4 November 2014

46 results · Feed

• Unscored —
  CVE-2014-2718

  ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series…

  Nov 4, 2014
• Unscored —
  CVE-2013-4529

  Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and poss…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4537

  The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code v…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4539

  Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote at…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4540

  Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary cod…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4527

  Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vect…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4538

  Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attack…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4531

  Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and p…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4150

  The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4526

  Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4148

  Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote …

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4151

  The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code …

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4541

  The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrar…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4542

  The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execut…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4530

  Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4533

  Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to caus…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4149

  Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow re…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4534

  Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possi…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-6399

  Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exe…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-0182

  Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote at…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-0223

  Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-0222

  Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a deni…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-3461

  hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a …

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-8474

  CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP request…

  Nov 4, 2014
• Unscored —
  CVE-2014-8472

  CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Pr…

  Nov 4, 2014
• Unscored —
  CVE-2014-8473

  Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote a…

  Nov 4, 2014
• Unscored —
  CVE-2014-8471

  CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified …

  Nov 4, 2014
• Unscored —
  CVE-2014-7875

  Unspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with firmware before 53.236…

  Nov 4, 2014
• Unscored —
  CVE-2014-6130

  The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP sessi…

  Nov 4, 2014
• Unscored —
  CVE-2014-4974

  The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 121…

  Nov 4, 2014
• Unscored —
  CVE-2014-3660

  parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disa…

  libxml2 libxml2 Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-8593

  Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary…

  Nov 4, 2014
• Unscored —
  CVE-2013-7057 Public exploit

  Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to…

  Nov 4, 2014
• Unscored —
  CVE-2014-7176 Public exploit

  SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQ…

  Nov 4, 2014
• Unscored —
  CVE-2014-8587

  SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and S…

  Nov 4, 2014
• Unscored —
  CVE-2014-8590

  XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allo…

  Nov 4, 2014
• Unscored —
  CVE-2014-8588

  SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQ…

  Nov 4, 2014
• Unscored —
  CVE-2014-8586 Public exploit EPSS 40%

  SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to ex…

  Nov 4, 2014
• Unscored —
  CVE-2014-8339

  SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attacker…

  Nov 4, 2014
• Unscored —
  CVE-2014-8585

  Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to rea…

  Web / CMS
  Nov 4, 2014