Archive
2 December 2014
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messag…
-
Unscored —
ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administr…
-
Unscored —
ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd…
-
Unscored —
The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, w…
-
Unscored —
GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitra…
-
Unscored —
GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path whe…
-
Unscored —
Open redirect vulnerability in track-click.php in the Ad-Manager plugin 1.1.2 for WordPress allows remote attackers to …
-
Unscored —CVE-2014-8728 Public exploit
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System …
-
Unscored —CVE-2014-9175 Public exploit
SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remot…
-
Unscored —
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the InstaSqueeze Sexy Squeeze Pages plugin for WordPress allows remote atta…
-
Unscored —
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, …
-
Unscored —CVE-2014-9179 Public exploit
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote auth…
-
Unscored —CVE-2014-9173 Public exploit
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote att…
-
Unscored —
The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installat…
-
Unscored —CVE-2014-9180 Scanner template
Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites a…
-
Unscored —CVE-2014-9113 Public exploit
CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 and earlier uses weak permissions (Authenticated Us…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Google Analytics by Yoast (google-analytics-for-wordpress) plugin befor…
-
Unscored —CVE-2014-9181 Public exploit
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitra…
-
Unscored —CVE-2014-9178 Public exploit
Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager pl…
-
Unscored —
fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows…
-
Unscored —
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1…
-
Unscored —
OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the lib…
-
Unscored —
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.…
-
Unscored —
project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated…
-
Unscored —CVE-2014-5284 Public exploit
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, wh…