25 March 2014

20 results · Feed

• Unscored —
  CVE-2013-5445

  IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users t…

  Mar 25, 2014
• Unscored —
  CVE-2013-5443

  Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before…

  Mar 25, 2014
• Unscored —
  CVE-2013-5444

  The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows…

  Mar 25, 2014
• Unscored —
  CVE-2014-0343

  The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 b…

  Mar 25, 2014
• Unscored —
  CVE-2014-0885

  Cross-site request forgery (CSRF) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x befo…

  Mar 25, 2014
• Unscored —
  CVE-2014-0884

  Cross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.…

  Mar 25, 2014
• Unscored —
  CVE-2014-0887

  The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to…

  Mar 25, 2014
• Unscored —
  CVE-2014-0886

  The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to…

  Mar 25, 2014
• Unscored —
  CVE-2013-5951

  Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow rem…

  extplorer Ubuntu
  Mar 25, 2014
• Unscored —
  CVE-2014-2386

  Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service …

  Mar 25, 2014
• Medium 6.5
  CVE-2014-2573

  OpenStack Nova VMWare driver leaks rescued images

  The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be …

  nova nova Debian PyPI
  Mar 25, 2014
• Unscored —
  CVE-2013-1605 Public exploit EPSS 12%

  Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitr…

  Mar 25, 2014
• Unscored —
  CVE-2013-1604 Public exploit

  Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers…

  Mar 25, 2014
• Unscored —
  CVE-2014-2526

  Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbit…

  Mar 25, 2014
• Medium —
  CVE-2014-2538

  rack-ssl Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack.

  ruby-rack-ssl rack-ssl Debian RubyGems
  Mar 25, 2014
• Unscored —
  CVE-2014-2016 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier,…

  Mar 25, 2014
• Unscored —
  CVE-2014-0076

  The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a cons…

  openssl Debian
  Mar 25, 2014
• Unscored —
  CVE-2014-0628

  The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, …

  Mar 25, 2014
• Unscored —
  CVE-2014-1515

  Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows a…

  Mar 25, 2014
• Unscored —
  CVE-2014-1492

  The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Sec…

  firefox nss nss Debian Ubuntu
  Mar 25, 2014