Skip to content
OpenAdvisories

Archive

25 June 2014

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —
    CVE-2014-4030 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attack…

  • Unscored —
    CVE-2014-4643 Public exploit

    Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a de…

  • Unscored —
    CVE-2014-4644 Public exploit

    SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execu…

  • Unscored —
    CVE-2014-4645 Public exploit

    Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbi…

  • Unscored —

    Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local user…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users t…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow re…

  • Unscored —

    The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote …

  • Unscored —

    Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, a…

  • Unscored —

    Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authenti…