Skip to content
OpenAdvisories

Archive

25 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /25 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2014-5456

    Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticat…

  • Unscored —
    CVE-2014-5458

    SQL injection vulnerability in sqrl_verify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2014-5335 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attac…

  • Unscored —
    CVE-2014-5457

    QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for …

  • Unscored —
    CVE-2014-5454

    Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authentic…

  • Unscored —
    CVE-2014-5453 Public exploit

    Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory…

  • Medium 5.3
    CVE-2014-5455 Public exploit

    Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and Op…

  • High 7.5
    CVE-2014-3589

    Pillow denial of service via Crafted Block Size

    PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

    pillow pillow pillow Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-2216

    The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on FortiGate devices allows …

  • Medium 6.5
    CVE-2014-5253

    OpenStack Keystone Domain-scoped tokens don't get revoked

    OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.

    keystone keystone keystone Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2014-5252

    OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events

    The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET o…

    keystone keystone keystone Debian Ubuntu PyPI
  • Medium —
    CVE-2014-5356

    OpenStack Glance improper validation of the image_size_cap configuration option

    OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause …

    glance glance glance Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2014-5251

    OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events

    The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain…

    keystone keystone keystone Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-0974

    The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcom…

  • Unscored —
    CVE-2014-0973

    The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed wi…

  • Unscored —
    CVE-2014-4325

    The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovatio…