Skip to content
OpenAdvisories

Archive

28 November 2014

Vulnerabilities first published on this day (UTC), newest first.

← October 2014 2014 / November /28 December 2014 →
  1. 15
  2. 23
  3. 318
  4. 446
  5. 519
  6. 630
  7. 721
  8. 87
  9. 9 
  10. 1017
  11. 1150
  12. 125
  13. 139
  14. 147
  15. 1511
  16. 1622
  17. 1715
  18. 1828
  19. 1924
  20. 2028
  21. 2113
  22. 22 
  23. 239
  24. 2438
  25. 2520
  26. 2626
  27. 271
  28. 2816
  29. 29 
  30. 3013
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2014-7178 Public exploit

    Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which i…

  • Unscored —
    CVE-2014-8423 Public exploit EPSS 62%

    Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute a…

  • Unscored —
    CVE-2014-8424 Public exploit EPSS 60%

    ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authenticati…

  • Unscored —
    CVE-2014-8801 Public exploit EPSS 18%

    Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPres…

  • Unscored —
    CVE-2014-8799 Public exploit Scanner template EPSS 68%

    Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before …

  • Unscored —
    CVE-2014-8429 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1.0.1, and earlier allow…

  • Unscored —
    CVE-2014-8425 Public exploit

    The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the conf…