Archive
3 July 2014
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows …
-
Unscored —
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possi…
-
Unscored —
(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing exec…
-
High —
Yii PHP Framework arbitrary PHP scripts execution
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property.
-
Medium —
OpenStack Swift Cross-site Scriping vulnerability
Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.
-
Unscored —CVE-2014-0325 EPSS 16%
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or caus…
-
Unscored —CVE-2014-4718 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 a…
-
Unscored —CVE-2014-4716 Public exploit
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authenticati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2014-4717 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for Word…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.…
-
Unscored —CVE-2014-3538 EPSS 12%
file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authenti…
-
Unscored —CVE-2014-3857 Public exploit
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before…
-
Unscored —
Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inj…
-
Unscored —
The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…
-
Unscored —
Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress …
-
Unscored —
The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…
-
Unscored —
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of…
-
Unscored —
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2…
-
Unscored —
The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a…
-
High 7.3
Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompre…
-
Unscored —
Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not pro…
-
Unscored —
Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the AL…