Skip to content
OpenAdvisories

Archive

August 2014

Vulnerabilities first published in this month (UTC), newest first.

← July 2014 2014 / August September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Unscored —
    CVE-2014-3914 Public exploit EPSS 73%

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows…

  • Unscored —
    CVE-2014-5192 Public exploit

    SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-5194 Public exploit

    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arb…

  • Unscored —
    CVE-2014-5193 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-5189 Public exploit

    SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attacker…

    Web / CMS
  • Unscored —
    CVE-2012-6653 Public exploit

    Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecifie…

  • Unscored —
    CVE-2014-3434 Public exploit

    Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,…

  • Unscored —
    CVE-2014-5180 Public exploit

    SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 f…

  • Unscored —
    CVE-2014-5089 Public exploit

    SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute…

  • Unscored —
    CVE-2014-5082 Public exploit

    Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus a…

  • Unscored —
    CVE-2014-5088 Public exploit

    Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —
    CVE-2014-5090 Public exploit

    admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell m…

  • Unscored —
    CVE-2013-5757 Public exploit

    Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrar…

  • Unscored —
    CVE-2013-5758 Public exploit EPSS 12%

    cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by…

  • Unscored —
    CVE-2013-5756 Public exploit

    Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary fi…