Skip to content
OpenAdvisories

Archive

6 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /6 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2012-6653 Public exploit

    Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecifie…

  • Unscored —
    CVE-2014-0479

    reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vec…

    reportbug reportbug Debian Ubuntu
  • Unscored —
    CVE-2014-3559

    The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, e…

  • Unscored —
    CVE-2014-3434 Public exploit

    Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,…

  • Unscored —
    CVE-2014-5187

    Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read…

  • Unscored —
    CVE-2014-5182

    Multiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote authenticated users with Cont…

  • Unscored —
    CVE-2014-5185

    SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributo…

  • Unscored —
    CVE-2014-5180 Public exploit

    SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 f…

  • Unscored —
    CVE-2014-5186

    SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authent…

  • Unscored —
    CVE-2014-5183

    SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.…

  • Unscored —
    CVE-2014-5181

    Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPres…

  • Unscored —
    CVE-2014-5184

    SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote …

  • Unscored —
    CVE-2013-4159

    ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact relate…

  • Unscored —
    CVE-2014-3560 EPSS 56%

    NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to exe…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2014-5089 Public exploit

    SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute…

  • Unscored —
    CVE-2014-5082 Public exploit

    Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus a…

  • Unscored —
    CVE-2014-5178

    Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticate…

  • Unscored —
    CVE-2014-5179

    The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access p…

    Web / CMS
  • Unscored —
    CVE-2014-5088 Public exploit

    Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —
    CVE-2014-5090 Public exploit

    admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell m…