18 November 2014

28 results · Feed

• Unscored —
  CVE-2014-7996

  Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco…

  Nov 18, 2014
• Medium —
  CVE-2014-7829

  Directory traversal vulnerability in actionpack

  Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remo…

  rails actionpack Debian RubyGems
  Nov 18, 2014
• Unscored —
  CVE-2014-4817

  The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attac…

  Nov 18, 2014
• High 8.8
  CVE-2014-6324 Exploited Public exploit EPSS 87%

  The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…

  Nov 18, 2014

  KEV Mar 25, 2022
• Unscored —
  CVE-2014-7146 Public exploit EPSS 51%

  The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a c…

  Nov 18, 2014
• Unscored —
  CVE-2014-7824

  D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a deni…

  dbus dbus Debian Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-3620

  cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary si…

  curl curl Debian Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-3613

  cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attack…

  curl curl Debian Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-8475

  FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking …

  Nov 18, 2014
• Unscored —
  CVE-2014-8598 Public exploit EPSS 38%

  The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload ar…

  Nov 18, 2014
• Unscored —
  CVE-2014-4463

  Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view o…

  Nov 18, 2014
• Unscored —
  CVE-2014-4455

  dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O execut…

  Nov 18, 2014
• Unscored —
  CVE-2014-4452

  WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code …

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-4457

  The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which all…

  Nov 18, 2014
• Unscored —
  CVE-2014-4458

  The "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous cookie data in system-m…

  Nov 18, 2014
• Unscored —
  CVE-2014-4460

  CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transitio…

  Nov 18, 2014
• Unscored —
  CVE-2014-4453

  Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions se…

  Nov 18, 2014
• Unscored —
  CVE-2014-4461

  The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object meta…

  Nov 18, 2014
• Unscored —
  CVE-2014-4462

  WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code …

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-4451

  Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proxim…

  Nov 18, 2014
• Unscored —
  CVE-2014-4459

  Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitr…

  qtwebkit-source qtwebkit-opensource-src Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-7992 Public exploit EPSS 27%

  The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensit…

  Nov 18, 2014
• Unscored —
  CVE-2014-6098

  IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext passwords via a cra…

  Nov 18, 2014
• Unscored —
  CVE-2014-6105

  IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspe…

  Nov 18, 2014
• Unscored —
  CVE-2014-6107

  IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by…

  Nov 18, 2014
• Unscored —
  CVE-2014-6095

  Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to r…

  Nov 18, 2014
• Unscored —
  CVE-2014-6096

  Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attacke…

  Nov 18, 2014
• Unscored —
  CVE-2014-6110

  IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote att…

  Nov 18, 2014