Archive
18 March 2014
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to in…
-
Unscored —
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUM_ELEMENT…
-
Unscored —
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to rea…
-
Unscored —CVE-2013-2619 Public exploit
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2013-2643 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to in…
-
Unscored —CVE-2013-2642 Public exploit
Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters …
-
Unscored —
Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x …
-
Unscored —
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Man…
-
Unscored —
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to con…
-
Unscored —
SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows r…
-
Unscored —
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MC…
-
Unscored —
Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Downloa…
-
Unscored —
Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of serv…
-
Unscored —
The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 …
-
Unscored —
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and…
-
Unscored —CVE-2013-6438 EPSS 27%
The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not pro…
-
Unscored —CVE-2014-0098 EPSS 27%
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows …
-
Unscored —
The Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from SSL servers, which allow…
-
Unscored —
Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote att…
-
Unscored —CVE-2014-2533 Public exploit
/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an ar…
-
Medium 4.2
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote a…
-
Unscored —CVE-2014-2534 Public exploit
/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by re…