Skip to content
OpenAdvisories

Archive

21 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /21 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

181 results · Feed

  • Unscored —
    CVE-2014-3111

    Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject…

  • Unscored —
    CVE-2014-2531 Public exploit

    SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWor…

  • Unscored —
    CVE-2014-7280 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web …

  • Unscored —
    CVE-2014-4517

    Cross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier fo…

  • Unscored —
    CVE-2014-4514

    Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and ea…

  • Unscored —
    CVE-2014-4577 Scanner template

    Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earl…

  • Unscored —
    CVE-2014-8377

    Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-8380 Public exploit

    Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2014-8378

    Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated us…

  • Unscored —
    CVE-2014-8379

    Multiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote aut…

  • Unscored —
    CVE-2014-8376

    Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4…

  • Unscored —
    CVE-2014-5005 Public exploit EPSS 78%

    Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attacker…

  • Unscored —
    CVE-2014-5006 Public exploit EPSS 25%

    Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attacker…

  • Unscored —
    CVE-2013-7406

    SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via…

    Web / CMS
  • Unscored —
    CVE-2012-5702 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-5242 Public exploit

    Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to…

  • Unscored —
    CVE-2012-5243 Public exploit

    functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information …

  • Unscored —
    CVE-2014-7140 Public exploit EPSS 16%

    Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and Net…

  • Unscored —
    CVE-2014-8375 Public exploit

    SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote adminis…

  • Unscored —
    CVE-2014-7773

    The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not ve…

  • Unscored —
    CVE-2014-7778

    The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL server…

  • Unscored —
    CVE-2014-7643

    The C.R. Group (aka com.c.r.group) application 1.0 for Android does not verify X.509 certificates from SSL servers, whi…

  • Unscored —
    CVE-2014-7677

    The Scudetto (aka com.scudetto) application 2.7 for Android does not verify X.509 certificates from SSL servers, which …

  • Unscored —
    CVE-2014-7718

    The Travel+Leisure (aka com.magzter.travelleisure) application 3.0 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-7661

    The Masquito Blogger (aka com.wmasquito) application 0.1 for Android does not verify X.509 certificates from SSL server…

  • Unscored —
    CVE-2014-7697

    The Eyvah! Bosandim ozgurum (aka com.wEyvahBosandimBlog) application 0.1 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-7775

    The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates fro…

  • Unscored —
    CVE-2014-7700

    The Flying Fox (aka com.chillingo.slyfoxfree.android.aja) application 1.0.0 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-7765

    The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) application 1.6.3 for Android does not verify X.509 cer…

  • Unscored —
    CVE-2014-7763

    The Listen up! mirucho (aka jp.ameba.kiiteyo.android) application 1.1.8 for Android does not verify X.509 certificates …

  • Unscored —
    CVE-2014-7744

    The Musulmanin.com (aka com.wSalyafiyailimurdjiya) application 0.1 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-7708

    The Raven - The Culture Lover (aka com.booksbyraven) application 1.60 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-7647

    The BOOKING DISCOUNT (aka com.wmygoodhotelscom) application 0.1 for Android does not verify X.509 certificates from SSL…

  • Unscored —
    CVE-2014-7714

    The ibon (aka tw.net.pic.mobi) application 3.2.1 for Android does not verify X.509 certificates from SSL servers, which…

  • Unscored —
    CVE-2014-7800

    The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-7795

    The Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-7707

    The Outdoor Design And Living (aka com.pocketmagsau.outdoordesignandliving) application @7F080181 for Android does not …

  • Unscored —
    CVE-2014-7685

    The Razer Comms - Gaming Messenger (aka com.razerzone.comms) application 1.3.07 for Android does not verify X.509 certi…

  • Unscored —
    CVE-2014-7776

    The Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509 certificates from SSL serve…

  • Unscored —
    CVE-2014-7659

    The ExpeditersOnline.com Forum (aka com.quoord.tapatalkeo.activity) application 3.7.13 for Android does not verify X.50…