2 June 2014

31 results · Feed

• Unscored —
  CVE-2014-2939

  Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow remote attackers to in…

  Jun 2, 2014
• Unscored —
  CVE-2014-2959

  logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i…

  Jun 2, 2014
• Unscored —
  CVE-2014-2946 Public exploit

  Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modem…

  Jun 2, 2014
• Unscored —
  CVE-2011-5280

  Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a…

  boinc Debian
  Jun 2, 2014
• Unscored —
  CVE-2013-7386

  Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2…

  boinc Debian
  Jun 2, 2014
• Unscored —
  CVE-2013-7387 Public exploit

  Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions …

  Jun 2, 2014
• Unscored —
  CVE-2013-1412 Public exploit EPSS 40%

  DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/p…

  Jun 2, 2014
• High —
  CVE-2013-1397

  Symfony Arbitrary PHP code Execution

  Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348.

  symfony/symfony symfony/yaml Packagist
  Jun 2, 2014
• Unscored —
  CVE-2013-1818

  maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified…

  Jun 2, 2014
• High —
  CVE-2013-1348

  Symphony Vulnerable to PHP Code Injection via YAML Parsing

  The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397.

  symfony/symfony symfony/yaml Packagist
  Jun 2, 2014
• Unscored —
  CVE-2013-4596

  The Node Access Keys module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote …

  Jun 2, 2014
• Unscored —
  CVE-2013-6470

  The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in R…

  Jun 2, 2014
• Unscored —
  CVE-2013-6433

  The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configurat…

  neutron neutron Debian Ubuntu
  Jun 2, 2014
• Unscored —
  CVE-2013-3258

  Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attacke…

  Jun 2, 2014
• Unscored —
  CVE-2013-3476

  Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows…

  Jun 2, 2014
• Unscored —
  CVE-2013-3257

  Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote at…

  Jun 2, 2014
• Unscored —
  CVE-2013-2298

  Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a c…

  boinc Debian
  Jun 2, 2014
• Unscored —
  CVE-2013-2019

  Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multipl…

  boinc Debian
  Jun 2, 2014
• Medium —
  CVE-2013-2014

  OpenStack Identity (Keystone) Denial of Service

  OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

  keystone keystone Debian PyPI
  Jun 2, 2014
• Unscored —
  CVE-2013-2710

  Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allow…

  Jun 2, 2014
• Unscored —
  CVE-2012-5391

  Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before…

  mediawiki Debian
  Jun 2, 2014
• Unscored —
  CVE-2012-5395

  Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20…

  Jun 2, 2014
• Unscored —
  CVE-2014-0041

  OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets sslverify t…

  Jun 2, 2014
• Unscored —
  CVE-2014-0042

  OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets gpgcheck to…

  Jun 2, 2014
• Unscored —
  CVE-2014-0040

  OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, uses an HTTP con…

  Jun 2, 2014
• Unscored —
  CVE-2014-3937

  SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attacker…

  Jun 2, 2014
• Unscored —
  CVE-2014-3932

  SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 …

  Jun 2, 2014
• Unscored —
  CVE-2014-3933

  Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.…

  Jun 2, 2014
• Unscored —
  CVE-2014-3935 Public exploit

  SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execu…

  Jun 2, 2014
• Unscored —
  CVE-2014-3936 Public exploit EPSS 77%

  Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b0…

  Jun 2, 2014
• Unscored —
  CVE-2014-3934 Public exploit

  SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL…

  Jun 2, 2014