Skip to content
OpenAdvisories

Archive

19 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /19 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2014-4331

    Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-2682

    Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privi…

  • Unscored —
    CVE-2014-4943 Public exploit

    The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3325

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers…

  • Unscored —
    CVE-2014-3533

    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a cert…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3532

    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-2519

    The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allo…

  • Unscored —
    CVE-2013-7391

    The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows rem…

  • Unscored —
    CVE-2013-4273

    The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allow…

  • Unscored —
    CVE-2014-0970

    The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and In…

  • Unscored —
    CVE-2014-0968

    Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative …

  • Unscored —
    CVE-2014-0967

    Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative …

  • Unscored —
    CVE-2014-3045

    IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the …

  • Unscored —
    CVE-2014-3064

    The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and In…

  • Unscored —
    CVE-2014-3043

    IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by lever…

  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

    Advantech WebAccess
  • High 7.5
    CVE-2014-2367

    Advantech WebAccess Authentication Bypass Issues

    The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

    Advantech WebAccess
  • Medium 6.5
    CVE-2014-2365

    Advantech WebAccess Improper Access Control

    Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

    Advantech WebAccess
  • Critical 9.0
    CVE-2014-2366

    Advantech WebAccess Cleartext Storage of Sensitive Information in Memory

    upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

    Advantech WebAccess
  • High 7.5
    CVE-2014-2368

    Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting

    The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

    Advantech WebAccess