Skip to content
OpenAdvisories

Archive

29 August 2014

Vulnerabilities first published on this day (UTC), newest first.

← July 2014 2014 / August /29 September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2014-2390

    Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) …

  • Unscored —
    CVE-2014-5119 Public exploit EPSS 17%

    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dep…

    glibc eglibc Debian Ubuntu
  • Unscored —
    CVE-2014-5073 Public exploit EPSS 76%

    vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands…

  • Unscored —
    CVE-2014-5147

    Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2014-5247

    The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 b…

    ganeti Debian
  • Unscored —
    CVE-2010-5110

    DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF fi…

    poppler Debian
  • Unscored —
    CVE-2012-1503 Public exploit

    Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote …

  • Unscored —
    CVE-2014-4930

    Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 bui…

  • Unscored —
    CVE-2014-2593

    The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary c…

  • Unscored —
    CVE-2014-5337 Public exploit EPSS 17%

    The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected pos…

  • Unscored —
    CVE-2014-5127

    Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect …

  • Unscored —
    CVE-2014-5128

    Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attacke…

  • Unscored —
    CVE-2013-5467 Public exploit

    Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and M…

  • Unscored —
    CVE-2014-0888

    IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenti…

  • Unscored —
    CVE-2014-0600

    FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or …

  • Unscored —
    CVE-2014-0897

    The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a wea…

  • Unscored —
    CVE-2014-4806

    The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003,…

  • Unscored —
    CVE-2014-3349

    Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of fil…

  • Unscored —
    CVE-2014-3024

    Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5…

  • Unscored —
    CVE-2014-3084

    IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5…

  • Unscored —
    CVE-2014-3351

    Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a probl…

  • Unscored —
    CVE-2014-3350

    Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allo…

  • Unscored —
    CVE-2014-3093

    IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) th…

  • Unscored —
    CVE-2014-3346

    The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software…