Skip to content
OpenAdvisories

Archive

26 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /26 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2014-4748

    Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remot…

  • Unscored —
    CVE-2014-4857

    Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-4971 Public exploit EPSS 23%

    Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write…

  • Unscored —
    CVE-2014-4747

    The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meet…

  • Unscored —
    CVE-2014-2626 EPSS 19%

    Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network V…

  • Unscored —
    CVE-2014-2966

    The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remot…

  • Unscored —
    CVE-2014-2625

    Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Vi…

  • Unscored —
    CVE-2014-4858

    Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier al…

  • Unscored —
    CVE-2014-4979

    Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via …

  • Unscored —
    CVE-2014-3301

    The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to o…

  • Unscored —
    CVE-2014-3071

    Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows r…

  • Unscored —
    CVE-2014-3324

    Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco Tele…

  • Unscored —
    CVE-2014-3305

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and ear…

  • Unscored —
    CVE-2014-3326

    SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated user…

  • Unscored —
    CVE-2014-3328

    The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of servi…

  • Critical 10.0
    CVE-2014-2363

    Morpho Itemiser 3 Hard-Coded Credential

    Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request.

    Morpho Itemiser 3