Skip to content
OpenAdvisories

Archive

5 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /5 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2013-0350

    tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log.

    pktstat Debian
  • Unscored —
    CVE-2013-7003

    Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-7375 Public exploit

    SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows rem…

  • Unscored —
    CVE-2013-7034

    The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to exe…

  • Unscored —
    CVE-2013-1803 Public exploit

    Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2013-4215

    The IPXPING_COMMAND in contrib/check_ipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a sym…

  • Medium —
    CVE-2013-6444

    PyWBEM TOCTOU vulnerability in certificate validation

    PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid cert…

    pywbem pywbem pywbem Ubuntu Azure Linux PyPI
  • High 7.5
    CVE-2013-6418

    PyWBEM TOCTOU vulnerability in certificate validation

    PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.

    pywbem pywbem python-pywbem Azure Linux PyPI
  • Unscored —
    CVE-2013-3736

    Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request T…

  • Unscored —
    CVE-2014-0149

    Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to …

  • Unscored —
    CVE-2014-0164

    openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions …

    mcollective Debian
  • Unscored —
    CVE-2014-3220 Public exploit EPSS 11%

    F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary …

  • Unscored —
    CVE-2010-5109

    Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cau…

    libytnef claws-mail Debian
  • Unscored —
    CVE-2014-0469

    Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to exec…

    xbuffy xbuffy Debian Ubuntu
  • Unscored —
    CVE-2014-2916

    Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 all…