Skip to content
OpenAdvisories

Archive

28 July 2014

Vulnerabilities first published on this day (UTC), newest first.

← June 2014 2014 / July /28 August 2014 →
  1. 168
  2. 276
  3. 326
  4. 4 
  5. 5 
  6. 62
  7. 741
  8. 831
  9. 921
  10. 1021
  11. 1124
  12. 12 
  13. 13 
  14. 1412
  15. 1511
  16. 1616
  17. 1792
  18. 186
  19. 1920
  20. 2029
  21. 215
  22. 2214
  23. 2322
  24. 2422
  25. 256
  26. 2616
  27. 272
  28. 2818
  29. 2936
  30. 307
  31. 319
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2014-3120 Exploited Public exploit Scanner template EPSS 89%

    Elasticsearch Improper Access Control vulnerability

    The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

    org.elasticsearch:elasticsearch Maven
    KEV Mar 25, 2022
  • Unscored —
    CVE-2014-5109 Public exploit

    SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attacke…

  • Unscored —
    CVE-2014-5104 Public exploit

    Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2014-5111 Public exploit Scanner template EPSS 22%

    Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2014-5112 Public exploit

    maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metach…