Skip to content
OpenAdvisories

Archive

2 June 2014

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-2946 Public exploit

    Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modem…

  • Unscored —
    CVE-2013-7387 Public exploit

    Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions …

  • Unscored —
    CVE-2013-1412 Public exploit EPSS 40%

    DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/p…

  • Unscored —
    CVE-2014-3935 Public exploit

    SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execu…

  • Unscored —
    CVE-2014-3936 Public exploit EPSS 77%

    Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b0…

  • Unscored —
    CVE-2014-3934 Public exploit

    SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL…