Benjamin Harris PhpWiki - Remote Command Execution
webapps php 80 OSVDB-110576;CVE-2014-5519

Benjamin Harris ActualAnalyzer Lite 2.81 - Command Execution
webapps php 80 OSVDB-110601

Pedro Ribeiro ManageEngine DeviceExpert 5.9 - User Credential Disclosure
webapps multiple CVE-2014-5377;OSVDB-110522

Metasploit Mozilla Firefox - WebIDL Privileged JavaScript Injection (Metasploit)
remote multiple CVE-2014-1511;OSVDB-104594;CVE-2014-1510;OSVDB-104593

b0z Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload
webapps php 80 CVE-2014-2223;OSVDB-103853

Mehdi Karout & Christian Galeone WordPress Plugin ShortCode 0.2.3 - Local File Inclusion
webapps php CVE-2014-5465;OSVDB-110528

Mike Manzotti WordPress Plugin WooCommerce Store Exporter 1.7.5 - Multiple Cross-Site Scripting Vulnerabilities
webapps php OSVDB-110524;OSVDB-110523

taviso & scarybeasts glibc - NUL Byte gconv_translit_find Off-by-One
local linux CVE-2014-5119;OSVDB-109188

Claudio Viviani Joomla! Component spidervideoplayer - 'theme' SQL Injection
webapps php OSVDB-110552

Eric Sesterhenn Granding MA300 - Weak Pin Encryption Brute Force
remote multiple CVE-2014-5381;OSVDB-110456

Eric Sesterhenn Granding MA300 - Traffic Sniffing Man In The Middle Fingerprint PIN Disclosure
remote multiple CVE-2014-5380;OSVDB-110460

José Tozo VTLS Virtua InfoStation.cgi - SQL Injection
webapps cgi 80 CVE-2014-2081;OSVDB-110436

Steffen Bauch ntopng 1.2.0 - Cross-Site Scripting Injection
webapps multiple OSVDB-110437;CVE-2014-5464

Pedro Ribeiro ManageEngine Password Manager - MetadataServlet.dat SQL Injection (Metasploit)
webapps multiple 8020 CVE-2014-3996;OSVDB-110198

Rainer Giedat Innovaphone PBX Admin-GUI - Cross-Site Request Forgery
webapps multiple 80 CVE-2014-5335;OSVDB-110269

Ragha Deepthi K R PHP Stock Management System 1.02 - Multiple Persistent Cross-Site Scripting Vulnerabilities
webapps php OSVDB-111555;OSVDB-111554