Skip to content
OpenAdvisories

Archive

26 October 2014

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2013-6796 Public exploit

    The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, whi…

  • Unscored —
    CVE-2014-5520 Public exploit

    SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2014-6037 Public exploit EPSS 84%

    Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and …

  • Unscored —
    CVE-2014-2987 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL) before 1.1.20140505, EGr…