Skip to content
OpenAdvisories

Archive

June 2014

Vulnerabilities first published in this month (UTC), newest first.

← May 2014 2014 / June July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

124 results · Clear filters · Feed

  • Unscored —
    CVE-2014-2612 Public exploit

    Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x …

  • Unscored —
    CVE-2014-4030 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attack…

  • Unscored —
    CVE-2014-4643 Public exploit

    Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a de…

  • Unscored —
    CVE-2014-4644 Public exploit

    SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execu…

  • Unscored —
    CVE-2014-4645 Public exploit

    Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2014-1739 Public exploit

    The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not init…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-4014 Public exploit

    The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inappl…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2012-5106 Public exploit EPSS 14%

    Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via…

  • Unscored —
    CVE-2012-2591 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attac…

  • Unscored —
    CVE-2012-2579 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attack…

  • Unscored —
    CVE-2012-2580 Public exploit

    Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows r…

  • Unscored —
    CVE-2014-0007 Public exploit

    The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands vi…

  • Unscored —
    CVE-2012-2052 Public exploit EPSS 23%

    Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x be…

  • Medium —
    CVE-2011-4367 Public exploit EPSS 34%

    Apache MyFaces Vulnerable to Path Traversal

    Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.res…

    org.apache.myfaces.core:myfaces-impl Maven
  • Unscored —
    CVE-2012-2569 Public exploit

    Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to in…

  • Unscored —
    CVE-2012-2572 Public exploit

    Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote …

  • Unscored —
    CVE-2014-4155 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows re…

  • Unscored —
    CVE-2014-4334 Public exploit EPSS 15%

    Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2014-3778 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboa…

  • Unscored —
    CVE-2014-2782 Public exploit EPSS 22%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-2962 Public exploit EPSS 47%

    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware befo…

  • Unscored —
    CVE-2012-2592 Public exploit

    Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-4153 Public exploit

    The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a craf…

  • Unscored —
    CVE-2013-6221 Public exploit EPSS 78%

    Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the Auto…

  • Unscored —
    CVE-2014-0910 Public exploit

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 …

  • Unscored —
    CVE-2014-4306 Public exploit

    Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2014-4307 Public exploit

    SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2014-4162 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote at…

  • Unscored —
    CVE-2014-4163 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow re…

  • Unscored —
    CVE-2014-4166 Public exploit

    Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject …

  • Unscored —
    CVE-2013-3843 Public exploit EPSS 20%

    Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) b…

  • Unscored —
    CVE-2013-2182 Public exploit

    The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restr…

  • Unscored —
    CVE-2014-4158 Public exploit EPSS 14%

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET re…

  • Unscored —
    CVE-2014-3804 Public exploit EPSS 72%

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via …

  • Unscored —
    CVE-2014-3805 Public exploit EPSS 13%

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via …

  • Unscored —
    CVE-2014-2303 Public exploit

    Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 an…

  • Unscored —
    CVE-2010-5301 Public exploit EPSS 11%

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD r…

  • Unscored —
    CVE-2011-3625 Public exploit EPSS 24%

    Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, al…

    mplayer Debian
  • Unscored —
    CVE-2014-4033 Public exploit

    Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows…

  • Unscored —
    CVE-2014-4034 Public exploit

    SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL co…