Skip to content
OpenAdvisories

Archive

15 July 2014

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-4663 Public exploit

    TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-4964 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hija…

  • Unscored —
    CVE-2014-4965 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2014-4962 Public exploit

    Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative numbe…

  • Unscored —
    CVE-2014-4963 Public exploit

    Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.c…

  • Unscored —
    CVE-2014-3418 Public exploit

    config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via sh…