Skip to content
OpenAdvisories

Archive

21 October 2014

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2014-2531 Public exploit

    SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWor…

  • Unscored —
    CVE-2014-7280 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web …

  • Unscored —
    CVE-2014-8380 Public exploit

    Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2014-5005 Public exploit EPSS 78%

    Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attacker…

  • Unscored —
    CVE-2014-5006 Public exploit EPSS 25%

    Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attacker…

  • Unscored —
    CVE-2012-5702 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2012-5242 Public exploit

    Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to…

  • Unscored —
    CVE-2012-5243 Public exploit

    functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information …

  • Unscored —
    CVE-2014-7140 Public exploit EPSS 16%

    Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and Net…

  • Unscored —
    CVE-2014-8375 Public exploit

    SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote adminis…