Skip to content
OpenAdvisories

Archive

6 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /6 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2014-1868

    Moderate severity vulnerability that affects org.restlet.jse:org.restlet

    Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • Medium —
    CVE-2014-0168

    Cross-Site Request Forgery in Jolokia

    Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

    org.jolokia:jolokia-core Maven
  • Medium —
    CVE-2014-3608

    OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service

    The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR sta…

    nova nova nova Debian Ubuntu PyPI