Archive
8 September 2014
Vulnerabilities first published on this day (UTC), newest first.
5 results · Feed
-
Unscored —
The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obt…
-
Unscored —
Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack …
-
Unscored —
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of servic…
-
Unscored —
Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified,…
-
Unscored —CVE-2014-5464 Public exploit
Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 a…