Archive
6 November 2014
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Unscored —CVE-2014-6030 Public exploit
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated…
-
Unscored —
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and earlie…
-
Unscored —
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of ser…
-
Unscored —
SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPre…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote atta…
-
Unscored —
SQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and Safety Management all…
-
Unscored —CVE-2014-8657 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —CVE-2014-8655 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —
SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to e…
-
Unscored —
Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sit…
-
Unscored —
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz b…
-
Unscored —
Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary file…
-
Unscored —CVE-2014-8653 Public exploit
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 wi…
-
Unscored —
SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via un…
-
Unscored —
The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code…
-
Unscored —
Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors relat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Conf…
-
Unscored —CVE-2014-8654 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wirel…
-
Unscored —
Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL…
-
Unscored —
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service …
-
Unscored —
The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors.
-
Unscored —
SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors.
-
Unscored —
Cross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject …
-
Unscored —
The User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP Business Intellignece allo…
-
Unscored —
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a …
-
Unscored —
The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading …
-
Unscored —
Cross-site scripting (XSS) vulnerability in s_network.asp in the Denon AVR-3313CI audio/video receiver allows remote at…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbi…