Archive
20 November 2014
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
Medium —CVE-2014-3625 Public exploit
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.
-
Unscored —
Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow re…
-
Unscored —CVE-2014-8493 Public exploit
ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted requ…
-
Unscored —CVE-2014-8995 Public exploit
SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the U…
-
Unscored —CVE-2014-8997 Public exploit
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 a…
-
Unscored —
cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitra…
-
Unscored —
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a …
-
Unscored —CVE-2014-9000 Public exploit
Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows…
-
Unscored —CVE-2014-9001 Public exploit
reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via …
-
Unscored —CVE-2014-9004 Public exploit
Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2014-9005 Public exploit
Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL com…