Archive
2 May 2014
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Medium 5.3
Plone Filesystem path information leak
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.
-
Medium 4.9
Plone Privilege escalation through exposed underlying API
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
-
Unscored —
virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for h…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition…
-
Unscored —
Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local…
-
Unscored —CVE-2014-3000 EPSS 13%
The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5,…
-
Unscored —
The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows …
-
Unscored —
Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly…
-
High —
Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters
lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.
-
Unscored —
fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain pri…
-
Unscored —
Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete s…
-
Unscored —
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial o…
-
Unscored —CVE-2014-3139 Public exploit
recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by …
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
Unscored —
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a d…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cau…
-
Unscored —
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of serv…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a den…
-
Unscored —
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (devic…
-
Unscored —
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to ex…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
Unscored —
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain pr…
-
Unscored —
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a d…
-
Unscored —
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a d…
-
Unscored —
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (devic…
-
Unscored —
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote a…
-
Unscored —
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated user…
-
Unscored —
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (devic…
-
Unscored —
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x…
-
Unscored —
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial po…
-
Unscored —
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attacker…
-
High 7.5
Transifex command-line client has improper certificate validation
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an inco…
-
Unscored —
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers…
-
Unscored —
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and cras…
-
Unscored —
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determin…
-
Unscored —
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for th…
-
Unscored —CVE-2014-3138 Public exploit
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1…