Skip to content
OpenAdvisories

Archive

3 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /3 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2013-0191

    libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which all…

  • High —
    CVE-2014-3942

    TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code

    The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.

    typo3/cms Packagist
  • Critical —
    CVE-2014-3945

    TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash

    The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the …

    typo3/cms Packagist
  • Low —
    CVE-2014-3943

    Typo3 XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web…

    typo3/cms Packagist
  • Unscored —
    CVE-2014-3466 Public exploit EPSS 11%

    Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.1…

    gnutls28 gnutls28 gnutls26 Debian Ubuntu
  • Medium —
    CVE-2014-3941

    Typo3 Host Header Spoofing Vulnerability

    TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

    typo3/cms Packagist
  • Unscored —
    CVE-2014-3959

    Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM…

  • Medium —
    CVE-2014-3944

    TYPO3 Improper Session Invalidation

    The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors.

    typo3/cms Packagist
  • Medium —
    CVE-2014-3946

    Typo3 Information Disclosure

    The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors.

    typo3/cms Packagist
  • Unscored —
    CVE-2014-3280

    The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly im…