Skip to content
OpenAdvisories

Archive

July 2014

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2014-3120 Exploited Public exploit EPSS 89%

    Elasticsearch Improper Access Control vulnerability

    The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

    KEV Mar 25, 2022
  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…