Archive
6 October 2014
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Unscored —CVE-2013-1436 Public exploit
code injection in xmonad-contrib
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.
-
Unscored —CVE-2014-6389 Public exploit
backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2014-6607 Public exploit
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attacker…
-
Unscored —CVE-2014-6409 Public exploit
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the auth…
-
Unscored —
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote au…
-
Unscored —CVE-2013-2645 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_1…