15 December 2014

27 results · Feed

• Unscored —
  CVE-2014-7911 Public exploit EPSS 23%

  luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0…

  Dec 15, 2014
• Unscored —
  CVE-2014-1569

  The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 …

  nss nss Debian Ubuntu
  Dec 15, 2014
• Unscored —
  CVE-2014-6255

  Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect use…

  Dec 15, 2014
• Unscored —
  CVE-2014-6258

  An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consu…

  Dec 15, 2014
• Unscored —
  CVE-2014-6253

  Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hi…

  Dec 15, 2014
• Unscored —
  CVE-2014-6260

  Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, which allows remote at…

  Dec 15, 2014
• Unscored —
  CVE-2014-6257

  Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL…

  Dec 15, 2014
• Unscored —
  CVE-2014-6053

  The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not prope…

  libvncserver libvncserver italc tightvnc Debian Ubuntu
  Dec 15, 2014
• Unscored —
  CVE-2014-6254

  Multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to inject ar…

  Dec 15, 2014
• Unscored —
  CVE-2014-6256

  Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a direct…

  Dec 15, 2014
• Unscored —
  CVE-2014-6052

  The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain…

  libvncserver libvncserver italc veyon Debian Ubuntu
  Dec 15, 2014
• Unscored —
  CVE-2014-6259

  Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers …

  Dec 15, 2014
• Unscored —
  CVE-2014-6261 EPSS 20%

  Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers t…

  Dec 15, 2014
• Unscored —
  CVE-2014-3583 EPSS 11%

  The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows re…

  apache2 Debian
  Dec 15, 2014
• Unscored —
  CVE-2014-8967 EPSS 12%

  Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a cra…

  Dec 15, 2014
• Unscored —
  CVE-2014-8610 Public exploit

  AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, whic…

  Dec 15, 2014
• Unscored —
  CVE-2014-8609 Public exploit

  The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Andro…

  Dec 15, 2014
• Unscored —
  CVE-2014-8507 Public exploit

  Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/Wa…

  Dec 15, 2014
• Unscored —
  CVE-2014-9247

  Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user account, (2) e-mail address…

  Dec 15, 2014
• Unscored —
  CVE-2014-9245

  Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename act…

  Dec 15, 2014
• Unscored —
  CVE-2014-9249

  The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by con…

  Dec 15, 2014
• Unscored —
  CVE-2014-9252

  Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtai…

  Dec 15, 2014
• Unscored —
  CVE-2014-9385

  Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the a…

  Dec 15, 2014
• Unscored —
  CVE-2014-9251

  Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attac…

  Dec 15, 2014
• Unscored —
  CVE-2014-9386

  Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote at…

  Dec 15, 2014
• Unscored —
  CVE-2014-9250

  Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, w…

  Dec 15, 2014
• Unscored —
  CVE-2014-9248

  Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain a…

  Dec 15, 2014