Skip to content
OpenAdvisories

Archive

8 February 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2012-4512 Public exploit EPSS 12%

    The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service…

  • High —
    CVE-2014-8739 Public exploit EPSS 92%

    jQuery File Upload Plugin Unrestricted file upload vulnerability

    Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joom…

  • Unscored —
    CVE-2014-7863 Public exploit EPSS 83%

    The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, …

  • Unscored —
    CVE-2014-2225 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow rem…

  • Unscored —
    CVE-2011-3642 Public exploit

    Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) ex…