Skip to content
OpenAdvisories

Archive

30 May 2014

Vulnerabilities first published on this day (UTC), newest first.

← April 2014 2014 / May /30 June 2014 →
  1. 112
  2. 238
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 713
  8. 852
  9. 96
  10. 102
  11. 115
  12. 1221
  13. 1317
  14. 1465
  15. 158
  16. 1621
  17. 175
  18. 181
  19. 1927
  20. 2033
  21. 2114
  22. 2247
  23. 2325
  24. 246
  25. 253
  26. 2626
  27. 2726
  28. 282
  29. 2918
  30. 3025
  31. 316
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2013-6744

    The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows …

  • Unscored —
    CVE-2014-0907

    Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 be…

  • Low 1.2
    CVE-2014-2343

    Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

    Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

    Triangle MicroWorks SCADA Data Gateway
  • Medium 4.3
    CVE-2014-2342

    Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

    Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.

    Triangle MicroWorks SCADA Data Gateway
  • High 7.1
    CVE-2014-2353

    Cogent DataHub XSS

    Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Cogent DataHub
  • Medium 6.0
    CVE-2014-2354

    Cogent DataHub Use of Password Hash With Insufficient Computational Effort

    Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

    Cogent DataHub
  • High 7.8
    CVE-2014-2352

    Cogent DataHub Path Traversal

    The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an a…

    Cogent DataHub
  • Unscored —
    CVE-2014-0925

    Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 …

  • Unscored —
    CVE-2014-3864

    Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of t…

    dpkg dpkg Debian Ubuntu
  • Unscored —
    CVE-2014-3227

    dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for t…

    dpkg Debian
  • Unscored —
    CVE-2014-3865 Public exploit

    Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files ou…

    dpkg dpkg Debian Ubuntu
  • Unscored —
    CVE-2014-3010

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3…

  • Unscored —
    CVE-2013-4143

    The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NUL…

  • Unscored —
    CVE-2013-6788

    The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cooki…

  • Unscored —
    CVE-2013-5919

    Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.

    suricata Debian
  • Unscored —
    CVE-2012-5560

    The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a …

  • Unscored —
    CVE-2012-5877 Public exploit

    Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and c…

  • Unscored —
    CVE-2012-5572

    CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attacker…

    libdancer-perl Debian
  • Unscored —
    CVE-2012-5876 Public exploit

    Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to …

  • Unscored —
    CVE-2014-0202

    The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dw…

  • Unscored —
    CVE-2014-3922

    Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allow…

  • Unscored —
    CVE-2014-3923

    Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress…

    Web / CMS
  • Unscored —
    CVE-2014-3921

    Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote att…

    Web / CMS
  • Unscored —
    CVE-2014-3924

    Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attack…

  • Unscored —
    CVE-2014-3780

    Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to b…