22 April 2014

14 results · Feed

• Unscored —
  CVE-2013-7338

  Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a …

  Apr 22, 2014
• Unscored —
  CVE-2013-1421

  Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.…

  Apr 22, 2014
• Unscored —
  CVE-2013-4472

  The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than U…

  poppler xpdf Debian
  Apr 22, 2014
• Low —
  CVE-2013-4116

  Local Privilege Escalation in npm

  lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.

  npm npm Debian npm
  Apr 22, 2014
• Medium —
  CVE-2013-2105

  Script Injection in Show In Browser gem

  The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.

  show_in_browser RubyGems
  Apr 22, 2014
• Unscored —
  CVE-2013-2187

  Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attacke…

  Apr 22, 2014
• Unscored —
  CVE-2014-1615

  Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijac…

  Apr 22, 2014
• Unscored —
  CVE-2014-2900

  wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allow…

  Apr 22, 2014
• Unscored —
  CVE-2014-2890

  Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers t…

  Apr 22, 2014
• Unscored —
  CVE-2014-2654

  Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute a…

  Apr 22, 2014
• Unscored —
  CVE-2014-2892

  Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execu…

  libmms libmms Debian Ubuntu
  Apr 22, 2014
• Unscored —
  CVE-2014-2899

  wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a r…

  Apr 22, 2014
• Unscored —
  CVE-2014-2737

  SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools…

  Apr 22, 2014
• Unscored —
  CVE-2014-2659

  Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows …

  Apr 22, 2014