Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

124 results · Clear filters · Feed

  • Unscored —
    CVE-2014-10029 Public exploit

    SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10010 Public exploit

    Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2014-10020 Public exploit

    SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2014-10019 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-G…

  • Unscored —
    CVE-2014-10011 Public exploit EPSS 10%

    Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView c…

  • Unscored —
    CVE-2014-10018 Public exploit

    Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI mode…

  • Unscored —
    CVE-2014-10014 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attack…

  • Unscored —
    CVE-2013-7420 Public exploit

    Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text att…

  • High 8.8
    CVE-2014-9495 Public exploit

    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when runnin…

    texlive-bin libpng1.6 Debian
  • Unscored —
    CVE-2015-0921 Public exploit EPSS 17%

    XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.…

  • Unscored —
    CVE-2015-0922 Public exploit EPSS 13%

    McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers…

  • Unscored —
    CVE-2015-0205 Public exploit EPSS 22%

    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client au…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0204 Public exploit EPSS 99%

    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3570 Public exploit EPSS 22%

    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly cal…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-8275 Public exploit EPSS 15%

    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificat…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-9581 Public exploit

    Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to rea…

  • Unscored —
    CVE-2014-9583 Public exploit EPSS 80%

    common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-A…

  • Unscored —
    CVE-2014-9582 Public exploit

    Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers t…

  • Unscored —
    CVE-2014-9580 Public exploit

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2015-0919 Public exploit

    Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrato…

  • Unscored —
    CVE-2014-9473 Public exploit EPSS 14%

    Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows …

  • Unscored —
    CVE-2014-9567 Public exploit EPSS 43%

    Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows re…

  • Unscored —
    CVE-2014-9528 Public exploit

    SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControll…

  • Unscored —
    CVE-2014-2598 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allow…

  • Unscored —
    CVE-2014-9516 Public exploit

    Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-9522 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to injec…

  • Unscored —
    CVE-2013-2131 Public exploit EPSS 11%

    Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attacke…

    rrdtool rrdtool Debian Ubuntu
  • Unscored —
    CVE-2014-9464 Public exploit

    SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-5317 Public exploit

    Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute a…

  • Unscored —
    CVE-2010-5315 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the au…

  • Unscored —
    CVE-2010-5318 Public exploit

    The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the admini…

  • Unscored —
    CVE-2014-9457 Public exploit

    SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2014-9456 Public exploit EPSS 11%

    Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an E…

  • Unscored —
    CVE-2014-9445 Public exploit

    SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to exe…

  • Unscored —
    CVE-2014-9448 Public exploit

    Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or…

  • Unscored —
    CVE-2014-9435 Public exploit

    Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL…

  • Unscored —
    CVE-2014-9436 Public exploit

    Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2014-9440 Public exploit

    SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-9439 Public exploit

    Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-9434 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.…