Archive
15 July 2014
Vulnerabilities first published on this day (UTC), newest first.
11 results · Feed
-
Unscored —
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows rem…
-
Unscored —CVE-2014-4663 Public exploit
TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrar…
-
Unscored —CVE-2014-4964 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hija…
-
Unscored —CVE-2014-4965 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2014-4962 Public exploit
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative numbe…
-
Unscored —CVE-2014-4963 Public exploit
Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.c…
-
Unscored —
The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.…
-
Unscored —
FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data st…
-
Unscored —
FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer betw…
-
Unscored —
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easi…
-
Unscored —CVE-2014-3418 Public exploit
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via sh…