Archive
November 2014
Vulnerabilities first published in this month (UTC), newest first.
501 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote …
-
Unscored —
Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4…
-
Unscored —
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer…
-
Unscored —
The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote auth…
-
Unscored —
Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before…
-
Unscored —
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allo…
-
Unscored —
Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local u…
-
Unscored —
Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) …
-
Unscored —
Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system…
-
Unscored —
The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obt…
-
Unscored —
SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to exe…
-
Unscored —CVE-2014-3437 Public exploit
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read a…
-
Unscored —CVE-2014-3438 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manage…
-
Unscored —CVE-2014-3439 Public exploit
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbit…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on …
-
Unscored —
The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on R…
-
Unscored —
The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV18…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote atta…
-
Unscored —
Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local user…
-
Unscored —CVE-2014-6030 Public exploit
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated…
-
Unscored —
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and earlie…
-
Unscored —
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of ser…
-
Unscored —
SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPre…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote atta…
-
Unscored —
SQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and Safety Management all…
-
Unscored —CVE-2014-8657 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —CVE-2014-8655 Public exploit
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows …
-
Unscored —
SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to e…
-
Unscored —
Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sit…
-
Unscored —
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz b…
-
Unscored —
Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary file…
-
Unscored —CVE-2014-8653 Public exploit
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 wi…
-
Unscored —
SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via un…
-
Unscored —
The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code…
-
Unscored —
Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors relat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Conf…
-
Unscored —CVE-2014-8654 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wirel…