6 October 2014

28 results · Feed

• Unscored —
  CVE-2013-7329

  The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attack…

  libcgi-application-perl Debian
  Oct 6, 2014
• Unscored —
  CVE-2013-1436 Public exploit

  code injection in xmonad-contrib

  The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.

  xmonad-contrib xmonad-contrib Debian Hackage
  Oct 6, 2014
• Unscored —
  CVE-2014-0397

  Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified impact and attack vecto…

  Oct 6, 2014
• Unscored —
  CVE-2014-1875

  The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a …

  libcapture-tiny-perl Debian
  Oct 6, 2014
• Medium —
  CVE-2014-1868

  Moderate severity vulnerability that affects org.restlet.jse:org.restlet

  Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.

  restlet org.restlet.jse:org.restlet Ubuntu Maven
  Oct 6, 2014
• Unscored —
  CVE-2014-1224

  Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from…

  Oct 6, 2014
• Unscored —
  CVE-2014-4043

  The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with t…

  glibc eglibc Debian Ubuntu
  Oct 6, 2014
• Unscored —
  CVE-2014-4510

  Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary …

  apt-cacher-ng Debian
  Oct 6, 2014
• Unscored —
  CVE-2014-6389 Public exploit

  backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharac…

  Oct 6, 2014
• Unscored —
  CVE-2014-6607 Public exploit

  M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attacker…

  Oct 6, 2014
• Unscored —
  CVE-2014-6409 Public exploit

  Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the auth…

  Oct 6, 2014
• Unscored —
  CVE-2014-2044 Public exploit EPSS 12%

  Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote au…

  Oct 6, 2014
• Unscored —
  CVE-2013-6496

  Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase,…

  Oct 6, 2014
• Unscored —
  CVE-2014-0994

  Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Com…

  Oct 6, 2014
• Unscored —
  CVE-2014-0074

  Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to …

  shiro Debian
  Oct 6, 2014
• Medium —
  CVE-2014-0168

  Cross-Site Request Forgery in Jolokia

  Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

  org.jolokia:jolokia-core Maven
  Oct 6, 2014
• Unscored —
  CVE-2014-0140

  Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive contro…

  Oct 6, 2014
• Unscored —
  CVE-2014-7870

  Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.1…

  Oct 6, 2014
• Unscored —
  CVE-2014-7869

  Cross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7…

  Oct 6, 2014
• Unscored —
  CVE-2014-6054

  The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote …

  libvncserver libvncserver italc krfb Debian Ubuntu
  Oct 6, 2014
• Medium —
  CVE-2014-3608

  OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service

  The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR sta…

  nova nova nova Debian Ubuntu PyPI
  Oct 6, 2014
• Unscored —
  CVE-2014-3521

  The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated user…

  Oct 6, 2014
• Unscored —
  CVE-2014-3642

  vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.…

  Oct 6, 2014
• Unscored —
  CVE-2014-3633

  The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged o…

  libvirt libvirt Debian Ubuntu
  Oct 6, 2014
• Unscored —
  CVE-2014-3657

  The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list…

  libvirt libvirt Debian Ubuntu
  Oct 6, 2014
• Unscored —
  CVE-2014-5389

  SQL injection vulnerability in content-audit-schedule.php in the Content Audit plugin before 1.6.1 for WordPress allows…

  Oct 6, 2014
• Unscored —
  CVE-2013-2645 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_1…

  Oct 6, 2014
• Unscored —
  CVE-2014-2644

  Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inje…

  Oct 6, 2014