Skip to content
OpenAdvisories

Archive

6 October 2014

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2013-1436 Public exploit

    code injection in xmonad-contrib

    The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.

  • Unscored —
    CVE-2014-6389 Public exploit

    backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2014-6607 Public exploit

    M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attacker…

  • Unscored —
    CVE-2014-6409 Public exploit

    Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the auth…

  • Unscored —
    CVE-2014-2044 Public exploit EPSS 12%

    Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote au…

  • Unscored —
    CVE-2013-2645 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_1…