Archive
February 2014
Vulnerabilities first published in this month (UTC), newest first.
442 results · Feed
-
Unscored —
Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, a…
-
Unscored —
Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier a…
-
Unscored —CVE-2012-6493 Public exploit
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers…
-
Unscored —CVE-2013-3098 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 a…
-
Unscored —CVE-2013-3365 Public exploit
TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in …
-
Unscored —
Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm,…
-
Unscored —
SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request Syste…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inj…
-
Unscored —
Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attacke…
-
Unscored —CVE-2013-7183 Public exploit
cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) …
-
Unscored —CVE-2013-7179 Public exploit
The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute a…
-
Unscored —
cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and…
-
Unscored —
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn …
-
Unscored —
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x b…
-
Unscored —
IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denia…
-
Unscored —CVE-2014-0329 Public exploit
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin accoun…
-
Unscored —
Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privilege…
-
Medium 5.5
ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open…
-
Unscored —
The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for …
-
Unscored —
Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation…
-
Unscored —
Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by perf…
-
Unscored —
Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows rem…
-
Medium 5.5
Jboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissions
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information …
-
Unscored —
Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pat…
-
Unscored —
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensi…
-
Unscored —
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissio…
-
Unscored —
The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when …
-
Unscored —
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, …
-
Unscored —
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blo…
-
Unscored —
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger t…
-
Unscored —
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before…
-
Unscored —
Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in KENT-WEB Joyful Note 2.8 and earlier, when Internet Explorer 7 or earlier i…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in configuration-details screens in the OAC component in IBM Financ…
-
Unscored —
The OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly enforce operator-inte…