Skip to content
OpenAdvisories

Archive

7 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /7 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2014-0035

    Cleartext Transmission of Sensitive Information in Apache CXF

    The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtai…

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0034

    Improper Input Validation in Apache CXF

    The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

    org.apache.cxf:cxf-rt-ws-security Maven
  • Medium 6.5
    CVE-2013-3993 Exploited · Ransomware

    IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restr…

    KEV May 25, 2022