2 April 2014

33 results · Feed

• Unscored —
  CVE-2013-0735

  Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow re…

  Apr 2, 2014
• Unscored —
  CVE-2013-7352

  Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers …

  Apr 2, 2014
• Unscored —
  CVE-2013-0729

  Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary …

  Apr 2, 2014
• Unscored —
  CVE-2013-3484

  Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary w…

  Apr 2, 2014
• Unscored —
  CVE-2013-2945 Public exploit

  SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators t…

  Apr 2, 2014
• Unscored —
  CVE-2014-1308

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1301

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1297

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, …

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1312

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1313

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1298

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1302

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1311

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1305

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1307

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1309

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1299

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1304

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2014-1310

  WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Apr 2, 2014
• Unscored —
  CVE-2013-1770

  Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbit…

  ganglia-web ganglia Debian
  Apr 2, 2014
• Unscored —
  CVE-2013-4240 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress a…

  Apr 2, 2014
• Unscored —
  CVE-2013-3213 Public exploit

  Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQ…

  Apr 2, 2014
• Unscored —
  CVE-2013-5365

  Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition …

  Apr 2, 2014
• Unscored —
  CVE-2014-2655

  SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) be…

  postfixadmin Debian
  Apr 2, 2014
• Unscored —
  CVE-2014-2553

  Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21, 3.2.x before 3.2.16,…

  otrs2 Debian
  Apr 2, 2014
• Unscored —
  CVE-2014-2578

  Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitra…

  Apr 2, 2014
• Unscored —
  CVE-2013-3588

  The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a …

  Apr 2, 2014
• Unscored —
  CVE-2014-0901

  Cross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM Connections integration in I…

  Apr 2, 2014
• Unscored —
  CVE-2014-0828

  Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.…

  Apr 2, 2014
• Unscored —
  CVE-2014-1942

  Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information S…

  Apr 2, 2014
• Unscored —
  CVE-2014-2137

  CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote a…

  Apr 2, 2014
• Unscored —
  CVE-2014-2138

  CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to …

  Apr 2, 2014
• Unscored —
  CVE-2014-2125

  Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remot…

  Apr 2, 2014