Archive
20 October 2014
Vulnerabilities first published on this day (UTC), newest first.
146 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to…
-
Unscored —
SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in …
-
Unscored —
SQL injection vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPres…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console acces…
-
Unscored —
Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with con…
-
Unscored —
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config,…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 th…
-
Unscored —
The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permission…
-
Unscored —
Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2014-3978 Public exploit
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or…
-
Unscored —CVE-2014-5276 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated …
-
Unscored —CVE-2014-5275 Public exploit
Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote a…
-
Unscored —CVE-2012-5865 Public exploit
SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL…
-
Unscored —CVE-2012-5701 Public exploit
Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2014-2081 Public exploit
Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua be…
-
Unscored —
Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insu…
-
Unscored —
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sens…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject…
-
Unscored —
Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obt…
-
Unscored —CVE-2014-5094 Public exploit
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.…
-
Unscored —
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows loca…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attacke…
-
Unscored —CVE-2012-5244 Public exploit
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —
Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary …
-
Unscored —
The Kadinlar Kulubu KKMobileApp (aka com.tapatalk.kadinlarkulubucom) application 3.4.3 for Android does not verify X.50…
-
Unscored —
The Authors On Tour - Live! (aka com.appmakr.app122286) application 4 for Android does not verify X.509 certificates fr…
-
Unscored —
The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SSL servers…
-
Unscored —
The Bodyguard for Hire (aka com.dreamstep.wBodyGuardforHire) application 0.18.13146.42280 for Android does not verify X…
-
Unscored —
The Central East LHIN News (aka com.wCentralEastLHINNews) application 0.1 for Android does not verify X.509 certificate…
-
Unscored —
The FRONT (aka com.magazinecloner.front) application @7F08017A for Android does not verify X.509 certificates from SSL …
-
Unscored —
The Kontan Kiosk (aka com.appsfoundry.scoopwl.id.kontankiosk) application @7F07025E for Android does not verify X.509 c…