Skip to content
OpenAdvisories

Archive

2 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /2 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2014-0485

    S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code…

    s3ql Debian
  • Unscored —
    CVE-2014-6064

    The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2…

  • Unscored —
    CVE-2014-5137

    Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending o…

  • Unscored —
    CVE-2014-5521 Public exploit

    plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary c…

  • Unscored —
    CVE-2014-5340

    The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which al…

  • Unscored —
    CVE-2014-5339

    Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk …

  • Unscored —
    CVE-2014-5136

    Cross-site scripting (XSS) vulnerability in Innovative Interfaces Sierra Library Services Platform 1.2_3 allows remote …

  • Unscored —
    CVE-2014-6041 Public exploit EPSS 18%

    The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attrib…

  • Unscored —
    CVE-2014-3861

    Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbi…

  • Unscored —
    CVE-2014-3862

    CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted refer…

  • Unscored —
    CVE-2014-5452

    CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML at…

  • Unscored —
    CVE-2014-5076

    The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component…