Skip to content
OpenAdvisories

Archive

2 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /2 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2013-7418

    cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitra…

  • Unscored —
    CVE-2014-9461

    Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remo…

  • Unscored —
    CVE-2014-9428

    The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linu…

    linux linux linux-lts-utopic Debian Ubuntu
  • Unscored —
    CVE-2014-7294

    Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory…

  • Unscored —
    CVE-2014-7293

    Cross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Pat…

  • Unscored —
    CVE-2014-9444 Scanner template

    Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to…

  • Unscored —
    CVE-2014-9457 Public exploit

    SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2014-9455

    SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2014-9453

    Multiple cross-site scripting (XSS) vulnerabilities in simple-visitor-stat.php in the Simple visitor stat plugin for Wo…

    Web / CMS
  • Unscored —
    CVE-2014-9451

    Multiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security SENSE (formerly DIVA) 2…

  • Unscored —
    CVE-2014-9449

    Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to ca…

    exiv2 Debian
  • Unscored —
    CVE-2014-9459

    Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha…

  • Unscored —
    CVE-2014-9446

    Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 …

  • Unscored —
    CVE-2014-9460

    Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow r…

  • Unscored —
    CVE-2014-9456 Public exploit EPSS 11%

    Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an E…

  • Unscored —
    CVE-2014-9447

    Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 all…

    elfutils elfutils Debian Ubuntu
  • Unscored —
    CVE-2014-9445 Public exploit

    SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to exe…

  • Unscored —
    CVE-2014-9448 Public exploit

    Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or…

  • Unscored —
    CVE-2014-9450

    Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, a…

    zabbix Debian
  • Unscored —
    CVE-2014-9454

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPres…

  • Unscored —
    CVE-2014-9458

    Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows r…

  • Unscored —
    CVE-2014-9452

    Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2013-7417

    Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote…

  • Unscored —
    CVE-2014-9435 Public exploit

    Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL…

  • Unscored —
    CVE-2014-9436 Public exploit

    Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2014-9442

    SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote…

  • Unscored —
    CVE-2014-9440 Public exploit

    SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-9438

    Cross-site request forgery (CSRF) vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attacke…

  • Unscored —
    CVE-2014-9439 Public exploit

    Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-9441

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow…

  • Unscored —
    CVE-2014-9437

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1.61 for WordPress allow …

  • Unscored —
    CVE-2014-9434 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.…

  • Unscored —
    CVE-2014-9443

    Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to…