September 2014

52 results · Clear filters · Feed

• Unscored —
  CVE-2014-7190 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the aut…

  Sep 30, 2014
• Unscored —
  CVE-2014-6619 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 …

  Sep 30, 2014
• High 8.8
  CVE-2014-6278 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 30, 2014

  KEV Oct 2, 2025
• High 8.8
  CVE-2013-3632 Public exploit EPSS 57%

  The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users…

  Sep 29, 2014
• Unscored —
  CVE-2013-3083 Public exploit

  Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote atta…

  Sep 29, 2014
• Unscored —
  CVE-2013-2586 Public exploit

  XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp…

  Sep 29, 2014
• Unscored —
  CVE-2014-7186 Public exploit EPSS 64%

  The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

  bash bash Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-7187 Public exploit EPSS 58%

  Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

  bash bash Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-3631 Public exploit

  The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.1…

  linux linux Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-6277 Public exploit EPSS 64%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 27, 2014
• Unscored —
  CVE-2014-6446 Public exploit EPSS 46%

  The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allow…

  Sep 26, 2014
• Unscored —
  CVE-2014-6721 Public exploit

  The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL…

  Sep 26, 2014
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• Unscored —
  CVE-2012-5700 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitr…

  Sep 22, 2014
• Unscored —
  CVE-2014-7153 Public exploit

  SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1…

  Sep 22, 2014
• Unscored —
  CVE-2012-2588 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbit…

  Sep 19, 2014
• Unscored —
  CVE-2014-4378 Public exploit

  CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cau…

  Sep 18, 2014
• High 7.8
  CVE-2014-4404 Exploited Public exploit EPSS 49%

  Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…

  Sep 18, 2014

  KEV Feb 10, 2022
• Unscored —
  CVE-2014-4377 Public exploit

  Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitra…

  Sep 18, 2014
• Unscored —
  CVE-2012-6658 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary …

  Sep 17, 2014
• Unscored —
  CVE-2012-2956 Public exploit

  SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands…

  Sep 17, 2014
• Unscored —
  CVE-2012-1417 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow…

  Sep 17, 2014
• Unscored —
  CVE-2012-1507 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary …

  Sep 17, 2014
• Unscored —
  CVE-2012-1506 Public exploit

  SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows …

  Sep 17, 2014
• Unscored —
  CVE-2012-2583 Public exploit

  Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attacker…

  Sep 17, 2014
• Unscored —
  CVE-2014-0993 Public exploit

  Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero…

  Sep 15, 2014
• Unscored —
  CVE-2012-1556 Public exploit

  Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remo…

  Sep 12, 2014
• Unscored —
  CVE-2014-2009 Public exploit

  The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation pat…

  Sep 12, 2014
• Unscored —
  CVE-2014-2008 Public exploit

  SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attacke…

  Sep 12, 2014
• Unscored —
  CVE-2014-3740 Public exploit

  Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arb…

  Sep 11, 2014
• Unscored —
  CVE-2014-6043 Public exploit EPSS 13%

  ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database…

  Sep 11, 2014
• Unscored —
  CVE-2014-5460 Public exploit EPSS 71%

  Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remo…

  Sep 11, 2014
• Unscored —
  CVE-2012-0984 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary we…

  Sep 11, 2014
• Unscored —
  CVE-2012-4240 Public exploit

  SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenti…

  Sep 11, 2014
• Unscored —
  CVE-2014-6070 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to injec…

  Sep 11, 2014
• Unscored —
  CVE-2014-6235 Public exploit

  Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrar…

  Sep 11, 2014
• Unscored —
  CVE-2014-2223 Public exploit EPSS 10%

  Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authe…

  Sep 11, 2014
• Unscored —
  CVE-2014-5519 Public exploit EPSS 65%

  The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a de…

  Sep 11, 2014
• Unscored —
  CVE-2014-2624 Public exploit EPSS 65%

  Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute a…

  Sep 11, 2014