Archive
22 February 2014
Vulnerabilities first published on this day (UTC), newest first.
24 results · Feed
-
Unscored —
The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, wh…
-
Unscored —
The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows re…
-
Unscored —
The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attacker…
-
Unscored —
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6,…
-
Unscored —
IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, wh…
-
Unscored —
The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-th…
-
Unscored —
The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 …
-
Unscored —
The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows rem…
-
Unscored —
The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attacke…
-
Unscored —
The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote att…
-
Unscored —
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute a…
-
Unscored —
Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI c…
-
Unscored —
Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6,…
-
Unscored —
The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a sessio…
-
Unscored —
Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (An…
-
Unscored —
Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) an…
-
Unscored —
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject a…
-
Unscored —
Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier all…
-
Unscored —
The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attac…
-
Unscored —
The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust r…
-
Unscored —CVE-2014-1266 Public exploit
The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature i…