Skip to content
OpenAdvisories

Archive

16 October 2014

Vulnerabilities first published on this day (UTC), newest first.

126 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 a…

  • Unscored —
    CVE-2014-8305 Public exploit

    Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Modal Frame API module 6.x-1.x before 6.x-1.9 for Drupal allows remote …

  • Unscored —
    CVE-2014-7237 EPSS 20%

    lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended ac…

  • Unscored —

    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli…

  • Unscored —
    CVE-2014-3704 Public exploit Scanner template EPSS 100%

    The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct…