Skip to content
OpenAdvisories

Archive

August 2014

Vulnerabilities first published in this month (UTC), newest first.

← July 2014 2014 / August September 2014 →
  1. 113
  2. 2 
  3. 35
  4. 4 
  5. 5 
  6. 620
  7. 725
  8. 8 
  9. 9 
  10. 10 
  11. 117
  12. 1279
  13. 1312
  14. 1424
  15. 156
  16. 163
  17. 1717
  18. 1810
  19. 1920
  20. 2018
  21. 2112
  22. 2230
  23. 237
  24. 24 
  25. 2516
  26. 2621
  27. 2712
  28. 2813
  29. 2924
  30. 302
  31. 315
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.1
    CVE-2014-2381

    Schneider Electric Wonderware Inadequate Encryption Strength

    Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • Low 2.1
    CVE-2014-5398

    Schneider Electric Wonderware Input Validation

    Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML Ex…

    Schneider Electric Wonderware Information Server Portal ICS / OT
  • Low —
    CVE-2014-3594

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

    Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggre…

    horizon horizon horizon Debian Ubuntu PyPI
  • Low —
    CVE-2014-5274

    phpMyAdmin cross-site scripting vulnerability in crafted view name

    Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist