Skip to content
OpenAdvisories

Archive

5 April 2014

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as u…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used i…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used i…

  • Unscored —

    The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly …

  • Unscored —
    CVE-2014-2730 EPSS 11%

    The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly det…

  • Unscored —

    Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Op…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject …

  • Unscored —

    Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of ser…

  • Unscored —

    Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to r…