Skip to content
OpenAdvisories

Archive

16 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /16 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2014-4164

    Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2014-4162 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote at…

  • Unscored —
    CVE-2014-4163 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow re…

  • Unscored —
    CVE-2014-4166 Public exploit

    Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject …

  • Unscored —
    CVE-2014-4165

    Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the…

    ntop Ubuntu
  • Medium 6.1
    CVE-2014-3994

    Djiblets Cross-site scripting Vulnerability via JSON Objects

    Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated …

    djblets PyPI
  • Unscored —
    CVE-2014-3428

    Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inje…

  • Medium 6.1
    CVE-2014-3995

    Djblets Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name.

    djblets PyPI
  • Unscored —
    CVE-2010-5111

    Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) a…

  • Unscored —
    CVE-2014-2003

    JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatu…

  • Unscored —
    CVE-2014-2004

    The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1.00 through 4.50, SEIL…