Skip to content
OpenAdvisories

Archive

7 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /7 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2013-7394

    The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary comma…

  • Unscored —
    CVE-2013-6771

    Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-4647

    Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER…

  • Unscored —
    CVE-2014-3854 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack…

  • Unscored —
    CVE-2014-3771

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) reques…

  • Unscored —
    CVE-2014-3851

    usr/lib/cgi-bin/create_passwd_file.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local…

  • Medium —
    CVE-2014-3517

    OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack…

    nova nova nova Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-3855

    Directory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2014-3774

    Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to in…

  • Unscored —
    CVE-2014-3800

    XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names…

  • Unscored —
    CVE-2014-3852

    Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for rem…

  • Unscored —
    CVE-2014-3914 Public exploit EPSS 73%

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows…

  • Unscored —
    CVE-2014-3459 EPSS 12%

    Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to exec…

  • Unscored —
    CVE-2014-3853

    Pyplate 0.08 does not set the secure flag for the id cookie in an https session, which makes it easier for remote attac…

  • Unscored —
    CVE-2014-3772

    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a d…

  • Unscored —
    CVE-2014-3773

    Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL comman…

  • Critical 9.8
    CVE-2014-3429

    IPython Notebook vulnerable to improper validation of the origin of websocket requests

    IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

    ipython ipython Debian PyPI
  • Unscored —
    CVE-2014-5190

    Cross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4…

  • Unscored —
    CVE-2014-5195

    Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switchi…

    unity Ubuntu
  • Unscored —
    CVE-2014-5192 Public exploit

    SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-5194 Public exploit

    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arb…

  • Medium —
    CVE-2014-5191

    The Preview plugin in CKEditor allows Cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ckeditor ckeditor3 ckeditor/ckeditor Debian Packagist
  • Unscored —
    CVE-2014-5188

    Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers…

  • Unscored —
    CVE-2014-5193 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-5189 Public exploit

    SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attacker…

    Web / CMS