2 July 2014

76 results · Feed

• Unscored —
  CVE-2014-4531

  Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allow…

  Jul 2, 2014
• Unscored —
  CVE-2014-4579

  Cross-site scripting (XSS) vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPr…

  Jul 2, 2014
• Unscored —
  CVE-2014-4598

  Cross-site scripting (XSS) vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for…

  Jul 2, 2014
• Unscored —
  CVE-2014-4527

  Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Market…

  Jul 2, 2014
• Unscored —
  CVE-2014-4551

  Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for Wor…

  Jul 2, 2014
• Unscored —
  CVE-2014-4572

  Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPre…

  Jul 2, 2014
• Unscored —
  CVE-2014-4541

  Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro p…

  Jul 2, 2014
• Unscored —
  CVE-2014-4596

  Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for …

  Jul 2, 2014
• Unscored —
  CVE-2014-4526

  Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPres…

  Jul 2, 2014
• Unscored —
  CVE-2014-4547

  Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plu…

  Jul 2, 2014
• Unscored —
  CVE-2014-4594

  Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPre…

  Jul 2, 2014
• Unscored —
  CVE-2014-4576

  Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and ear…

  Jul 2, 2014
• Unscored —
  CVE-2014-4582

  Cross-site scripting (XSS) vulnerability in admin/admin_show_dialogs.php in the WP Consultant plugin 1.0 and earlier fo…

  Jul 2, 2014
• Unscored —
  CVE-2014-4557

  Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-j…

  Jul 2, 2014
• Unscored —
  CVE-2014-4589

  Cross-site scripting (XSS) vulnerability in uploader.php in the WP Silverlight Media Player (wp-media-player) plugin 0.…

  Jul 2, 2014
• Unscored —
  CVE-2014-4604

  Cross-site scripting (XSS) vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier f…

  Jul 2, 2014
• Unscored —
  CVE-2014-4578

  Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and ear…

  Jul 2, 2014
• Unscored —
  CVE-2014-3890

  silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity ou…

  Jul 2, 2014
• Unscored —
  CVE-2014-3889

  silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity ou…

  Jul 2, 2014
• Unscored —
  CVE-2014-4691

  Session fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web sessions via a firewall lo…

  Jul 2, 2014
• Unscored —
  CVE-2014-4692

  pfSense before 2.1.4, when HTTP is used, does not include the HTTPOnly flag in a Set-Cookie header for the session cook…

  Jul 2, 2014
• Unscored —
  CVE-2014-4696

  Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote atta…

  Jul 2, 2014
• Unscored —
  CVE-2014-4688 Public exploit

  pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag…

  Jul 2, 2014
• Unscored —
  CVE-2014-4687

  Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary …

  Jul 2, 2014
• Unscored —
  CVE-2014-4689

  Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary…

  Jul 2, 2014
• Unscored —
  CVE-2014-4690

  Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info…

  Jul 2, 2014
• Unscored —
  CVE-2014-4693

  Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow …

  Jul 2, 2014
• Unscored —
  CVE-2014-4695

  Multiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attack…

  Jul 2, 2014
• Unscored —
  CVE-2014-4694

  Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 f…

  Jul 2, 2014
• Unscored —
  CVE-2014-3066

  IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containi…

  Jul 2, 2014
• Unscored —
  CVE-2014-3074

  The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and c…

  Jul 2, 2014
• Unscored —
  CVE-2014-3297

  Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices actio…

  Jul 2, 2014
• Unscored —
  CVE-2014-3298

  Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which a…

  Jul 2, 2014
• Unscored —
  CVE-2014-3307

  The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to…

  Jul 2, 2014
• Unscored —
  CVE-2014-4668

  The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does…

  Jul 2, 2014
• Unscored —
  CVE-2014-3100

  Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 a…

  Jul 2, 2014