31 October 2014

29 results · Feed

• Medium —
  CVE-2014-3473

  Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

  Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestrati…

  horizon horizon horizon Debian Ubuntu PyPI
  Oct 31, 2014
• Unscored —
  CVE-2014-3475

  Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013…

  horizon horizon Debian Ubuntu
  Oct 31, 2014
• Low —
  CVE-2014-3474

  OpenStack Horizon Cross-site scripting (XSS) vulnerability

  Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject…

  horizon horizon horizon Debian Ubuntu PyPI
  Oct 31, 2014
• Unscored —
  CVE-2014-8578

  Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 b…

  horizon horizon Debian Ubuntu
  Oct 31, 2014
• Medium —
  CVE-2013-0334

  Bundler may install gems from a different source than expected

  Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

  bundler RubyGems
  Oct 31, 2014
• Unscored —
  CVE-2014-7987

  Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script…

  Oct 31, 2014
• Unscored —
  CVE-2014-7985

  Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary loca…

  Oct 31, 2014
• Unscored —
  CVE-2014-7177 Public exploit

  XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary…

  Oct 31, 2014
• Unscored —
  CVE-2014-7986

  install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the in…

  Oct 31, 2014
• Medium —
  CVE-2014-3708

  OpenStack Compute (Nova) Denial of Service vulnerability

  OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request.

  nova nova Debian PyPI
  Oct 31, 2014
• Unscored —
  CVE-2014-2335

  Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 all…

  Oct 31, 2014
• Unscored —
  CVE-2014-2334

  Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 al…

  Oct 31, 2014
• Unscored —
  CVE-2014-2336

  Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and…

  Oct 31, 2014
• Unscored —
  CVE-2014-8577 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary w…

  Oct 31, 2014
• Unscored —
  CVE-2014-8081

  lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attack…

  Oct 31, 2014
• Unscored —
  CVE-2014-8495

  Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached appli…

  Oct 31, 2014
• Unscored —
  CVE-2014-8399

  The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a d…

  Oct 31, 2014
• Unscored —
  CVE-2014-8334

  The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute …

  Oct 31, 2014
• Unscored —
  CVE-2014-8509

  The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code…

  Oct 31, 2014
• Unscored —
  CVE-2014-8082

  lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via …

  Oct 31, 2014
• Medium —
  CVE-2014-8333

  OpenStack Nova VMware instance leak potentially leading to compute DoS

  The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state.

  nova nova Debian PyPI
  Oct 31, 2014
• Unscored —
  CVE-2014-6148

  IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.…

  Oct 31, 2014
• Unscored —
  CVE-2014-6101

  Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manager (BPM) Advanced 7…

  Oct 31, 2014
• Unscored —
  CVE-2014-6150

  Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.0 through…

  Oct 31, 2014
• Unscored —
  CVE-2014-3375

  Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communi…

  Oct 31, 2014
• Unscored —
  CVE-2014-3373

  Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco …

  Oct 31, 2014
• Unscored —
  CVE-2014-3372

  Multiple cross-site scripting (XSS) vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communi…

  Oct 31, 2014
• Unscored —
  CVE-2014-3374

  Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communica…

  Oct 31, 2014
• Unscored —
  CVE-2014-3366

  SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote a…

  Oct 31, 2014