Archive
August 2014
Vulnerabilities first published in this month (UTC), newest first.
401 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers…
-
Unscored —CVE-2014-5193 Public exploit
Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2014-5189 Public exploit
SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attacker…
-
Unscored —CVE-2012-6653 Public exploit
Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecifie…
-
Unscored —
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vec…
-
Unscored —
The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, e…
-
Unscored —CVE-2014-3434 Public exploit
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,…
-
Unscored —CVE-2014-5187 Scanner template
Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read…
-
Unscored —
Multiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote authenticated users with Cont…
-
Unscored —
SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributo…
-
Unscored —CVE-2014-5180 Public exploit
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 f…
-
Unscored —
SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authent…
-
Unscored —
SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.…
-
Unscored —CVE-2014-5181 Scanner template
Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPres…
-
Unscored —
SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote …
-
Unscored —
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact relate…
-
Unscored —CVE-2014-3560 EPSS 56%
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to exe…
-
Unscored —CVE-2014-5089 Public exploit
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute…
-
Unscored —CVE-2014-5082 Public exploit
Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticate…
-
Unscored —
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access p…
-
Unscored —CVE-2014-5088 Public exploit
Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —CVE-2014-5090 Public exploit
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell m…
-
Unscored —CVE-2013-5757 Public exploit
Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrar…
-
Unscored —
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by…
-
Unscored —CVE-2013-5756 Public exploit
Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary fi…
-
Unscored —
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a cr…
-
Unscored —
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbit…
-
Unscored —
The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions f…
-
Unscored —
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-spa…
-
Unscored —
The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark …
-
Unscored —
The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain refer…
-
Unscored —
The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initi…
-
Unscored —CVE-2014-5160 EPSS 35%
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote a…
-
Unscored —
The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP a…
-
Unscored —
The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is …
-
Unscored —
The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not…
-
Unscored —
The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1…
-
Unscored —
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Mas…
-
Unscored —
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authent…