Archive
8 January 2014
Vulnerabilities first published on this day (UTC), newest first.
20 results · Feed
-
Unscored —
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages w…
-
Unscored —
Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted R…
-
Unscored —
The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly han…
-
Unscored —
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirement…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote atta…
-
Unscored —
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers …
-
Unscored —
Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface…
-
Unscored —
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers …
-
Unscored —
The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress al…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote att…
-
Unscored —CVE-2013-7280 Public exploit
Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of servi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.98…
-
Unscored —CVE-2013-7274 Public exploit
Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attacker…
-
Unscored —CVE-2013-7097 Public exploit
Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitra…
-
Unscored —CVE-2013-7278 Public exploit
SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2014-0620 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote at…
-
Unscored —CVE-2014-0621 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote at…