Archive
July 2014
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attacke…
-
Unscored —CVE-2014-4938 Public exploit
SQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress allows remote attackers to …
-
Unscored —CVE-2014-4939 Public exploit
SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticat…
-
Unscored —CVE-2014-4937 Public exploit
Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers t…
-
Unscored —
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informati…
-
Unscored —CVE-2014-3992 Public exploit
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary …
-
Unscored —CVE-2014-3991 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2014-4852 Public exploit
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM …
-
Unscored —CVE-2012-4988 Public exploit
Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.9…
-
Unscored —CVE-2014-4741 Public exploit
SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2014-4194 Public exploit
SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2014-4699 Public exploit
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the save…
-
Medium —
Rosetta-Flash JSONP Vulnerability in hapi
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restr…
-
Unscored —
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Win…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 all…
-
Unscored —CVE-2014-0869 Public exploit
The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algor…
-
Unscored —CVE-2014-0870 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 b…
-
Unscored —CVE-2014-0865 Public exploit
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client…
-
Unscored —CVE-2014-0871 Public exploit
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote at…
-
Unscored —CVE-2014-0867 Public exploit
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM …
-
Unscored —CVE-2014-0866 Public exploit
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext …
-
Unscored —CVE-2014-0894 Public exploit
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-d…
-
Unscored —CVE-2014-0864 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.…
-
Unscored —CVE-2014-0868 Public exploit
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client…
-
Unscored —
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application…
-
Unscored —CVE-2014-4718 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack t…
-
Unscored —CVE-2014-4716 Public exploit
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authenticati…
-
Unscored —CVE-2014-4717 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for Word…
-
Unscored —CVE-2014-3857 Public exploit
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before…
-
Unscored —CVE-2014-4688 Public exploit
pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag…
-
Unscored —
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code v…