Skip to content
OpenAdvisories

Archive

3 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /3 January 2015 →
  1. 118
  2. 226
  3. 323
  4. 47
  5. 530
  6. 68
  7. 76
  8. 834
  9. 918
  10. 1069
  11. 1150
  12. 1231
  13. 132
  14. 14 
  15. 1527
  16. 1622
  17. 1718
  18. 1823
  19. 1948
  20. 209
  21. 21 
  22. 2210
  23. 2313
  24. 2431
  25. 255
  26. 2619
  27. 2713
  28. 2813
  29. 2910
  30. 304
  31. 3127
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2013-7416

    canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell…

  • Unscored —
    CVE-2014-9157

    Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have un…

    graphviz graphviz Debian Ubuntu
  • Unscored —
    CVE-2014-9134

    Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote…

  • Unscored —
    CVE-2014-9238

    D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file para…

  • Unscored —
    CVE-2014-9241 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attac…

  • Unscored —
    CVE-2014-9242 Public exploit

    SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-9234

    Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows rem…

  • Unscored —
    CVE-2014-9240 Public exploit

    SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to e…

  • Unscored —
    CVE-2014-9243 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-9236 Public exploit

    Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier a…

    zoph zoph Debian Ubuntu
  • Unscored —
    CVE-2014-9239

    SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (a…

  • Unscored —
    CVE-2014-9235 Public exploit

    Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated…

    zoph zoph Debian Ubuntu
  • Unscored —
    CVE-2014-9237 Public exploit

    SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2014-8773 Public exploit

    MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection me…

  • Unscored —
    CVE-2014-8774 Public exploit

    Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attack…

  • Unscored —
    CVE-2014-8772

    Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticat…

  • Unscored —
    CVE-2014-8771

    Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote a…

  • Unscored —
    CVE-2014-8104

    OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause…

    openvpn openvpn Debian Ubuntu
  • Unscored —
    CVE-2014-8775 Public exploit

    MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, whi…

  • Unscored —
    CVE-2014-9018

    Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensit…

    icecast2 icecast2 Debian Ubuntu
  • Unscored —
    CVE-2014-3988

    Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to …

  • Unscored —
    CVE-2014-9141 Public exploit

    The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which al…

  • Unscored —
    CVE-2014-9220

    SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arb…