Skip to content
OpenAdvisories

Archive

22 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /22 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2014-4947

    Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified …

  • Unscored —
    CVE-2014-4948

    Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of serv…

  • Unscored —
    CVE-2014-3518

    jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBos…

  • High —
    CVE-2014-3530

    XML External Entity Reference in org.picketlink:picketlink-common

    The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and p…

    org.picketlink:picketlink-common Maven
  • Unscored —
    CVE-2013-7392 Public exploit

    Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

  • High —
    CVE-2014-4326

    Elasticsearch Logstash allows remote attackers to execute arbitrary commands

    Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

    logstash RubyGems
  • Unscored —
    CVE-2014-4911

    The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attack…

  • Unscored —
    CVE-2014-4511 Public exploit EPSS 83%

    Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in…

  • Unscored —
    CVE-2014-2385

    Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow loc…

  • Unscored —
    CVE-2014-5019

    The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of servic…

    drupal7 Ubuntu
  • Unscored —
    CVE-2014-5022

    Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject…

    drupal7 Ubuntu
  • Unscored —
    CVE-2014-5021

    Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows …

    drupal7 Ubuntu
  • Unscored —
    CVE-2014-5020

    The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authen…

    drupal7 Ubuntu
  • Unscored —
    CVE-2014-5023 Public exploit

    Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary comma…