Skip to content
OpenAdvisories

Archive

5 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /5 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2014-0877

    IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictio…

  • Unscored —
    CVE-2014-4863 Public exploit EPSS 16%

    The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote att…

  • Unscored —
    CVE-2014-4862 EPSS 17%

    The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows rem…

  • Unscored —
    CVE-2014-3910

    Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an att…

  • Unscored —
    CVE-2014-3909

    Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions …

  • Medium 4.3
    CVE-2014-2379

    Sensys Networks Traffic Sensor Missing Encryption of Sensitive Data

    Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network.

    Sensys Networks VSN240-T VSN240-F
  • Medium 6.5
    CVE-2014-2378

    Sensys Networks Traffic Sensor Download of Code Without Integrity Check

    Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

    Sensys Networks VSN240-T VSN240-F
  • Unscored —
    CVE-2014-5256

    Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that trigge…

    nodejs libv8-3.14 Debian Ubuntu
  • Unscored —
    CVE-2014-6252

    Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.2…

  • Unscored —
    CVE-2014-6028

    TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookie…

  • Unscored —
    CVE-2014-6029

    TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an …

  • Unscored —
    CVE-2014-5508

    Multiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote authenticated IRCops or H…

  • Unscored —
    CVE-2014-5036

    The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used,…

  • Unscored —
    CVE-2014-0610

    The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attacker…

  • Unscored —
    CVE-2014-0863

    The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stor…