Skip to content
OpenAdvisories

Archive

27 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /27 May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2013-6053

    OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-base…

  • Unscored —
    CVE-2014-2285

    The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using cer…

    net-snmp Debian
  • Unscored —
    CVE-2011-3602

    Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows loca…

    radvd Debian
  • Unscored —
    CVE-2011-3603

    The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, whic…

  • Unscored —
    CVE-2013-0296

    Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that…

    pigz Debian
  • Unscored —
    CVE-2011-3152

    DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x be…

  • Unscored —
    CVE-2013-6887

    OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer d…

  • Medium —
    CVE-2014-0162

    OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

    The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted l…

    glance glance Debian PyPI
  • Critical 9.8
    CVE-2014-3007 EPSS 10%

    Pillow command injection

    Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

    pillow pillow pillow Debian Ubuntu PyPI
  • Unscored —
    CVE-2010-5105

    The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary f…

    blender blender Debian Ubuntu
  • Unscored —
    CVE-2014-1764 Public exploit EPSS 38%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protect…

  • Unscored —
    CVE-2014-1763 EPSS 23%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2014-1765 EPSS 16%

    Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute a…

  • Critical 9.8
    CVE-2014-1776 Exploited EPSS 83%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary c…

    KEV Jan 28, 2022
  • Unscored —
    CVE-2014-1766 Public exploit EPSS 33%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-1762 Public exploit EPSS 71%

    Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2014-2994 Public exploit EPSS 23%

    Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exe…

  • Unscored —
    CVE-2014-0181

    The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket opera…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2014-2889

    Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when …

    linux Debian