Archive
27 May 2014
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Unscored —CVE-2013-2225 Public exploit
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _p…
-
Unscored —
The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter …
-
Unscored —CVE-2014-3871 Public exploit
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds…
-
Medium —CVE-2014-3840 Public exploit
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (…