Archive
27 February 2014
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote a…
-
Unscored —
Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows re…
-
Unscored —
IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrict…
-
Unscored —
Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process …
-
Low —
ember-source Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribu…
-
Unscored —CVE-2014-1854 Public exploit
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free …
-
Unscored —
Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x b…
-
Unscored —CVE-2014-1597 Public exploit
SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inje…
-
Unscored —
TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative auth…
-
Unscored —CVE-2014-0816 Public exploit
Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown v…
-
Unscored —
The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM)…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in th…
-
Unscored —
Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenti…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center…
-
Unscored —
The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) …
-
Unscored —
The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated us…
-
Unscored —
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Commu…
-
Unscored —
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified C…
-
Unscored —
SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows r…
-
Unscored —
Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 al…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allow…
-
Unscored —
Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a deni…
-
Unscored —
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or…
-
Unscored —
Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism v…
-
Unscored —
Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or c…
-
Unscored —
The Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-…
-
Unscored —
Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a deni…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to in…
-
Unscored —
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a d…
-
Unscored —
The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intende…
-
Unscored —
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to exec…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (…