CVEs published in August 2014
471 vulnerabilities, 60 critical, 3 exploited.
- sphiderStatic code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote...6.5 Medium
- sphiderCross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote...4.3 Medium
- sphiderSQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to...7.5 High
- ckeditorThe Preview plugin in CKEditor allows Cross-site scripting (XSS)4.3 Medium
- si captcha anti-spam project captcha anti-spamCross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA...4.3 Medium
- leadoctopus lead octopusSQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress...7.5 High
- lyris list managerCross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a...4.3 Medium
- embarcadero er\/studio data architectStack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX...6.8 Medium
- rocketsoftware rocket servergraphDirectory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket...10.0 High
- pyplateDirectory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read...5.0 Medium
- pyplateCross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows...6.8 Medium
- pyplatePyplate 0.08 does not set the secure flag for the id cookie in an https session, which makes it...5.0 Medium
- pyplatePyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which...5.0 Medium
- pyplateusr/lib/cgi-bin/create_passwd_file.py in Pyplate 0.08 uses world-readable permissions for passwd...2.1 Low
- xbmcXBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local...2.1 Low
- teampassMultiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass before 2.1.20 allow...4.3 Medium
- teampassMultiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to...7.5 High
- teampassTeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to...7.5 High
- teampassTeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language...7.5 High
- solarwinds network configuration managerHeap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows...6.8 Medium
- splunkThe "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to...9.0 High
- splunkDirectory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote...9.3 High
- opensslThe ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL...4.3 Medium
- openstack novaOpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability4.3 Medium
- opensslMultiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1...7.5 High
- opensslThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...4.3 Medium
- opensslRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 Medium
- tom m8te plugin project tom-m8te pluginDirectory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows...5.0 Medium
- all video gallery plugin project all-video-gallerySQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress...6.5 Medium
- quartz plugin project pluginSQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated...6.0 Medium
- stripshow plugin project stripshowSQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for...6.5 Medium
- simple retail menus plugin project simple-retail-menusSQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail...6.5 Medium
- ostenta yawppMultiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote...6.0 Medium
- last.fm rotation plugin project lastfm-rotation pluginDirectory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation)...5.0 Medium
- hdwplayer hdw-player-video-player-video-gallerySQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player...6.5 Medium
- redhat enterprise virtualizationThe oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots...3.5 Low
- symantec endpoint protectionBuffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x...6.9 Medium
- all video gallery plugin project video gallery pluginUnspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for...7.5 High
- freelinking for case tracker project for case tracker, freelinking project freelinking +1 moreThe freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not...4.3 Medium
- efssoft easy file sharing web serverMultiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8...4.3 Medium
- status2kadmin/options/logs.php in Status2k allows remote authenticated administrators to execute...6.5 Medium
- status2kSQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated...7.5 High
- status2kCross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary...4.3 Medium
- sphiderMultiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider...7.5 High
- ipython notebook, mageia, opensuse +2 moreIPython Notebook vulnerable to improper validation of the origin of websocket requests6.8 Medium
- gnu readline, fedoraproject fedora, mageia +1 more +3 moreThe _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create...3.3 Low
- mediawikiMediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22...4.3 Medium
- mediawikiThe JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through...6.8 Medium
- zend framework, debian linux +1 moreThe Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle...9.8 Critical
- Show moreLoading…