Ashiyane Digital Security Team WordPress Plugin cnhk-Slideshow - Arbitrary File Upload
webapps php

Edge CIS Manager - 'email' SQL Injection
webapps asp CVE-2014-3749;OSVDB-107045

High-Tech Bridge SA eGroupWare 1.8.006 - Multiple Vulnerabilities
webapps php 80 CVE-2014-2987;OSVDB-106209

Eric Sesterhenn Seo Panel - 'file' Directory Traversal
webapps php OSVDB-107696

Jeff Geiger ElasticSearch - Remote Code Execution
webapps multiple CVE-2014-3120;OSVDB-106949

Portcullis Broadcom PIPA C211 - Sensitive Information Disclosure
webapps hardware 80 CVE-2014-2046;OSVDB-106845

Jamal Pecou VM Turbo Operations Manager 4.5x - Directory Traversal
webapps cgi 80 OSVDB-106776;CVE-2014-3806

Dolev Farhi SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting
webapps windows 80 CVE-2014-3740;OSVDB-106917;OSVDB-106916

Luigi Vezzoso Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures
webapps hardware CVE-2014-2084;OSVDB-106842

Chris Hebert Alienvault Open Source SIEM (OSSIM) 4.6.1 - (Authenticated) SQL Injection (Metasploit)
webapps php 443 OSVDB-106815;CVE-2014-5383

indoushka CMS Touch - 'news.php?News_ID' SQL Injection
webapps php OSVDB-107009

indoushka CMS Touch - 'pages.php?Page_ID' SQL Injection
webapps php OSVDB-107008

High-Tech Bridge TOA - Cross-Site Request Forgery
webapps php CVE-2014-2989

Dolev Farhi Cobbler 2.4.x < 2.6.x - Local File Inclusion
webapps php CVE-2014-3225;OSVDB-106759

Deepak Rathore Collabtive 1.2 - Persistent Cross-Site Scripting
webapps php CVE-2014-3247;OSVDB-106765

Deepak Rathore Collabtive 1.2 - SQL Injection
webapps php CVE-2014-3246;OSVDB-106764