Skip to content
OpenAdvisories

Archive

27 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /27 January 2015 →
  1. 118
  2. 226
  3. 323
  4. 47
  5. 530
  6. 68
  7. 76
  8. 834
  9. 918
  10. 1069
  11. 1150
  12. 1231
  13. 132
  14. 14 
  15. 1527
  16. 1622
  17. 1718
  18. 1823
  19. 1948
  20. 209
  21. 21 
  22. 2210
  23. 2313
  24. 2431
  25. 255
  26. 2619
  27. 2713
  28. 2813
  29. 2910
  30. 304
  31. 3127
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2013-4793

    The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS…

  • Unscored —
    CVE-2013-6041 Public exploit

    index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2013-6043 Public exploit

    The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication atte…

  • Medium —
    CVE-2013-6919

    phpThumb is vulnerable to Server-Side Request Forgery (SSRF)

    The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.

    james-heinrich/phpthumb Packagist
  • Unscored —
    CVE-2013-6227 Public exploit

    Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly…

  • Unscored —
    CVE-2013-6241

    The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14,…

  • Medium —
    CVE-2013-5958

    Symfony Denial of Service Via Long Password Hashing

    The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as d…

    symfony/symfony symfony/security symfony/polyfill Packagist
  • Unscored —
    CVE-2014-8512

    Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers …

  • Unscored —
    CVE-2014-8514

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attacker…

  • Unscored —
    CVE-2014-8511

    Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers …

  • Unscored —
    CVE-2014-8513

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attacker…

  • Critical 10.0
    CVE-2014-9188

    Schneider Electric ProClima Command Injection

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clari…

    Schneider Electric ProClima ICS / OT
  • Unscored —
    CVE-2014-0748

    apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID …