Skip to content
OpenAdvisories

Archive

29 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /29 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2014-3279

    The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and ea…

  • Unscored —
    CVE-2014-3277

    The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and ea…

  • Unscored —
    CVE-2014-3282

    The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and ea…

  • Unscored —
    CVE-2014-3285

    Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not pro…

  • Unscored —
    CVE-2014-3283

    Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Commu…

  • Unscored —
    CVE-2013-0199

    The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaN…

  • Unscored —
    CVE-2013-4177

    The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly id…

  • Unscored —
    CVE-2013-4178

    The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attack…

  • Unscored —
    CVE-2013-2193

    Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-m…

  • Unscored —
    CVE-2012-4915 Public exploit EPSS 50%

    Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers …

  • Unscored —
    CVE-2014-0246

    SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensiti…

    sosreport sosreport Debian Ubuntu
  • Unscored —
    CVE-2014-0200

    The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permis…

  • Unscored —
    CVE-2014-0199

    The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) pack…

  • Unscored —
    CVE-2014-0201

    ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, us…

  • Unscored —
    CVE-2014-3414 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2014-3417

    uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to confi…

  • Unscored —
    CVE-2014-3415 Public exploit

    SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-3416

    uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to mana…