Skip to content
OpenAdvisories

Archive

8 September 2014

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Unscored —

    The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obt…

  • Unscored —

    Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack …

  • Unscored —

    Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of servic…

  • Unscored —

    Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified,…

  • Unscored —
    CVE-2014-5464 Public exploit

    Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 a…