Skip to content
OpenAdvisories

Archive

11 September 2014

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2014-3740 Public exploit

    Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arb…

  • Unscored —
    CVE-2014-6043 Public exploit EPSS 13%

    ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database…

  • Unscored —
    CVE-2014-5460 Public exploit EPSS 71%

    Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remo…

  • Unscored —
    CVE-2012-0984 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-4240 Public exploit

    SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenti…

  • Unscored —
    CVE-2014-6070 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to injec…

  • Unscored —
    CVE-2014-6235 Public exploit

    Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-2223 Public exploit EPSS 10%

    Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authe…

  • Unscored —
    CVE-2014-5519 Public exploit EPSS 65%

    The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a de…

  • Unscored —
    CVE-2014-2624 Public exploit EPSS 65%

    Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute a…