Skip to content
OpenAdvisories

Archive

15 July 2014

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows rem…

  • Unscored —
    CVE-2014-4663 Public exploit

    TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-4964 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hija…

  • Unscored —
    CVE-2014-4965 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2014-4962 Public exploit

    Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative numbe…

  • Unscored —
    CVE-2014-4963 Public exploit

    Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.c…

  • Unscored —

    The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.…

  • Unscored —

    FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data st…

  • Unscored —

    FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer betw…

  • Unscored —

    Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easi…

  • Unscored —
    CVE-2014-3418 Public exploit

    config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via sh…