Skip to content
OpenAdvisories

Archive

May 2014

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Medium —
    CVE-2014-0075 Public exploit EPSS 18%

    Integer Overflow or Wraparound in Apache Tomcat

    Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumpti…

  • Medium —
    CVE-2014-3840 Public exploit

    Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (…

  • Medium 6.1
    CVE-2014-3146 Public exploit

    lxml Cross-site Scripting Via Control Characters

    Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.

  • Medium —
    CVE-2014-3225 Public exploit

    Cobbler Path Traversal vulnerability

    Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.

  • Medium 5.5
    CVE-2014-0196 Exploited Public exploit EPSS 20%

    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver …

    KEV May 12, 2023