Skip to content
OpenAdvisories

Archive

13 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /13 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

94 results · Feed

  • Unscored —
    CVE-2014-100017 Public exploit

    Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2014-100018

    Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers t…

  • Unscored —
    CVE-2014-100037

    Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-100033

    Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2014-100019

    SQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2014-100032

    Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject ar…

  • Unscored —
    CVE-2014-10032 Public exploit

    SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2014-10038 Public exploit

    SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-10034 Public exploit

    Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execu…

  • Unscored —
    CVE-2014-10035 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administra…

  • Unscored —
    CVE-2014-10031 Public exploit

    Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-10036

    Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2014-10037 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .…

  • Unscored —
    CVE-2014-10033 Public exploit

    SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.…

  • Unscored —
    CVE-2014-100009

    The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remo…

  • Unscored —
    CVE-2014-100002 Public exploit EPSS 60%

    Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read ar…

  • Unscored —
    CVE-2014-100004 Scanner template

    Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows remote attackers to i…

  • Unscored —
    CVE-2014-100007

    Cross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticat…

  • Unscored —
    CVE-2014-100008

    Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel…

  • Unscored —
    CVE-2014-100006

    Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.…

  • Unscored —
    CVE-2014-100010

    Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2014-100001

    Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allo…

  • High 8.0
    CVE-2014-100005 Exploited Public exploit EPSS 43%

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

    KEV May 16, 2024
  • Unscored —
    CVE-2014-100003 Public exploit

    SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wo…

    Web / CMS
  • Unscored —
    CVE-2014-10015 Public exploit

    SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10026

    index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtai…

  • Unscored —
    CVE-2014-10009 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2014-10013 Public exploit

    SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to…

    Web / CMS
  • Unscored —
    CVE-2014-10006

    Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the a…

  • Unscored —
    CVE-2014-10024

    Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx pl…

  • Unscored —
    CVE-2014-10008 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authen…

  • Unscored —
    CVE-2014-10023 Public exploit

    Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2014-10001 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacke…

  • Unscored —
    CVE-2014-10021 Public exploit EPSS 59%

    Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remot…

  • Unscored —
    CVE-2014-10005

    Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter t…

  • Unscored —
    CVE-2014-10029 Public exploit

    SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10022

    Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, relate…

    trafficserver Debian
  • Unscored —
    CVE-2014-10010 Public exploit

    Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2014-10004

    SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-10017

    Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to …