Skip to content
OpenAdvisories

Archive

14 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /14 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2014-5250

    Unspecified vulnerability in the AJAX autocompletion callback in the Biblio Autocomplete module 6.x-1.x before 6.x-1.1 …

  • Unscored —
    CVE-2014-5248

    Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2014-5249

    SQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio Autocomplete module 6.x-1.x befor…

  • Unscored —
    CVE-2012-0939

    Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Require…

  • Unscored —
    CVE-2012-0938 Public exploit

    Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with cer…

  • Unscored —
    CVE-2012-6654

    Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2012-3820

    Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow re…

  • Unscored —
    CVE-2012-5685 Public exploit

    SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2012-5684 Public exploit

    Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2012-5683 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijac…

  • Unscored —
    CVE-2014-1387

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1389

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1384

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1386

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1388

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1546

    The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in Bugzilla 3.x and 4.x befo…

  • Unscored —
    CVE-2014-1385

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1390

    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-1980

    Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote att…

  • Unscored —
    CVE-2014-4345

    Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4344

    The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x …

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-4343

    Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c …

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2014-3898

    Cross-site scripting (XSS) vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote…

  • Unscored —
    CVE-2014-5239

    The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL s…