Archive
May 2014
Vulnerabilities first published in this month (UTC), newest first.
74 results · Clear filters · Feed
-
Medium —
Integer Overflow or Wraparound in Apache Tomcat
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumpti…
-
Unscored —CVE-2014-3865 Public exploit
Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files ou…
-
Unscored —CVE-2012-5877 Public exploit
Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and c…
-
Unscored —CVE-2012-5876 Public exploit
Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to …
-
Unscored —
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers …
-
Unscored —CVE-2014-3414 Public exploit
Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authent…
-
Unscored —CVE-2014-3415 Public exploit
SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL comman…
-
Unscored —CVE-2013-2225 Public exploit
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _p…
-
Unscored —
The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter …
-
Unscored —CVE-2014-3871 Public exploit
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds…
-
Medium —CVE-2014-3840 Public exploit
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (…
-
Unscored —CVE-2014-3866 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in user_settings.php in Usercake 2.0.2 and earlier allow rem…
-
Unscored —
Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remo…
-
Unscored —CVE-2013-3977 Public exploit
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine whi…
-
Unscored —
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspec…
-
Unscored —CVE-2013-1668 Public exploit
The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary co…
-
Unscored —CVE-2013-2713 Public exploit
Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attacker…
-
Unscored —CVE-2013-2712 Public exploit
Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attacke…
-
Unscored —CVE-2014-3442 Public exploit
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malfo…
-
Unscored —CVE-2014-3848 Public exploit
The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to …
-
Unscored —CVE-2014-3849 Public exploit
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote atta…
-
Unscored —CVE-2013-2107 Public exploit
Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote a…
-
Unscored —
Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl …
-
Unscored —CVE-2012-0943 Public exploit
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Li…
-
Unscored —
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2014-3842 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allo…
-
Unscored —CVE-2014-3210 Public exploit
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar) plugin before 1.3 for W…
-
Unscored —
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2014-3806 Public exploit
Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attac…
-
Unscored —CVE-2014-3738 Public exploit
Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2014-3749 Public exploit
SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2014-3792 Public exploit
Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote a…
-
Unscored —CVE-2014-3444 Public exploit
The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to exe…
-
Unscored —CVE-2013-6765 Public exploit
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrict…
-
Unscored —CVE-2013-7382 Public exploit
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for …
-
Unscored —CVE-2014-2084 Public exploit
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly r…
-
Unscored —
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Res…
-
High 8.3
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and ea…
-
Unscored —
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functiona…