Skip to content
OpenAdvisories

Archive

29 September 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2013-3632 Public exploit EPSS 57%

    The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users…

  • High —

    Gentoo Portage does not verify X.509 certificates from SSL servers

    The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certi…