18 June 2014

34 results · Feed

• Unscored —
  CVE-2013-5017

  SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute …

  Jun 18, 2014
• Unscored —
  CVE-2012-2592 Public exploit

  Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web sc…

  Jun 18, 2014
• Unscored —
  CVE-2014-1652

  Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 …

  Jun 18, 2014
• Unscored —
  CVE-2014-1651

  SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allo…

  Jun 18, 2014
• Unscored —
  CVE-2014-1650

  SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows rem…

  Jun 18, 2014
• Unscored —
  CVE-2014-4049 EPSS 11%

  Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remot…

  php5 Ubuntu
  Jun 18, 2014
• Unscored —
  CVE-2014-4021

  Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users t…

  xen xen Debian Ubuntu
  Jun 18, 2014
• Unscored —
  CVE-2014-4153 Public exploit

  The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a craf…

  Jun 18, 2014
• Unscored —
  CVE-2014-4151

  The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and exec…

  Jun 18, 2014
• Unscored —
  CVE-2014-4152

  The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a cr…

  Jun 18, 2014
• Unscored —
  CVE-2014-0598

  Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 915…

  Jun 18, 2014
• Unscored —
  CVE-2014-0599

  Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Upd…

  Jun 18, 2014
• Unscored —
  CVE-2013-6221 Public exploit EPSS 78%

  Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the Auto…

  Jun 18, 2014
• Unscored —
  CVE-2014-0910 Public exploit

  Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 …

  Jun 18, 2014
• Unscored —
  CVE-2014-4174

  wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbit…

  wireshark Debian
  Jun 18, 2014
• Unscored —
  CVE-2014-4020

  The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10…

  wireshark wireshark Debian Ubuntu
  Jun 18, 2014
• Unscored —
  CVE-2014-3012

  Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote aut…

  Jun 18, 2014
• Unscored —
  CVE-2014-3013

  Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 all…

  Jun 18, 2014
• Unscored —
  CVE-2014-2151

  The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticate…

  Jun 18, 2014
• Unscored —
  CVE-2014-2949

  SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated u…

  Jun 18, 2014
• Unscored —
  CVE-2014-2000

  The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging th…

  Jun 18, 2014
• Unscored —
  CVE-2014-2779 EPSS 13%

  mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of ser…

  Jun 18, 2014
• Unscored —
  CVE-2011-2592 EPSS 15%

  Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway …

  Jun 18, 2014
• Unscored —
  CVE-2014-4302

  Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject ar…

  Jun 18, 2014
• Unscored —
  CVE-2014-4304

  Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject…

  Jun 18, 2014
• Unscored —
  CVE-2014-4305

  Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote…

  Jun 18, 2014
• Unscored —
  CVE-2014-4306 Public exploit

  Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files…

  Jun 18, 2014
• Medium 6.1
  CVE-2014-4301

  Eugene Pankov Ajenti Cross-site scripting Vulnerabilities

  Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in…

  ajenti PyPI
  Jun 18, 2014
• Unscored —
  CVE-2014-4309

  Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web sc…

  Jun 18, 2014
• Unscored —
  CVE-2014-4303

  Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote a…

  Jun 18, 2014
• Unscored —
  CVE-2014-4307 Public exploit

  SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQ…

  Jun 18, 2014
• Unscored —
  CVE-2014-4308

  Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allo…

  Jun 18, 2014
• Unscored —
  CVE-2014-3876

  Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 al…

  fex Debian
  Jun 18, 2014
• Unscored —
  CVE-2014-3877

  Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attac…

  fex Debian
  Jun 18, 2014