Skip to content
OpenAdvisories

Archive

8 January 2015

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-9581 Public exploit

    Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to rea…

  • Unscored —
    CVE-2014-9583 Public exploit EPSS 80%

    common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-A…

  • Unscored —
    CVE-2014-9582 Public exploit

    Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers t…

  • Unscored —
    CVE-2014-9580 Public exploit

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2015-0919 Public exploit

    Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrato…

  • Unscored —
    CVE-2014-9473 Public exploit EPSS 14%

    Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows …