Skip to content
OpenAdvisories

Archive

17 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /17 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Unscored —
    CVE-2014-2995 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress all…

  • Unscored —
    CVE-2014-2559 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPr…

  • Medium —
    CVE-2014-2064 Public exploit

    Jenkins allows attackers to determine whether a user exists

    The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.

    org.jenkins-ci.main:jenkins-core Maven