Archive
June 2014
Vulnerabilities first published in this month (UTC), newest first.
445 results · Feed
-
Unscored —
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access contr…
-
Unscored —
The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows …
-
Unscored —
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote …
-
Unscored —
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote …
-
Unscored —
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote …
-
High 7.8
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…
KEV May 25, 2022 -
Unscored —
The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, …
-
Unscored —CVE-2013-4727 Public exploit
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote a…
-
Unscored —
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not includ…
-
Unscored —
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set th…
-
Unscored —
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote a…
-
Unscored —
Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remot…
-
Unscored —
phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or…
-
Unscored —
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, a…
-
Unscored —
Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.
-
Unscored —CVE-2014-2575 Public exploit
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFo…
-
Unscored —
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before …
-
Unscored —
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCip…
-
Unscored —
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1…
-
Unscored —
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.…
-
Unscored —CVE-2014-3470 EPSS 86%
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 befor…
-
Unscored —
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local use…
-
Unscored —
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remot…
-
Unscored —CVE-2013-3739 Public exploit
Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read…
-
Unscored —
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted…
-
Unscored —CVE-2013-2618 Public exploit
Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to in…
-
Unscored —
The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition…
-
Unscored —
The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent atta…
-
Unscored —
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows …
-
Unscored —
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length i…
-
Unscored —
The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setu…
-
Unscored —
The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of…
-
Unscored —
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remot…
-
Unscored —
The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2014-3975 Public exploit
Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via…
-
Unscored —
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allo…
-
Unscored —CVE-2014-3878 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4,…
-
Unscored —
Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 …