Archive
November 2014
Vulnerabilities first published in this month (UTC), newest first.
75 results · Clear filters · Feed
-
Unscored —CVE-2014-8954 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thr…
-
Unscored —
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager …
-
Unscored —CVE-2014-8596 Public exploit
Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL …
-
Unscored —CVE-2014-8727 Public exploit
Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administra…
-
Unscored —CVE-2014-8953 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers t…
-
Unscored —CVE-2014-8949 Public exploit
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbit…
-
Unscored —CVE-2014-8948 Public exploit
Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows r…
-
Unscored —
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which al…
-
Unscored —CVE-2014-8359 Public exploit
Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execut…
-
High —CVE-2014-8770 Public exploit
MAGMI plugin for Magento Unsafe File Upload
Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that conta…
-
Unscored —
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote …
-
Unscored —CVE-2014-8555 Public exploit
Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attac…
-
Unscored —
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on…
-
Unscored —
Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2…
-
High 8.8
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window…
KEV Mar 25, 2022 -
Unscored —CVE-2014-8652 Public exploit
Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via…
-
Unscored —CVE-2014-3437 Public exploit
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read a…
-
Unscored —CVE-2014-3438 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manage…
-
Unscored —CVE-2014-3439 Public exploit
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbit…
-
Unscored —CVE-2014-6030 Public exploit
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated…
-
Unscored —
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2014-8657 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —CVE-2014-8655 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —CVE-2014-8653 Public exploit
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 wi…
-
Unscored —CVE-2014-8654 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wirel…
-
Unscored —
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a …
-
Unscored —CVE-2013-7057 Public exploit
Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to…
-
Unscored —CVE-2014-7176 Public exploit
SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQ…
-
Unscored —
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to ex…
-
Unscored —CVE-2014-4311 Public exploit
Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-ma…
-
Unscored —
Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akee…
-
Unscored —CVE-2014-5507 Public exploit
iBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe, which allows local use…
-
Unscored —CVE-2014-8244 Public exploit
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; bef…