Archive
February 2014
Vulnerabilities first published in this month (UTC), newest first.
44 results · Clear filters · Feed
-
Unscored —
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3…
-
Unscored —CVE-2013-2498 Public exploit
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earl…
-
Unscored —CVE-2014-1695 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,…
-
Unscored —CVE-2014-1854 Public exploit
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free …
-
Unscored —CVE-2014-1597 Public exploit
SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remo…
-
Unscored —CVE-2014-0816 Public exploit
Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown v…
-
Medium 6.5
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…
KEV May 25, 2022 -
Medium —CVE-2013-4322 Public exploit
Apache Tomcat Denial of Service vulnerability
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which a…
-
Unscored —CVE-2013-2817 Public exploit
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote at…
-
Unscored —CVE-2014-1266 Public exploit
The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature i…
-
Unscored —
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12…
-
Unscored —CVE-2013-6674 Public exploit
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.…
-
Unscored —
Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a cr…
-
Unscored —CVE-2013-6167 Public exploit
Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set…
-
Unscored —CVE-2013-6166 Public exploit
Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set re…
-
High 8.8
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …
KEV May 4, 2022 -
Unscored —CVE-2013-6492 Public exploit
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote atta…
-
Unscored —
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7…
-
Unscored —
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4…
-
Unscored —CVE-2014-1219 Public exploit
CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, whic…
-
Unscored —CVE-2013-6229 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote attackers to inject arb…
-
Unscored —
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether i…
-
Unscored —CVE-2013-3294 Public exploit
Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execu…
-
Unscored —CVE-2013-2639 Public exploit
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote…
-
Unscored —
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI …
-
Unscored —CVE-2014-1459 Public exploit
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administr…
-
Unscored —CVE-2014-1401 Public exploit
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary…
-
Unscored —CVE-2010-4777 Public exploit
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debuggi…
-
Unscored —CVE-2014-1915 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow re…
-
Unscored —
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, all…
-
Unscored —
The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a n…
-
Unscored —CVE-2013-7319 Public exploit
Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attack…
-
Unscored —CVE-2011-4613 Public exploit
The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user…
-
Unscored —CVE-2013-1466 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbit…
-
Unscored —CVE-2013-1852 Public exploit
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote a…
-
Unscored —CVE-2013-4978 Public exploit
Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to …
-
Unscored —CVE-2013-3639 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arb…
-
High 8.8
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…
KEV Sep 17, 2024 -
Unscored —CVE-2012-6493 Public exploit
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers…
-
Unscored —CVE-2013-3098 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 a…