18 April 2014

18 results · Feed

• Unscored —
  CVE-2013-7196 Public exploit

  static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restri…

  Apr 18, 2014
• Unscored —
  CVE-2013-7195

  PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publica…

  Apr 18, 2014
• Unscored —
  CVE-2013-4279

  imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating …

  Apr 18, 2014
• Unscored —
  CVE-2014-2288

  The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and t…

  Apr 18, 2014
• Unscored —
  CVE-2014-2289

  res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authen…

  Apr 18, 2014
• Unscored —
  CVE-2014-2597

  PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) v…

  Apr 18, 2014
• Unscored —
  CVE-2014-2014

  imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification f…

  Apr 18, 2014
• Unscored —
  CVE-2014-2522

  curl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS backend, does not ver…

  Apr 18, 2014
• Unscored —
  CVE-2014-2287

  channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and …

  asterisk Debian
  Apr 18, 2014
• Unscored —
  CVE-2014-2286 EPSS 16%

  main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certifie…

  asterisk Debian
  Apr 18, 2014
• Unscored —
  CVE-2013-7369

  SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft E…

  Apr 18, 2014
• Unscored —
  CVE-2013-4289

  Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified i…

  Apr 18, 2014
• Unscored —
  CVE-2013-4290

  Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vec…

  Apr 18, 2014
• Unscored —
  CVE-2012-0871

  The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, a…

  systemd Debian
  Apr 18, 2014
• Unscored —
  CVE-2012-6646

  F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disabl…

  Apr 18, 2014
• Unscored —
  CVE-2014-0150

  Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local gues…

  qemu qemu Debian Ubuntu
  Apr 18, 2014
• Unscored —
  CVE-2014-2844

  Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote aut…

  Apr 18, 2014
• Unscored —
  CVE-2014-2856

  Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allow…

  cups cups Debian Ubuntu
  Apr 18, 2014