Skip to content
OpenAdvisories

Archive

9 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /9 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2014-4004

    The (1) Structures and (2) Project-Oriented Procurement components in SAP Project System has hardcoded credentials, whi…

  • Unscored —
    CVE-2014-4006

    The SAP Trader's and Scheduler's Workbench (TSW) for SAP Oil & Gas has hardcoded credentials, which makes it easier for…

  • Unscored —
    CVE-2014-4010

    SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via un…

  • Unscored —
    CVE-2014-4007

    The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access v…

  • Unscored —
    CVE-2014-4009

    SAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote attackers to obtain access…

  • Unscored —
    CVE-2014-4008

    SAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote attackers to obtain acce…

  • Unscored —
    CVE-2014-4005

    SAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecifie…

  • Unscored —
    CVE-2014-4011

    SAP Capacity Leveling has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspec…

  • Unscored —
    CVE-2014-4012

    SAP Open Hub Service has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspeci…

  • Unscored —
    CVE-2014-4003

    The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related…

  • Critical 9.8
    CVE-2013-7323

    python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

    python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI
  • Unscored —
    CVE-2013-1973

    The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x befo…

  • High —
    CVE-2013-1756

    Dragonfly Code Injection vulnerability

    The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

    dragonfly RubyGems
  • Unscored —
    CVE-2013-4599

    The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration i…

  • Unscored —
    CVE-2013-4595

    The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used in…

  • Unscored —
    CVE-2013-4597

    The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content ma…

  • Unscored —
    CVE-2013-6223

    LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local use…

  • Unscored —
    CVE-2013-3081 Public exploit

    SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2…

  • Unscored —
    CVE-2013-3082 Public exploit

    Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote at…

  • Unscored —
    CVE-2013-2562

    Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtai…

  • Unscored —
    CVE-2013-2563

    Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin pass…

  • Unscored —
    CVE-2013-2564

    Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a …

  • Unscored —
    CVE-2013-5760

    QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to ph…