Skip to content
OpenAdvisories

Archive

11 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /11 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Unscored —
    CVE-2014-3985

    The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash)…

    miniupnpc miniupnpc Debian Ubuntu
  • Unscored —
    CVE-2014-3740 Public exploit

    Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arb…

  • Unscored —
    CVE-2014-3609 EPSS 56%

    HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service …

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2014-5879

    The tvguide (aka kenneth.tvguide) application 1.9.14 for Android does not verify X.509 certificates from SSL servers, w…

  • Unscored —
    CVE-2014-5882

    The Homoo Ijiri (aka jp.co.applica) application 3.7 for Android does not verify X.509 certificates from SSL servers, wh…

  • Unscored —
    CVE-2014-5881

    The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-6043 Public exploit EPSS 13%

    ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database…

  • Unscored —
    CVE-2014-5393

    Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1…

  • Unscored —
    CVE-2014-5391

    Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.424…

  • Unscored —
    CVE-2014-5460 Public exploit EPSS 71%

    Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remo…

  • Unscored —
    CVE-2014-5129

    Cross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-4887

    Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in I…

  • Unscored —
    CVE-2012-0984 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-4240 Public exploit

    SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenti…

  • Unscored —
    CVE-2014-6239

    SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension before 0.3.6 allow…

  • Unscored —
    CVE-2014-6237

    Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authentic…

  • Unscored —
    CVE-2014-6070 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to injec…

  • Unscored —
    CVE-2014-6235 Public exploit

    Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-6241

    SQL injection vulnerability in the wt_directory extension before 1.4.1 for TYPO3 allows remote attackers to execute arb…

  • Unscored —
    CVE-2014-6232

    Unspecified vulnerability in the LDAP (eu_ldap) extension before 2.8.18 for TYPO3 allows remote authenticated users to …

  • Unscored —
    CVE-2014-6233

    SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to …

  • Unscored —
    CVE-2014-6236

    Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote at…

  • Unscored —
    CVE-2014-6234

    Cross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol) extension before 1.0.2 for T…

  • Unscored —
    CVE-2014-6231

    Unspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3 allows remote authenti…

  • Unscored —
    CVE-2014-6240

    Cross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0.4.3 and earlier for T…

  • Unscored —
    CVE-2014-6238

    Cross-site scripting (XSS) vulnerability in the Akronymmanager (aka SB Folderdownload) extension 0.5.0 and earlier for …

  • Unscored —
    CVE-2014-2223 Public exploit EPSS 10%

    Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authe…

  • Unscored —
    CVE-2014-5519 Public exploit EPSS 65%

    The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a de…

  • Unscored —
    CVE-2014-5877

    The TV Guide (aka net.micene.minigroup.palimpsests.lite) application 5.4.3 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-5873

    The Sears (aka com.sears.android) application 6.2.8 for Android does not verify X.509 certificates from SSL servers, wh…

  • Unscored —
    CVE-2014-5876

    The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509 certificates from SSL servers, …

  • Unscored —
    CVE-2014-5865

    The Ask.com (aka com.ask.android) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, wh…

  • Unscored —
    CVE-2014-5870

    The Kmart (aka com.kmart.android) application 6.2.8 for Android does not verify X.509 certificates from SSL servers, wh…

  • Unscored —
    CVE-2014-5874

    The SplashID (aka com.splashidandroid) application 7.2.2 for Android does not verify X.509 certificates from SSL server…

  • Unscored —
    CVE-2014-5864

    The Swish payments (aka se.bankgirot.swish) application 2 for Android does not verify X.509 certificates from SSL serve…

  • Unscored —
    CVE-2014-5871

    The Piwik Mobile 2 (aka org.piwik.mobile2) application 2.0.1 for Android does not verify X.509 certificates from SSL se…

  • Unscored —
    CVE-2014-5878

    The ium (aka net.ium.mobile.android) application 3.3.4 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-5867

    The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-5866

    The CA DMV (aka gov.ca.dmv) application 2 for Android does not verify X.509 certificates from SSL servers, which allows…

  • Unscored —
    CVE-2014-5869

    The CNNMoney Portfolio (aka com.cnn.cnnmoney) application 1.03 for Android does not verify X.509 certificates from SSL …