Skip to content
OpenAdvisories

Archive

June 2014

Vulnerabilities first published in this month (UTC), newest first.

← May 2014 2014 / June July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

445 results · Feed

  • Unscored —
    CVE-2014-4509

    The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka ID…

  • Unscored —
    CVE-2014-3883

    Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors rel…

  • Unscored —
    CVE-2014-3431

    Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable pe…

  • Unscored —
    CVE-2014-3053

    The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through…

  • Unscored —
    CVE-2014-3073

    Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web …

  • Unscored —
    CVE-2014-3052

    The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interpret…

  • Unscored —
    CVE-2014-3296

    The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticat…

  • Unscored —
    CVE-2012-5106 Public exploit EPSS 14%

    Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via…

  • Unscored —
    CVE-2011-4821

    Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA a…

  • Unscored —
    CVE-2012-0273

    Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) sessi…

  • Unscored —
    CVE-2012-2591 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attac…

  • Unscored —
    CVE-2012-2579 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attack…

  • Unscored —
    CVE-2012-2580 Public exploit

    Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows r…

  • Unscored —
    CVE-2014-0007 Public exploit

    The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands vi…

  • Unscored —
    CVE-2014-4505

    Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote…

  • Unscored —
    CVE-2014-4507

    Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers…

  • Unscored —
    CVE-2014-4506

    Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 fo…

  • Unscored —
    CVE-2014-3496

    cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2012-2052 Public exploit EPSS 23%

    Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x be…

  • Unscored —
    CVE-2013-1068

    The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubun…

    nova nova cinder cinder Debian Ubuntu
  • Medium —
    CVE-2011-4367 Public exploit EPSS 34%

    Apache MyFaces Vulnerable to Path Traversal

    Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.res…

    org.apache.myfaces.core:myfaces-impl Maven
  • Unscored —
    CVE-2012-1621

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.0…

  • Unscored —
    CVE-2012-2569 Public exploit

    Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to in…

  • Unscored —
    CVE-2012-2572 Public exploit

    Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote …

  • Unscored —
    CVE-2014-4335

    Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2014-4155 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows re…

  • Unscored —
    CVE-2014-4334 Public exploit EPSS 15%

    Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2014-4333

    Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remo…

  • Unscored —
    CVE-2014-3778 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboa…

  • Unscored —
    CVE-2014-3810

    SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authentica…

  • Unscored —
    CVE-2014-4329

    Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2014-2782 Public exploit EPSS 22%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-2962 Public exploit Scanner template EPSS 47%

    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware befo…

  • Unscored —
    CVE-2014-2609 EPSS 13%

    The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows …

  • Unscored —
    CVE-2014-2610

    Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40…

  • Unscored —
    CVE-2014-2611 EPSS 12%

    Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote a…

  • Unscored —
    CVE-2014-2001

    The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2013-5017

    SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute …

  • Unscored —
    CVE-2012-2592 Public exploit

    Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-1652

    Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 …