Skip to content
OpenAdvisories

Archive

16 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /16 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Critical —
    CVE-2013-7379

    API Admin Auth Weakness in tomato

    The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config.master.ap…

    tomato npm
  • Unscored —
    CVE-2014-1613

    Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd co…

  • High 7.4
    CVE-2014-1418

    Django Vulnerable to Cache Poisoning

    Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2014-3730

    Django Allows Open Redirects

    The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrate…

    python-django django python-django Debian Ubuntu PyPI
  • High —
    CVE-2014-3742

    File Descriptor Leak Can Cause DoS Vulnerability in hapi

    The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.

    hapi npm
  • Unscored —
    CVE-2014-3452

    Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2014-0749 Public exploit EPSS 17%

    Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Res…

    torque Ubuntu
  • Unscored —
    CVE-2014-3759

    Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote at…

  • Unscored —
    CVE-2014-3761

    Cross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2014-3760

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attacke…

  • Unscored —
    CVE-2014-3758

    Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allows remote…

  • Unscored —
    CVE-2014-0918

    Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27,…

  • High 8.3
    CVE-2014-0782 Public exploit EPSS 57%

    Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

    Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and ea…

    Yokogawa CENTUM CS 3000 ICS / OT
  • Unscored —
    CVE-2014-0933

    Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1…

  • Unscored —
    CVE-2014-0917

    Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.…

  • Unscored —
    CVE-2014-0964

    IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to…

  • Unscored —
    CVE-2014-0643

    EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM…

  • Unscored —
    CVE-2014-1649 Public exploit EPSS 42%

    The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functiona…

  • Unscored —
    CVE-2014-3262

    The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly…

  • Unscored —
    CVE-2014-3263

    The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTP…

  • Unscored —
    CVE-2014-3750

    The Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509 certificates from SSL …