13 November 2014

9 results · Feed

• Unscored —
  CVE-2014-7823

  The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using …

  libvirt libvirt Debian Ubuntu
  Nov 13, 2014
• Unscored —
  CVE-2014-3674

  Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to ac…

  Nov 13, 2014
• Unscored —
  CVE-2014-3602

  Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote …

  Nov 13, 2014
• Unscored —
  CVE-2014-8554

  SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT befor…

  Nov 13, 2014
• Unscored —
  CVE-2014-8359 Public exploit

  Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execut…

  Nov 13, 2014
• High —
  CVE-2014-8770 Public exploit

  MAGMI plugin for Magento Unsafe File Upload

  Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that conta…

  dweeves/magmi Packagist
  Nov 13, 2014
• Unscored —
  CVE-2014-8476

  The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, whic…

  Nov 13, 2014
• Unscored —
  CVE-2014-8564

  The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x b…

  gnutls28 Debian
  Nov 13, 2014
• Unscored —
  CVE-2014-8557

  Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to i…

  Nov 13, 2014