Skip to content
OpenAdvisories

Archive

28 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /28 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2014-3347

    Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers t…

  • Unscored —
    CVE-2014-3345

    The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software…

  • Unscored —
    CVE-2014-4199

    vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local…

    open-vm-tools open-vm-tools Debian Ubuntu
  • Unscored —
    CVE-2014-4200

    vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 pe…

    open-vm-tools Debian
  • Medium 4.7
    CVE-2014-0762

    CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

    The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually…

    CG Automation ePAQ-9410 Substation Gateway
  • High 7.1
    CVE-2014-0761

    CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

    The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

    CG Automation ePAQ-9410 Substation Gateway
  • Unscored —
    CVE-2014-4619

    EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P…

  • Unscored —
    CVE-2014-3344

    Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home…

  • High 7.8
    CVE-2014-2380

    Schneider Electric Wonderware Inadequate Encryption Strength

    Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • Low 2.1
    CVE-2014-2381

    Schneider Electric Wonderware Inadequate Encryption Strength

    Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • Low 2.1
    CVE-2014-5398

    Schneider Electric Wonderware Input Validation

    Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML Ex…

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • High 7.5
    CVE-2014-5397

    Schneider Electric Wonderware Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • High 7.5
    CVE-2014-5399

    Schneider Electric Wonderware SQL Injection

    SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    Schneider Electric Wonderware Information Server Portal ICS / OT