Archive

20 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /20 November 2014 →

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

Unscored —

CVE-2014-3978 Public exploit

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands…

Oct 20, 2014
Unscored —

CVE-2014-5276 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated …

Oct 20, 2014
Unscored —

CVE-2014-5275 Public exploit

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote a…

Oct 20, 2014
Unscored —

CVE-2012-5865 Public exploit

SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL…

Oct 20, 2014
Unscored —

CVE-2012-5701 Public exploit

Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute …

Oct 20, 2014
Unscored —

CVE-2014-2081 Public exploit

Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua be…

Oct 20, 2014
Unscored —

CVE-2014-5094 Public exploit

Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.…

Oct 20, 2014
Unscored —

CVE-2012-5244 Public exploit

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQ…

Oct 20, 2014
Unscored —

CVE-2014-6308 Public exploit Scanner template EPSS 22%

Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot…

Oct 20, 2014