Skip to content
OpenAdvisories

Archive

20 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /20 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2013-4352 EPSS 12%

    The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6,…

    apache2 Debian
  • Unscored —
    CVE-2014-0118 EPSS 37%

    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0226 Public exploit EPSS 86%

    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a deni…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0231 EPSS 45%

    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote atta…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0117 EPSS 36%

    The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote atta…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-1999

    The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-1973

    Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote att…

  • Unscored —
    CVE-2014-1994

    Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remo…

  • Unscored —
    CVE-2014-1992

    Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before …

  • Unscored —
    CVE-2014-1993

    The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended…

  • Unscored —
    CVE-2014-1995

    Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 al…

  • Unscored —
    CVE-2014-1996

    Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbi…

  • Unscored —
    CVE-2014-1987

    The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unsp…

  • Unscored —
    CVE-2014-4342

    MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buff…

    krb5 krb5 Debian Ubuntu
  • Low —
    CVE-2014-4986

    phpMyAdmin cross-site scripting Vulnerability in Table or Column Names

    Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Unscored —
    CVE-2014-4954

    Cross-site scripting (XSS) vulnerability in the PMA_getHtmlForActionLinks function in libraries/structure.lib.php in ph…

    phpmyadmin Debian
  • Unscored —
    CVE-2014-4341

    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and appl…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4987

    server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to …

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2014-4955

    Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in php…

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2014-3162

    Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service…

    chromium-browser oxide-qt Ubuntu
  • Unscored —
    CVE-2014-3159

    The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delega…

  • Unscored —
    CVE-2014-3894

    Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote …

  • Unscored —
    CVE-2014-3885

    Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary w…

  • Unscored —
    CVE-2014-3523 EPSS 17%

    Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x b…

  • Unscored —
    CVE-2014-3886

    Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote atta…

  • Unscored —
    CVE-2014-3892

    Cross-site scripting (XSS) vulnerability in Nexa Meridian before 2014 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2014-3160

    The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36…

    chromium-browser oxide-qt Ubuntu
  • Unscored —
    CVE-2014-3884

    Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2014-3161

    The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome b…