Archive

22 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /22 September 2014 →

All Critical High Medium Low Exploited only Public exploit

30 results · Feed

Unscored —

CVE-2013-6306

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 be…

Aug 22, 2014
High —

CVE-2014-3563

SaltStack Salt Insecure Temporary File Creation

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

salt salt Ubuntu PyPI

Aug 22, 2014
Unscored —

CVE-2014-5243

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME prot…

mediawiki Debian

Aug 22, 2014
Unscored —

CVE-2014-5242

Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.…

Aug 22, 2014
Unscored —

CVE-2014-5241

The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, …

mediawiki Debian

Aug 22, 2014
Unscored —

CVE-2014-0232

Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz…

Aug 22, 2014
Unscored —

CVE-2014-4197

Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execut…

Aug 22, 2014
Unscored —

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unkn…

trafficserver Debian

Aug 22, 2014
Low —

CVE-2014-3594

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggre…

horizon horizon horizon Debian Ubuntu PyPI

Aug 22, 2014
Unscored —

CVE-2014-5396

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for …

Aug 22, 2014
Unscored —

CVE-2014-5261 EPSS 11%

The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary…

cacti cacti Debian Ubuntu

Aug 22, 2014
Unscored —

CVE-2014-5121

Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject a…

Aug 22, 2014
Unscored —

CVE-2014-5338

Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 bef…

Aug 22, 2014
Unscored —

CVE-2014-5246 Public exploit EPSS 12%

The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authenticatio…

Aug 22, 2014
Unscored —

CVE-2014-5122

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web…

Aug 22, 2014
Unscored —

CVE-2014-5149

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, wh…

xen Debian

Aug 22, 2014
Unscored —

CVE-2014-5097 Public exploit

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execu…

Aug 22, 2014
Unscored —

CVE-2014-5262

SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote…

cacti cacti Debian Ubuntu

Aug 22, 2014
Unscored —

CVE-2014-5146

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assist…

xen Debian

Aug 22, 2014
Unscored —

CVE-2014-5368 Public exploit EPSS 19%

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Sou…

Aug 22, 2014
Unscored —

CVE-2014-0965

IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows rem…

Aug 22, 2014
Unscored —

CVE-2014-4767

IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repositor…

Aug 22, 2014
Unscored —

CVE-2014-4764

IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Disp…

Aug 22, 2014
Unscored —

CVE-2014-3089

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.…

Aug 22, 2014
Unscored —

CVE-2014-3070

The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x …

Aug 22, 2014
Unscored —

CVE-2014-3436

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote att…

Aug 22, 2014
Unscored —

CVE-2014-3083

IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not …

Aug 22, 2014
Unscored —

CVE-2014-3022

IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows rem…

Aug 22, 2014
Low —

CVE-2014-5274

phpMyAdmin cross-site scripting vulnerability in crafted view name

Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist

Aug 22, 2014
Unscored —

CVE-2014-5273

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2…

phpmyadmin phpmyadmin Debian Ubuntu

Aug 22, 2014