Skip to content
OpenAdvisories

Archive

15 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /15 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2014-1829

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-1830

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-3664

    Jenkins Path Traversal vulnerability

    Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3681

    Jenkins Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven