Skip to content
OpenAdvisories

Archive

26 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /26 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2013-7408

    F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to…

  • Unscored —
    CVE-2013-6796 Public exploit

    The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, whi…

  • Unscored —
    CVE-2014-6635

    Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2014-3520

    OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticat…

    keystone keystone Debian Ubuntu
  • Unscored —
    CVE-2014-5520 Public exploit

    SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2014-5148

    Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," return…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2014-6037 Public exploit EPSS 84%

    Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and …

  • Unscored —
    CVE-2014-4812

    The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, wh…

  • Unscored —
    CVE-2014-6099

    The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mecha…

  • Unscored —
    CVE-2014-6133

    IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vec…

  • Unscored —
    CVE-2014-2987 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL) before 1.1.20140505, EGr…

  • Unscored —
    CVE-2013-1641

    Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers …