28 April 2014

14 results · Feed

• Unscored —
  CVE-2013-4285

  A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local use…

  Apr 28, 2014
• Unscored —
  CVE-2014-0037

  The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote atta…

  Apr 28, 2014
• Unscored —
  CVE-2014-0187

  The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote auth…

  neutron neutron Debian Ubuntu
  Apr 28, 2014
• Unscored —
  CVE-2014-0079

  The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using cer…

  Apr 28, 2014
• Unscored —
  CVE-2014-1217

  Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers t…

  Apr 28, 2014
• Unscored —
  CVE-2014-3008 Public exploit

  Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharact…

  Apr 28, 2014
• Unscored —
  CVE-2014-2042

  Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows rem…

  Apr 28, 2014
• Unscored —
  CVE-2014-2657

  Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impac…

  Apr 28, 2014
• Unscored —
  CVE-2014-2986

  The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen…

  xen Ubuntu
  Apr 28, 2014
• Unscored —
  CVE-2014-2715

  Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plug…

  Apr 28, 2014
• Unscored —
  CVE-2014-2658

  Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service …

  Apr 28, 2014
• Unscored —
  CVE-2014-2980

  Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file…

  gnustep-base Debian
  Apr 28, 2014
• Unscored —
  CVE-2014-2846 Public exploit

  Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firm…

  Apr 28, 2014
• Medium —
  CVE-2014-2383 Public exploit Scanner template EPSS 39%

  DOMPDF Arbitrary File Read

  dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=…

  dompdf/dompdf php-dompdf Debian Packagist
  Apr 28, 2014