Archive
April 2014
Vulnerabilities first published in this month (UTC), newest first.
665 results · Feed
-
Unscored —
Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound …
-
Unscored —
Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cau…
-
Unscored —
Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows r…
-
Unscored —
Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denia…
-
Unscored —
Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a d…
-
Unscored —
The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a de…
-
Unscored —
Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a …
-
Unscored —
Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (me…
-
Unscored —
Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishin…
-
Unscored —
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require a…
-
Unscored —
The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory con…
-
Unscored —
Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establish…
-
Unscored —
IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an ob…
-
Unscored —
CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management con…
-
Unscored —CVE-2014-1322 Public exploit
The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user …
-
Unscored —
Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cau…
-
Unscored —
The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attac…
-
Unscored —
WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows at…
-
Unscored —
Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execu…
-
Unscored —
Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does…
-
Unscored —
Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transi…
-
Unscored —
Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon e…
-
Unscored —
Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to…
-
Unscored —
Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.…
-
Unscored —
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than U…
-
Low —
Local Privilege Escalation in npm
lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.
-
Medium —
Script Injection in Show In Browser gem
The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attacke…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijac…
-
Unscored —
wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers t…
-
Unscored —
Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute a…
-
Unscored —
Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execu…
-
Unscored —
wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a r…
-
Unscored —
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows …
-
Unscored —
Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager …
-
Unscored —
The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, has…