Skip to content
OpenAdvisories

Archive

21 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /21 May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2013-5459

    Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager …

  • Unscored —
    CVE-2014-0361

    The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, has…

  • Unscored —
    CVE-2014-0932

    Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Ful…

  • Unscored —
    CVE-2014-2922 Public exploit

    The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.1.0 do…

  • High —
    CVE-2014-2921 Public exploit

    Pimcore Vulnerable to PHP Object Injection Attacks

    The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.0.0 does not properly handle an object obtained by unserializing Lucene search data, which allows remote attackers to conduct PHP object injection…

    pimcore/pimcore Packagist
  • Unscored —
    CVE-2013-6370

    Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via uns…

    json-c json-c Debian Ubuntu
  • Unscored —
    CVE-2013-6371

    The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consu…

    json-c json-c Debian Ubuntu
  • Unscored —
    CVE-2013-6469

    JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java …

  • Unscored —
    CVE-2013-5948 Public exploit

    The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware bef…

  • Unscored —
    CVE-2014-0173

    The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.…

  • High —
    CVE-2014-1216 Public exploit

    Improper Neutralization of Special Elements used in a Command in FitNesse Wiki

    FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.

    org.fitnesse:fitnesse Maven
  • Unscored —
    CVE-2014-2341 Public exploit

    Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSI…

  • Unscored —
    CVE-2014-2925

    Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers …

  • Unscored —
    CVE-2014-2719

    Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator …

  • Unscored —
    CVE-2014-2269 EPSS 16%

    modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password fo…

  • Unscored —
    CVE-2014-2735

    WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the s…