Skip to content
OpenAdvisories

Archive

7 August 2014

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-3854 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack…

  • Unscored —
    CVE-2014-3914 Public exploit EPSS 73%

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows…

  • Unscored —
    CVE-2014-5192 Public exploit

    SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-5194 Public exploit

    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arb…

  • Unscored —
    CVE-2014-5193 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-5189 Public exploit

    SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attacker…