Skip to content
OpenAdvisories

Archive

28 November 2014

Vulnerabilities first published on this day (UTC), newest first.

← October 2014 2014 / November /28 December 2014 →
  1. 15
  2. 23
  3. 318
  4. 446
  5. 519
  6. 630
  7. 721
  8. 87
  9. 9 
  10. 1017
  11. 1150
  12. 125
  13. 139
  14. 147
  15. 1511
  16. 1622
  17. 1715
  18. 1828
  19. 1924
  20. 2028
  21. 2113
  22. 22 
  23. 239
  24. 2438
  25. 2520
  26. 2626
  27. 271
  28. 2816
  29. 29 
  30. 3013
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2014-7178 Public exploit

    Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which i…

  • Unscored —
    CVE-2014-7850

    Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject ar…

    freeipa Debian
  • Unscored —
    CVE-2014-8423 Public exploit EPSS 62%

    Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute a…

  • Unscored —
    CVE-2014-8424 Public exploit EPSS 60%

    ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authenticati…

  • Unscored —
    CVE-2014-8801 Public exploit EPSS 18%

    Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPres…

  • Unscored —
    CVE-2014-8799 Public exploit Scanner template EPSS 68%

    Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before …

  • Unscored —
    CVE-2014-8994

    The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a sy…

  • Unscored —
    CVE-2014-8429 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1.0.1, and earlier allow…

  • Unscored —
    CVE-2014-8425 Public exploit

    The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the conf…

  • Unscored —
    CVE-2014-9089

    Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow remote attackers to exe…

  • Unscored —
    CVE-2014-4832

    IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulner…

  • Unscored —
    CVE-2014-4829

    Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patc…

  • Unscored —
    CVE-2014-4883

    resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random value…

    lwipv6 Ubuntu
  • Unscored —
    CVE-2014-4831

    IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulner…

  • Unscored —
    CVE-2014-6075

    IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulner…

  • Unscored —
    CVE-2014-3407

    The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly al…