23 April 2014

46 results · Feed

• Unscored —
  CVE-2011-5279 EPSS 20%

  CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on …

  Apr 23, 2014
• Unscored —
  CVE-2014-0892

  IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc op…

  Apr 23, 2014
• Unscored —
  CVE-2014-1646

  Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly…

  Apr 23, 2014
• Unscored —
  CVE-2014-1647

  Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly…

  Apr 23, 2014
• Critical 9.8
  CVE-2014-0472 Public exploit

  Code Injection in Django

  The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using u…

  python-django django python-django Debian Ubuntu PyPI
  Apr 23, 2014
• High 7.5
  CVE-2014-0473

  Django Reuses Cached CSRF Token

  The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anon…

  python-django django python-django Debian Ubuntu PyPI
  Apr 23, 2014
• Critical 9.8
  CVE-2014-0474

  Django Vulnerable to MySQL Injection

  The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to…

  python-django django python-django Debian Ubuntu PyPI
  Apr 23, 2014
• Unscored —
  CVE-2014-2328

  lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary comman…

  cacti Debian
  Apr 23, 2014
• High —
  CVE-2014-2888

  sfpagent Command Injection vulnerability

  lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request.

  sfpagent RubyGems
  Apr 23, 2014
• Unscored —
  CVE-2014-2554

  OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking a…

  otrs2 Debian
  Apr 23, 2014
• Unscored —
  CVE-2014-2327

  Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack …

  cacti cacti Debian Ubuntu
  Apr 23, 2014
• Unscored —
  CVE-2014-2983

  Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, whic…

  drupal7 Ubuntu
  Apr 23, 2014
• Unscored —
  CVE-2014-2893

  The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive in…

  Apr 23, 2014
• Unscored —
  CVE-2014-2709

  lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metach…

  cacti Debian
  Apr 23, 2014
• Unscored —
  CVE-2014-2894

  Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local user…

  qemu qemu Debian Ubuntu
  Apr 23, 2014
• Unscored —
  CVE-2014-2855

  The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of ser…

  rsync rsync Debian Ubuntu
  Apr 23, 2014
• Unscored —
  CVE-2014-2976 Public exploit

  Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a…

  Apr 23, 2014
• Unscored —
  CVE-2012-0360

  Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial o…

  Apr 23, 2014
• Unscored —
  CVE-2012-1317

  The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route …

  Apr 23, 2014
• Unscored —
  CVE-2012-1366

  Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, a…

  Apr 23, 2014
• Unscored —
  CVE-2012-4651

  Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via…

  Apr 23, 2014
• Unscored —
  CVE-2012-4658

  The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (w…

  Apr 23, 2014
• Unscored —
  CVE-2012-4638

  Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound …

  Apr 23, 2014
• Unscored —
  CVE-2012-3062

  Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cau…

  Apr 23, 2014
• Unscored —
  CVE-2012-3918

  Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows r…

  Apr 23, 2014
• Unscored —
  CVE-2012-5427

  Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denia…

  Apr 23, 2014
• Unscored —
  CVE-2012-5422

  Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a d…

  Apr 23, 2014
• Unscored —
  CVE-2012-5037

  The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a de…

  Apr 23, 2014
• Unscored —
  CVE-2012-5036

  Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a …

  Apr 23, 2014
• Unscored —
  CVE-2012-5044

  Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (me…

  Apr 23, 2014
• Unscored —
  CVE-2012-5014

  Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishin…

  Apr 23, 2014
• Unscored —
  CVE-2012-5032

  The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require a…

  Apr 23, 2014
• Unscored —
  CVE-2012-5039

  The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory con…

  Apr 23, 2014
• Unscored —
  CVE-2012-5017

  Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establish…

  Apr 23, 2014
• Unscored —
  CVE-2014-1320

  IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an ob…

  Apr 23, 2014
• Unscored —
  CVE-2014-1296

  CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Co…

  Apr 23, 2014
• Unscored —
  CVE-2014-1648

  Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management con…

  Apr 23, 2014
• Unscored —
  CVE-2014-1322 Public exploit

  The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user …

  Apr 23, 2014
• Unscored —
  CVE-2014-1319

  Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cau…

  Apr 23, 2014
• Unscored —
  CVE-2014-1318

  The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attac…

  Apr 23, 2014