

    Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wo…

  • Unscored —
    CVE-2013-6719 Public exploit EPSS 27%

    delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP…

  • Unscored —
    CVE-2013-6720 Public exploit EPSS 29%

    Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf C…

  • Unscored —
    CVE-2014-0683 Public exploit EPSS 11%

    The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmwar…

  • Unscored —
    CVE-2014-2238 Public exploit EPSS 11%

    SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 …

  • Unscored —
    CVE-2014-2206 Public exploit EPSS 61%

    Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote atta…

  • Unscored —
    CVE-2013-6668 Public exploit

    Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, all…

    chromium-browser libv8-3.14 Ubuntu
  • Unscored —
    CVE-2013-1409 Public exploit

    Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2013-4981 Public exploit

    Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and poss…

  • Unscored —
    CVE-2013-4980 Public exploit

    Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and poss…

  • Unscored —
    CVE-2013-4977 Public exploit EPSS 17%

    Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), …

  • Unscored —
    CVE-2014-1684 Public exploit

    The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Play…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-2211 Public exploit

    SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 before 3.3.0 allow…

  • Unscored —
    CVE-2014-2013 Public exploit EPSS 15%

    Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote …

    mupdf Debian
  • Unscored —
    CVE-2013-4710 Public exploit EPSS 43%

    Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly im…

  • Unscored —
    CVE-2012-6636 Public exploit EPSS 39%

    The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote att…

    cordova-ubuntu-3.4 Ubuntu