Archive
29 September 2014
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a T…
-
Unscored —
The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors rel…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876…
-
High 8.8
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users…
-
Unscored —
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote at…
-
Unscored —CVE-2013-3083 Public exploit
Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote atta…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hi…
-
Unscored —
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain s…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hi…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers …
-
High —
Gentoo Portage does not verify X.509 certificates from SSL servers
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certi…
-
Unscored —CVE-2013-2586 Public exploit
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp…
-
Unscored —
Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj…
-
Unscored —
bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job…
-
Unscored —
The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other fil…
-
Unscored —
lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) d…
-
Unscored —
Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local us…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service…
-
Unscored —
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1…
-
Unscored —
The MeiTalk (aka com.playjia.meitalk) application @7F060012 for Android does not verify X.509 certificates from SSL ser…
-
Unscored —
The CIH Quiz game (aka com.bowenehs.cihquizgameapp) application 1.3 for Android does not verify X.509 certificates from…
-
Unscored —
The USEK (aka com.university.usek) application 1.0.8 for Android does not verify X.509 certificates from SSL servers, w…
-
Unscored —
The INVEX (aka com.mobilatolye.keyinternet) application 1.0.2 for Android does not verify X.509 certificates from SSL s…
-
Unscored —
The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does not verify X.509 cert…
-
Unscored —
The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from…
-
Unscored —
The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, …
-
Unscored —
The Campus Link - Campus TV HKUSU (aka com.campus.tv.hkusu) application 2.2 for Android does not verify X.509 certifica…
-
Unscored —
The Anaheim Library 2Go! (aka com.bredir.boopsie.anaheim) application 4.5.110 for Android does not verify X.509 certifi…
-
Unscored —
The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify …
-
Unscored —
The Oman News (aka com.oman.news.rmtzlnbuooordciw) application 1.0 for Android does not verify X.509 certificates from …
-
Unscored —
The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509 certificates from …
-
Unscored —
The Aloha Stadium - Hawaii (aka com.stadium.aloha) application 1.2 for Android does not verify X.509 certificates from …
-
Unscored —
The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify X.509 certificates …
-
Unscored —
The frank matano (aka com.frank.matano) application 1.0 for Android does not verify X.509 certificates from SSL servers…
-
Unscored —
The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates fr…
-
Unscored —
The Counter Intuition (aka com.counter.intuition) application 1.2 for Android does not verify X.509 certificates from S…
-
Unscored —
The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from…
-
Unscored —
The Cart App (aka com.virtecha.mobilewallet) application 1.5 for Android does not verify X.509 certificates from SSL se…
-
Unscored —
The United Educational CU (aka com.metova.cuae.uecu) application 1.0.27 for Android does not verify X.509 certificates …