Skip to content
OpenAdvisories

Archive

8 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /8 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2013-6372

    Jenkins Subversion Plugin Stores Credentials with Base64 Encoding

    The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

    org.jenkins-ci.plugins:subversion Maven
  • Medium —
    CVE-2014-0056

    OpenStack Neutron Improper Authentication vulnerability

    The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

    neutron neutron Debian PyPI
  • Medium —
    CVE-2014-0109

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0110

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

    org.apache.cxf:cxf-core Maven
  • Medium 4.5
    CVE-2014-1934

    eyeD3 is vulnerable to arbitrary file modification via symlink attack

    tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

    eyed3 eyed3 eyed3 Debian Ubuntu PyPI