Archive
August 2014
Vulnerabilities first published in this month (UTC), newest first.
55 results · Clear filters · Feed
-
High 8.4
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.…
KEV Sep 15, 2022 -
Unscored —CVE-2013-2595 Public exploit
The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcom…
-
Unscored —
Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dep…
-
Unscored —
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands…
-
Unscored —CVE-2012-1503 Public exploit
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote …
-
Unscored —
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected pos…
-
Unscored —CVE-2013-5467 Public exploit
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and M…
-
Unscored —CVE-2014-5335 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attac…
-
Unscored —CVE-2014-5453 Public exploit
Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory…
-
Medium 5.3CVE-2014-5455 Public exploit
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and Op…
-
Unscored —
The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authenticatio…
-
Unscored —CVE-2014-5097 Public exploit
Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execu…
-
Unscored —
Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Sou…
-
Unscored —
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL…
-
Unscored —
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via …
-
Unscored —CVE-2014-5347 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPres…
-
Unscored —CVE-2014-5349 Public exploit
Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2014-5345 Public exploit
Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress a…
-
Unscored —CVE-2014-5346 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow…
-
Unscored —
Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to rea…
-
Unscored —CVE-2014-3341 Public exploit
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages…
-
Unscored —
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, do…
-
Unscored —CVE-2014-5207 Public exploit
fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NO…
-
Unscored —CVE-2014-3081 Public exploit
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote au…
-
Unscored —CVE-2014-3085 Public exploit
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote aut…
-
Unscored —CVE-2014-3080 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmwar…
-
Unscored —CVE-2014-5074 Public exploit
Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (devic…
-
Unscored —CVE-2012-0938 Public exploit
Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with cer…
-
Unscored —CVE-2012-5685 Public exploit
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2012-5684 Public exploit
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2012-5683 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijac…
-
Unscored —
Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 bef…
-
Unscored —
The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a de…
-
Unscored —CVE-2014-1222 Public exploit
Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote auth…
-
Unscored —
Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers c…
-
Unscored —CVE-2011-2944 Public exploit
SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitr…
-
Unscored —CVE-2014-5200 Public exploit
SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute …
-
Unscored —CVE-2014-5201 Public exploit
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrar…
-
Unscored —CVE-2014-2630 Public exploit
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via …
-
Unscored —CVE-2014-3854 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack…