Skip to content
OpenAdvisories

Archive

27 May 2014

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2013-2225 Public exploit

    inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _p…

  • Unscored —
    CVE-2013-5036 Public exploit EPSS 46%

    The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter …

  • Unscored —
    CVE-2014-3871 Public exploit

    Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds…

  • Medium —
    CVE-2014-3840 Public exploit

    Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (…