16 November 2014

4 results · Clear filters · Feed

• Medium —
  CVE-2014-3248

  facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

  Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local us…

  puppet puppet mcollective facter Debian Ubuntu RubyGems
  Nov 16, 2014
• Medium —
  CVE-2014-2682

  Several Zend Products Vulnerable to XXE and XEE attacks

  Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

  zendframework/zendframework1 zendframework/zendopenid zendframework/zendservice-windowsazure zendframework/zendservice-api Packagist
  Nov 16, 2014
• Medium —
  CVE-2014-2681

  Several Zend Products Vulnerable to XXE and XEE attacks

  Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

  zendframework/zendframework1 zendframework/zendopenid zendframework/zendrest zendframework/zendservice-nirvanix Packagist
  Nov 16, 2014
• Medium —
  CVE-2014-2683

  Several Zend Products Vulnerable to XXE and XEE attacks

  Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

  zendframework/zendframework1 zendframework/zendopenid zendframework/zendservice-technorati zendframework/zendservice-amazon Packagist
  Nov 16, 2014