Skip to content
OpenAdvisories

Archive

23 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /23 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2014-3275

    SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier al…

  • Unscored —
    CVE-2014-3266

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote a…

  • Unscored —
    CVE-2014-3272

    The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted T…

  • Unscored —
    CVE-2014-3267

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows r…

  • Unscored —
    CVE-2014-3276

    Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during re…

  • Unscored —
    CVE-2014-3274

    Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be establi…

  • Unscored —
    CVE-2014-2504

    EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote …

  • Unscored —
    CVE-2014-2196

    Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allo…

  • Unscored —
    CVE-2013-0289

    Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

    isync Debian
  • Unscored —
    CVE-2013-1864

    The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion…

  • Unscored —
    CVE-2013-1668 Public exploit

    The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary co…

  • Unscored —
    CVE-2013-4223

    The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows …

    nullmailer Debian
  • Unscored —
    CVE-2013-2713 Public exploit

    Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attacker…

  • Unscored —
    CVE-2013-2712 Public exploit

    Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attacke…

  • Unscored —
    CVE-2013-2756

    Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C a…

  • Unscored —
    CVE-2013-2757

    Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC p…

  • Unscored —
    CVE-2013-2758

    Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C u…

  • Unscored —
    CVE-2012-5649

    Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2014-3450

    Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 20…

  • Unscored —
    CVE-2014-3442 Public exploit

    Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malfo…

  • Low —
    CVE-2014-3801

    OpenStack Heat template URL information leakage

    OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

    heat heat openstack-heat Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-3848 Public exploit

    The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to …

  • Unscored —
    CVE-2014-3849 Public exploit

    The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote atta…

  • Unscored —
    CVE-2013-2107 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote a…

  • Unscored —
    CVE-2010-5299 Public exploit EPSS 34%

    Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl …