Archive
February 2014
Vulnerabilities first published in this month (UTC), newest first.
442 results · Feed
-
Unscored —
Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2013-3294 Public exploit
Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allo…
-
Unscored —CVE-2013-2639 Public exploit
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote…
-
Unscored —
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI …
-
Unscored —
Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2014-1459 Public exploit
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administr…
-
Unscored —CVE-2014-1401 Public exploit
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) applian…
-
Unscored —
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2…
-
Unscored —
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterpr…
-
Unscored —
status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that …
-
Unscored —
Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote…
-
Unscored —
xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physic…
-
Unscored —
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7…
-
Unscored —
Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3…
-
Unscored —
The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid pass…
-
Unscored —
Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and respo…
-
Unscored —
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in R…
-
Unscored —
Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connectio…
-
Unscored —
The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checkin…
-
Unscored —
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbit…
-
Unscored —
Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as u…
-
Unscored —
The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and Fi…
-
Unscored —
The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions do…
-
Unscored —
The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not …
-
Unscored —
The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not …
-
Unscored —
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Informat…
-
Unscored —CVE-2010-4777 Public exploit
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debuggi…
-
Unscored —
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to b…
-
Unscored —
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is speci…
-
Unscored —
Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8…
-
High 7.5
python-bugzilla has improper validation of X.509 certificates
python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.
-
Unscored —
The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which …
-
Unscored —
The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows rem…
-
Unscored —
The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumb…
-
Unscored —
Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute ar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained b…
-
Unscored —
The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleKit before…
-
Unscored —CVE-2014-1915 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow re…