Skip to content
OpenAdvisories

Archive

September 2014

Vulnerabilities first published in this month (UTC), newest first.

← August 2014 2014 / September October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Unscored —
    CVE-2014-4865 Public exploit

    Cross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attacke…

  • Unscored —
    CVE-2014-0556 Public exploit EPSS 85%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2014-4109 Public exploit EPSS 31%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-5464 Public exploit

    Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 a…

  • Unscored —
    CVE-2014-4863 Public exploit EPSS 16%

    The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote att…

  • Unscored —
    CVE-2014-5377 Public exploit EPSS 57%

    ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user ac…

  • Unscored —
    CVE-2012-4234 Public exploit

    Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum b…

  • Unscored —
    CVE-2012-4768 Public exploit Scanner template EPSS 10%

    Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote atta…

  • Unscored —
    CVE-2014-5465 Public exploit EPSS 14%

    Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPres…

  • Unscored —
    CVE-2014-1564 Public exploit

    Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-5521 Public exploit

    plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary c…

  • Unscored —
    CVE-2014-6041 Public exploit EPSS 18%

    The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attrib…