15 November 2014

11 results · Feed

• Unscored —
  CVE-2014-3158

  Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers…

  ppp ppp Debian Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-3500

  Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

  Nov 15, 2014
• Unscored —
  CVE-2014-3502

  Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL w…

  Nov 15, 2014
• Unscored —
  CVE-2014-3501

  Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary serve…

  Nov 15, 2014
• Unscored —
  CVE-2014-8566

  The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of se…

  libapache2-mod-auth-mellon Debian
  Nov 15, 2014
• Unscored —
  CVE-2014-5388

  Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local gues…

  qemu qemu Debian Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-4975

  Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain…

  ruby2.0 ruby1.9.1 Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-3707

  The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option,…

  curl curl Debian Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-7998

  Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cau…

  Nov 15, 2014
• Unscored —
  CVE-2014-7248

  Cross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script …

  Nov 15, 2014
• Unscored —
  CVE-2014-7997

  The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leas…

  Nov 15, 2014