Skip to content
OpenAdvisories

Archive

8 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /8 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2014-9581 Public exploit

    Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to rea…

  • Unscored —
    CVE-2014-9583 Public exploit EPSS 80%

    common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-A…

  • Unscored —
    CVE-2014-9582 Public exploit

    Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers t…

  • Unscored —
    CVE-2014-9580 Public exploit

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2015-0920

    Cross-site request forgery (CSRF) vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote at…

  • Unscored —
    CVE-2015-0917

    Cross-site scripting (XSS) vulnerability in the backend in Kajona before 4.6.3 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2015-0918

    Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers…

  • Unscored —
    CVE-2015-0919 Public exploit

    Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrato…

  • Unscored —
    CVE-2014-9577

    VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote authenticate…

  • Unscored —
    CVE-2014-9576

    VDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root Postgres account and …

  • Unscored —
    CVE-2014-9575

    VDG Security SENSE (formerly DIVA) before 2.3.15 allows remote attackers to bypass authentication, and consequently rea…

  • Unscored —
    CVE-2014-9579

    VDG Security SENSE (formerly DIVA) 2.3.13 stores administrator credentials in cleartext, which allows attackers to obta…

  • Unscored —
    CVE-2014-9578

    VDG Security SENSE (formerly DIVA) 2.3.13 performs authentication with a password hash instead of a password, which all…

  • Medium —
    CVE-2012-6684

    RedCloth Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

    RedCloth ruby-redcloth Debian RubyGems
  • Unscored —
    CVE-2012-5853

    SQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in the AJAX Post Search (c…

  • Unscored —
    CVE-2014-9473 Public exploit EPSS 14%

    Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows …