Skip to content
OpenAdvisories

Archive

17 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /17 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2013-6078

    The default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM) 20130918 uses the Dual Ellipt…

  • Unscored —
    CVE-2014-4191

    The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during…

  • Unscored —
    CVE-2014-4192

    The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for ou…

  • Unscored —
    CVE-2014-4039

    ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsn…

    ppc64-diag Debian
  • Unscored —
    CVE-2014-4193

    The TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended Random extension durin…

  • Unscored —
    CVE-2014-4038

    ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_sup…

    ppc64-diag Debian
  • Unscored —
    CVE-2014-4040

    snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext pass…

    powerpc-utils Debian
  • Unscored —
    CVE-2014-0478

    APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and i…

    apt apt Debian Ubuntu
  • Unscored —
    CVE-2014-4047

    Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 b…

    asterisk Debian
  • Unscored —
    CVE-2014-4048

    The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (de…

  • Unscored —
    CVE-2014-4045

    The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_ex…

  • Unscored —
    CVE-2014-4044

    OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial…

    openafs Debian
  • Unscored —
    CVE-2014-4188

    Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and J…

  • Unscored —
    CVE-2014-4187

    Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-4046

    Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows re…

    asterisk Debian
  • Unscored —
    CVE-2014-4190

    Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S93…

  • Unscored —
    CVE-2014-4189

    Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Perf…

  • Unscored —
    CVE-2014-3249

    Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hidi…

  • Medium —
    CVE-2014-3476

    OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege

    OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonati…

    keystone keystone keystone Debian Ubuntu PyPI