12 December 2014

31 results · Feed

• Unscored —
  CVE-2014-4633

  Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to i…

  Dec 12, 2014
• Unscored —
  CVE-2014-4628

  Cross-site scripting (XSS) vulnerability in EMC Isilon InsightIQ 2.x and 3.x before 3.1 allows remote attackers to inje…

  Dec 12, 2014
• Unscored —
  CVE-2014-2516

  Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirec…

  Dec 12, 2014
• Unscored —
  CVE-2014-8134

  The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_ena…

  linux linux linux-lts-utopic Debian Ubuntu
  Dec 12, 2014
• Unscored —
  CVE-2014-6209

  IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and …

  Dec 12, 2014
• Unscored —
  CVE-2014-6210

  IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows rem…

  Dec 12, 2014
• Unscored —
  CVE-2013-4399

  The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an ident…

  libvirt Debian
  Dec 12, 2014
• Unscored —
  CVE-2014-7840

  The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers…

  qemu qemu Debian Ubuntu
  Dec 12, 2014
• Unscored —
  CVE-2014-7136

  Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as u…

  Dec 12, 2014
• High 7.3
  CVE-2014-6407

  Arbitrary Code Execution in Docker

  Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

  docker.io github.com/docker/docker Debian Go
  Dec 12, 2014
• Unscored —
  CVE-2014-6381

  Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and …

  Dec 12, 2014
• Medium —
  CVE-2014-6408

  Access Restriction Bypass in Docker

  Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

  docker.io github.com/docker/docker Debian Go
  Dec 12, 2014
• Unscored —
  CVE-2014-8608

  The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing…

  Dec 12, 2014
• Unscored —
  CVE-2014-8124

  OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records whe…

  horizon horizon Debian Ubuntu
  Dec 12, 2014
• Unscored —
  CVE-2014-8956

  Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, a…

  Dec 12, 2014
• Unscored —
  CVE-2014-8489

  Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote att…

  Dec 12, 2014
• Unscored —
  CVE-2014-8515

  The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pa…

  Dec 12, 2014
• Unscored —
  CVE-2014-9374

  Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14…

  asterisk Debian
  Dec 12, 2014
• Unscored —
  CVE-2014-7265

  Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via u…

  Dec 12, 2014
• Unscored —
  CVE-2014-4323 Public exploit

  The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used i…

  linux-raspi2 linux-hwe linux-riscv linux-gke Ubuntu
  Dec 12, 2014
• Unscored —
  CVE-2014-6145

  Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 bef…

  Dec 12, 2014
• Unscored —
  CVE-2014-6138

  The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended …

  Dec 12, 2014
• Unscored —
  CVE-2014-6316

  core/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running under the web root, which …

  Dec 12, 2014
• Unscored —
  CVE-2014-8270 Public exploit EPSS 20%

  BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose n…

  Dec 12, 2014
• Unscored —
  CVE-2014-9365

  The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x b…

  python2.7 python2.7 docbook5-style-xsl Debian Ubuntu Azure Linux
  Dec 12, 2014
• Unscored —
  CVE-2014-7250

  The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly…

  Dec 12, 2014
• Unscored —
  CVE-2014-4815

  Session fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x before 1.0.1 allows remo…

  Dec 12, 2014
• Unscored —
  CVE-2014-7261

  Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script …

  Dec 12, 2014
• Unscored —
  CVE-2014-7262

  Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to i…

  Dec 12, 2014
• Unscored —
  CVE-2014-7260

  The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote att…

  Dec 12, 2014
• Unscored —
  CVE-2014-7263

  Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script …

  Dec 12, 2014