28 July 2014

18 results · Feed

• Unscored —
  CVE-2013-7393

  The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on …

  subversion Debian
  Jul 28, 2014
• Unscored —
  CVE-2013-4262

  svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows lo…

  subversion Debian
  Jul 28, 2014
• High 8.1
  CVE-2014-3120 Exploited Public exploit Scanner template EPSS 89%

  Elasticsearch Improper Access Control vulnerability

  The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

  org.elasticsearch:elasticsearch Maven
  Jul 28, 2014

  KEV Mar 25, 2022
• Unscored —
  CVE-2013-4840

  Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW bef…

  Jul 28, 2014
• Unscored —
  CVE-2014-3304

  The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering c…

  Jul 28, 2014
• Unscored —
  CVE-2014-3303

  The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows …

  Jul 28, 2014
• Unscored —
  CVE-2014-2974

  Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 allows remote a…

  Jul 28, 2014
• Unscored —
  CVE-2014-2975

  Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4 allows remote attackers…

  Jul 28, 2014
• Unscored —
  CVE-2014-5109 Public exploit

  SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attacke…

  Jul 28, 2014
• Unscored —
  CVE-2014-5104 Public exploit

  Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands vi…

  Jul 28, 2014
• Unscored —
  CVE-2014-5111 Public exploit Scanner template EPSS 22%

  Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .…

  Jul 28, 2014
• Unscored —
  CVE-2014-5110

  Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inj…

  Jul 28, 2014
• Unscored —
  CVE-2014-5106

  Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows…

  Jul 28, 2014
• Unscored —
  CVE-2014-5113

  Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote att…

  Jul 28, 2014
• Unscored —
  CVE-2014-5108

  Cross-site scripting (XSS) vulnerability in single_pages\download_file.php in concrete5 before 5.6.3 allows remote atta…

  Jul 28, 2014
• Unscored —
  CVE-2014-5107

  concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) system/basic…

  Jul 28, 2014
• Unscored —
  CVE-2014-5112 Public exploit

  maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metach…

  Jul 28, 2014
• Unscored —
  CVE-2014-5105

  Multiple cross-site scripting (XSS) vulnerabilities in ol-commerce 2.1.1 allow remote attackers to inject arbitrary web…

  Jul 28, 2014