Skip to content
OpenAdvisories

Archive

7 January 2015

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system …

  • Unscored —

    cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgrou…

  • Unscored —

    strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer deref…

  • Unscored —

    The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authent…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote at…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before …

  • Unscored —
    CVE-2014-9567 Public exploit EPSS 43%

    Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows re…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote at…

  • Unscored —

    Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect …

  • Unscored —

    EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter r…

  • Unscored —

    EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obta…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote…