Skip to content
OpenAdvisories

Archive

13 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /13 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2013-4503

    Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users…

    Web / CMS
  • Unscored —
    CVE-2013-4490 Public exploit EPSS 42%

    The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.…

  • Unscored —
    CVE-2013-4500

    The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or…

  • Unscored —
    CVE-2013-4501

    The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz…

  • Unscored —
    CVE-2013-4552

    lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authent…

  • Medium —
    CVE-2013-4562

    omniauth-facebook Cross-Site Request Forgery vulnerability

    The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.

    omniauth-facebook RubyGems
  • Unscored —
    CVE-2013-4502

    The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file …

  • Unscored —
    CVE-2013-4546

    The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to exe…

  • Unscored —
    CVE-2013-4504

    The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted …

  • Unscored —
    CVE-2014-3456

    Cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2 allows remote attackers t…

  • Unscored —
    CVE-2011-4970

    Multiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM, allow remote at…

    lcgdm Ubuntu
  • Unscored —
    CVE-2013-1407

    Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro pl…

  • Unscored —
    CVE-2013-2705

    Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for Word…

  • Unscored —
    CVE-2013-2692

    Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows…

  • Unscored —
    CVE-2012-6342

    Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers …

  • Unscored —
    CVE-2014-3246 Public exploit

    SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2014-2989 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hi…