Skip to content
OpenAdvisories

Archive

29 April 2014

Vulnerabilities first published on this day (UTC), newest first.

← March 2014 2014 / April /29 May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High —
    CVE-2013-7259

    Neo4J vulnerable to Cross-Site Request Forgery

    Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/exe…

    org.neo4j:neo4j Maven
  • High —
    CVE-2014-0113 Public exploit EPSS 78%

    ClassLoader manipulation in Apache Struts

    CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted reque…

    org.apache.struts:struts2-core Maven
  • High —
    CVE-2014-0112 Public exploit EPSS 98%

    ClassLoader manipulation in Apache Struts

    ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists beca…

    org.apache.struts:struts2-core Maven