Skip to content
OpenAdvisories

Archive

April 2014

Vulnerabilities first published in this month (UTC), newest first.

← March 2014 2014 / April May 2014 →
  1. 123
  2. 233
  3. 33
  4. 415
  5. 511
  6. 62
  7. 74
  8. 824
  9. 917
  10. 1037
  11. 1126
  12. 1220
  13. 13 
  14. 1415
  15. 1569
  16. 1697
  17. 1720
  18. 1818
  19. 1915
  20. 202
  21. 2116
  22. 2214
  23. 2346
  24. 249
  25. 2518
  26. 269
  27. 2719
  28. 2814
  29. 2932
  30. 3037
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Medium 5.4
    CVE-2014-2260

    Ajenti Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.

    ajenti PyPI
  • Medium —
    CVE-2014-2853

    Cross-site scripting vulnerability in includes/actions/InfoAction.php

    Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.

    mediawiki/core Packagist
  • Medium —
    CVE-2013-7111

    Exposure of Sensitive Information in bio-basespace-sdk

    The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.

    bio-basespace-sdk RubyGems
  • Medium —
    CVE-2014-2383 Public exploit Scanner template EPSS 39%

    DOMPDF Arbitrary File Read

    dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=…

    dompdf/dompdf php-dompdf Debian Packagist
  • Medium —
    CVE-2014-0162

    OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

    The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted l…

    glance glance Debian PyPI
  • Medium —
    CVE-2013-2105

    Script Injection in Show In Browser gem

    The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.

    show_in_browser RubyGems
  • Medium 4.3
    CVE-2014-0778

    Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor

    TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for furth…

    Progea Movicon
  • Medium —
    CVE-2014-0036

    rbovirt uses the rest-client gem with SSL verification disabled

    The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

    rbovirt RubyGems
  • Medium —
    CVE-2014-0054 EPSS 91%

    Cross-Site Request Forgery in Spring Framework

    The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF atta…

    libspring-java org.springframework:spring-webmvc Debian Maven
  • Medium —
    CVE-2014-0111

    Apache Syncope JEXL Code Injection

    Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource m…

    org.apache.syncope:syncope Maven
  • Medium 4.0
    CVE-2014-1933

    Pillow Temporary file name leakage

    The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by lis…

    pillow pillow Debian PyPI
  • Medium —
    CVE-2014-0167

    OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests

    The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py…

    nova nova Debian PyPI
  • Medium —
    CVE-2014-0157

    OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description fie…

    horizon horizon Debian PyPI
  • Medium 6.0
    CVE-2014-0105

    python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

    The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstan…

    keystone python-keystoneclient python-keystoneclient Debian PyPI
  • Medium 5.0
    CVE-2014-0772

    Advantech WebAccess File and Directory Information Exposure

    The BWOCXRUN.BwocxrunCtrl.1 control contains a method named OpenUrlToBufferTimeout. This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current browser session. The …

    Advantech WebAccess
  • Medium —
    CVE-2012-6130

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.

    roundup PyPI
  • Medium —
    CVE-2012-6131

    Roundup Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.

    roundup PyPI
  • Medium —
    CVE-2012-6132

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

    roundup PyPI
  • Medium —
    CVE-2013-2033

    Jenkins vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unsp…

    org.jenkins-ci.main:jenkins-core Maven
  • Medium 5.0
    CVE-2014-0789

    Schneider Electric OPC Factory Server Buffer Overflow

    Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDL…

    Schneider Electric OPC Factory Server (OFS) ICS / OT
  • Medium 6.5
    CVE-2014-2237

    OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend

    The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list…

    keystone keystone Debian PyPI