Archive
June 2014
Vulnerabilities first published in this month (UTC), newest first.
445 results · Feed
-
Unscored —
HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML…
-
Unscored —
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authe…
-
Unscored —
Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."
-
Unscored —
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x …
-
Unscored —CVE-2014-2612 Public exploit
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x …
-
Unscored —
IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read recor…
-
Unscored —
IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to …
-
Unscored —
SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbit…
-
Unscored —
IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows rem…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject…
-
Unscored —
Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended a…
-
Unscored —
IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allo…
-
Unscored —CVE-2014-4030 Public exploit
Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attack…
-
Unscored —CVE-2014-4643 Public exploit
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a de…
-
Unscored —CVE-2014-4644 Public exploit
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execu…
-
Unscored —CVE-2014-4645 Public exploit
Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbi…
-
Unscored —
Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local user…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow re…
-
Unscored —
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote …
-
Unscored —
Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, a…
-
Unscored —
Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authenti…
-
Unscored —CVE-2014-0244 EPSS 20%
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remo…
-
Unscored —
The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote…
-
Unscored —
The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathnam…
-
Unscored —CVE-2014-1739 Public exploit
The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not init…
-
Unscored —
mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification an…
-
Unscored —
arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled…
-
Unscored —
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECC…
-
Unscored —CVE-2014-4014 Public exploit
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inappl…
-
Unscored —
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly…
-
Unscored —
The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote I…
-
Unscored —
cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunis…
-
Unscored —
The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote at…
-
Unscored —
IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a du…