Skip to content
OpenAdvisories

Archive

10 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /10 May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

37 results · Feed

  • Unscored —
    CVE-2014-0908

    The User Attribute implementation in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.2, a…

  • Unscored —
    CVE-2014-0920

    IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenti…

  • Unscored —
    CVE-2013-0740

    Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redi…

  • Medium —
    CVE-2012-6132

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

    roundup PyPI
  • Unscored —
    CVE-2013-7367

    SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote atta…

  • Unscored —
    CVE-2013-7364

    An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows re…

  • Unscored —
    CVE-2013-7356

    Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database passwo…

  • Unscored —
    CVE-2013-7360

    Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown v…

  • Unscored —
    CVE-2013-7358

    Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, …

  • Unscored —
    CVE-2013-7361

    Directory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary files via unspecified…

  • Unscored —
    CVE-2013-7365

    Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2013-7359

    Unspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain sensitive port information via…

  • Unscored —
    CVE-2013-7366

    The SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote attackers to cause a denial…

  • Unscored —
    CVE-2013-7363

    Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sens…

  • Unscored —
    CVE-2013-7362

    An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors.

  • Unscored —
    CVE-2013-7357

    Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential …

  • Unscored —
    CVE-2013-7355

    SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2014-2752

    SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote at…

  • Unscored —
    CVE-2014-2748

    The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or…

  • Unscored —
    CVE-2014-2751

    SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access …

  • Unscored —
    CVE-2014-2749

    The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, an…

  • Unscored —
    CVE-2013-6468

    JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated use…

  • Unscored —
    CVE-2013-3252

    Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for Wo…

  • Unscored —
    CVE-2013-3251

    Cross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote…

  • Unscored —
    CVE-2013-2693

    Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows …

  • Unscored —
    CVE-2013-2699

    Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote…

  • Medium —
    CVE-2013-2033

    Jenkins vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unsp…

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2012-4921

    Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for …

  • Unscored —
    CVE-2014-0331

    Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 all…

  • Unscored —
    CVE-2014-1455

    SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, …

  • Unscored —
    CVE-2014-2583

    Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1…

    pam pam Debian Ubuntu
  • Unscored —
    CVE-2014-2708

    Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers t…

    cacti Debian
  • Unscored —
    CVE-2014-2127 Public exploit EPSS 12%

    Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 b…

  • Unscored —
    CVE-2014-2128

    The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40…

  • Unscored —
    CVE-2014-2126

    Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 b…

  • Unscored —
    CVE-2014-2129

    The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5)…

  • Unscored —
    CVE-2014-2141

    The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initia…