Skip to content
OpenAdvisories

Archive

June 2014

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

    python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

  • Critical —

    TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash

    The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the …