28 February 2014

20 results · Feed

• Unscored —
  CVE-2011-3634

  methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Ho…

  apt Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-1912 Public exploit EPSS 27%

  Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3…

  python2.7 Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-2263

  The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possib…

  ffmpeg Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-2262

  Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user…

  Feb 28, 2014
• Unscored —
  CVE-2013-2498 Public exploit

  SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earl…

  Feb 28, 2014
• Unscored —
  CVE-2014-1695 Public exploit

  Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,…

  otrs2 Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-1888

  Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticate…

  Feb 28, 2014
• Unscored —
  CVE-2014-1456

  Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attac…

  Feb 28, 2014
• Unscored —
  CVE-2014-2080

  Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allow…

  Feb 28, 2014
• Medium —
  CVE-2014-2059

  Jenkins directory traversal vulnerability

  Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

  org.jenkins-ci.main:jenkins-core Maven
  Feb 28, 2014
• Medium —
  CVE-2014-2067

  Jenkins cross-site scripting (XSS) vulnerability

  Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."

  org.jenkins-ci.main:jenkins-core Maven
  Feb 28, 2014
• Unscored —
  CVE-2014-1878

  Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and…

  nagios3 Ubuntu
  Feb 28, 2014
• Unscored —
  CVE-2014-0874

  Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authentica…

  Feb 28, 2014
• Unscored —
  CVE-2014-0069

  The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached wr…

  linux kernel Debian Azure Linux
  Feb 28, 2014
• Medium 5.9
  CVE-2014-0759

  Schneider Electric Floating License Manager Unquoted Search Path or Element

  Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space cha…

  Schneider Electric Floating License Manager ICS / OT
  Feb 28, 2014
• Medium 6.8
  CVE-2014-0774

  Schneider Electric OFS Stack Buffer Overflow

  Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors i…

  Schneider Electric TLXCDSTOFS33 TLXCDLTOFS33 TLXCDSUOFS33 ICS / OT
  Feb 28, 2014
• Unscored —
  CVE-2014-1874

  The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows lo…

  linux Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-1690

  The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sen…

  linux Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-2038

  The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to e…

  linux Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-2039

  arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use…

  linux linux Debian Ubuntu
  Feb 28, 2014