Skip to content
OpenAdvisories

Archive

17 November 2014

Vulnerabilities first published on this day (UTC), newest first.

← October 2014 2014 / November /17 December 2014 →
  1. 15
  2. 23
  3. 318
  4. 446
  5. 519
  6. 630
  7. 721
  8. 87
  9. 9 
  10. 1017
  11. 1150
  12. 125
  13. 139
  14. 147
  15. 1511
  16. 1622
  17. 1715
  18. 1828
  19. 1924
  20. 2028
  21. 2113
  22. 22 
  23. 239
  24. 2438
  25. 2520
  26. 2626
  27. 271
  28. 2816
  29. 29 
  30. 3013
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2012-1669 Public exploit

    Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and exe…

  • Unscored —
    CVE-2012-6665 Public exploit

    Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2014-0059

    JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable…

  • Unscored —
    CVE-2013-3678

    Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to …

  • Unscored —
    CVE-2014-3629

    XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2014-8955

    Cross-site scripting (XSS) vulnerability in the Contact Form Clean and Simple (clean-and-simple-contact-form-by-meg-nic…

  • Unscored —
    CVE-2014-8499 Public exploit EPSS 36%

    Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Serv…

  • Unscored —
    CVE-2014-8954 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2014-8517 Public exploit EPSS 69%

    The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thr…

    tnftp Debian
  • Unscored —
    CVE-2014-8498 Public exploit EPSS 13%

    SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager …

  • Unscored —
    CVE-2014-8596 Public exploit

    Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL …

  • Unscored —
    CVE-2014-8732

    Cross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbit…

  • Unscored —
    CVE-2014-8727 Public exploit

    Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administra…

  • Unscored —
    CVE-2014-8953 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers t…

  • Medium 5.3
    CVE-2014-5277

    Man-in-the-Middle (MitM)

    Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position b…

    docker.io docker.io github.com/docker/docker docker-py Debian Ubuntu PyPI Go