Skip to content
OpenAdvisories

Archive

29 April 2014

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2013-1804 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbit…

  • High —
    CVE-2014-0113 Public exploit EPSS 78%

    ClassLoader manipulation in Apache Struts

    CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted reque…

  • Unscored —
    CVE-2014-0515 Public exploit EPSS 94%

    Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS…

  • High —
    CVE-2014-0112 Public exploit EPSS 98%

    ClassLoader manipulation in Apache Struts

    ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists beca…

  • Unscored —
    CVE-2014-1841 Public exploit Scanner template

    Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…

  • Unscored —
    CVE-2014-1842 Public exploit Scanner template

    Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…

  • Unscored —
    CVE-2014-1843 Public exploit Scanner template

    Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…