Skip to content
OpenAdvisories

Archive

13 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /13 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2013-1841

    Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP addres…

    libnet-server-perl libnet-server-perl Debian Ubuntu
  • Unscored —
    CVE-2013-4099

    Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attac…

  • Unscored —
    CVE-2013-3663 EPSS 32%

    Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, …

  • Unscored —
    CVE-2013-3843 Public exploit EPSS 20%

    Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) b…

  • Unscored —
    CVE-2013-2182 Public exploit

    The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restr…

  • Unscored —
    CVE-2013-2163

    Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an o…

  • Unscored —
    CVE-2013-5353

    Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and ea…

  • Unscored —
    CVE-2013-5356

    Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allo…

  • Unscored —
    CVE-2013-5352

    Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_te…

  • Medium —
    CVE-2012-3522

    GeSHi vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    geshi/geshi Packagist
  • High —
    CVE-2012-3521

    GeSHi vulnerable to Directory Traversal

    Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.

    geshi geshi/geshi Debian Packagist
  • Unscored —
    CVE-2014-4159

    Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attacker…

  • Unscored —
    CVE-2014-4161

    Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remot…

  • Unscored —
    CVE-2014-4158 Public exploit EPSS 14%

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET re…

  • Unscored —
    CVE-2014-4160

    Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allo…

  • Unscored —
    CVE-2014-3813

    Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configu…

  • Unscored —
    CVE-2014-3804 Public exploit EPSS 72%

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via …

  • Unscored —
    CVE-2014-3805 Public exploit EPSS 13%

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via …

  • Unscored —
    CVE-2014-3812

    The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos…

  • Unscored —
    CVE-2014-3814

    The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lo…

  • Unscored —
    CVE-2014-2303 Public exploit

    Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 an…

  • Unscored —
    CVE-2010-5301 Public exploit EPSS 11%

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD r…

  • Unscored —
    CVE-2014-3859

    libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a den…