Skip to content
OpenAdvisories

Archive

24 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /24 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2014-0607

    Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows re…

  • Unscored —
    CVE-2014-1419

    Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain pr…

    acpi-support Debian
  • Unscored —
    CVE-2014-4685

    Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveragi…

  • Unscored —
    CVE-2014-4736 Public exploit

    SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the n…

  • Unscored —
    CVE-2014-4686

    The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a h…

  • Unscored —
    CVE-2014-4927 Public exploit EPSS 11%

    Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 route…

    micro-httpd Ubuntu
  • Unscored —
    CVE-2014-4682

    The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attacker…

  • Unscored —
    CVE-2014-4684

    The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticate…

  • Unscored —
    CVE-2014-4910

    Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attacker…

  • Unscored —
    CVE-2014-4683

    The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenti…

  • Unscored —
    CVE-2014-3322

    Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which al…

  • Unscored —
    CVE-2014-3110 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earl…

  • Medium 4.6
    CVE-2014-2369

    Omron NS Series HMI Cross-Site Request Forgery

    Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

    Omron NS8 NS15 NS10 ICS / OT
  • Unscored —
    CVE-2014-2968

    Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.3…

  • Unscored —
    CVE-2014-2717

    Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.1…

  • Medium 4.0
    CVE-2014-2370

    Omron NS Series HMI Improper Neutralization of Input During Web Page Generation

    Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

    Omron NS12 NS8 NS15 ICS / OT
  • High 7.2
    CVE-2014-2361

    OleumTech WIO Family Key Management Errors

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of dire…

    OleumTech WIO DH2 Wireless Gateway Sensor Wireless I/O Modules
  • Medium 5.0
    CVE-2014-2360

    OleumTech WIO Family Improper Input Validation

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.

    OleumTech Sensor Wireless I/O Modules WIO DH2 Wireless Gateway
  • Unscored —
    CVE-2014-2971

    Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remo…

  • High 7.8
    CVE-2014-2362

    OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creat…

    OleumTech Sensor Wireless I/O Modules WIO DH2 Wireless Gateway
  • Unscored —
    CVE-2014-5015

    bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restric…

    bozohttpd Ubuntu
  • Unscored —
    CVE-2014-5024

    Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 a…