16 December 2014

22 results · Feed

• Unscored —
  CVE-2014-6176

  IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x thr…

  Dec 16, 2014
• Unscored —
  CVE-2014-8248

  SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows r…

  Dec 16, 2014
• Unscored —
  CVE-2014-8247

  Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 …

  Dec 16, 2014
• Unscored —
  CVE-2014-8246

  Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before…

  Dec 16, 2014
• Unscored —
  CVE-2014-5354

  plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the K…

  krb5 krb5 Debian Ubuntu
  Dec 16, 2014
• Unscored —
  CVE-2014-5353

  The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 …

  krb5 krb5 Debian Ubuntu
  Dec 16, 2014
• Unscored —
  CVE-2013-6435

  Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose…

  rpm rpm Debian Ubuntu
  Dec 16, 2014
• Unscored —
  CVE-2014-4936 Public exploit EPSS 17%

  The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE…

  Dec 16, 2014
• Unscored —
  CVE-2014-8751

  Multiple cross-site scripting (XSS) vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitra…

  Dec 16, 2014
• Unscored —
  CVE-2014-8340

  SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to…

  Dec 16, 2014
• Unscored —
  CVE-2014-8964

  Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or hav…

  pcre3 pcre3 Debian Ubuntu
  Dec 16, 2014
• Unscored —
  CVE-2014-8118

  Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in…

  rpm rpm Debian Ubuntu
  Dec 16, 2014
• Unscored —
  CVE-2014-8583

  mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges …

  mod-wsgi mod-wsgi Debian Ubuntu
  Dec 16, 2014
• Medium 6.5
  CVE-2014-9358

  Directory Traversal in Docker

  Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

  docker.io github.com/docker/docker Debian Go
  Dec 16, 2014
• Unscored —
  CVE-2014-9057

  SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6…

  Dec 16, 2014
• Unscored —
  CVE-2014-9373

  Directory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow Analyzer allows remot…

  Dec 16, 2014
• Unscored —
  CVE-2014-9323

  The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a d…

  firebird2.5 Ubuntu
  Dec 16, 2014
• Critical 9.8
  CVE-2014-9357

  Arbitrary Code Execution

  Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

  docker.io github.com/docker/docker Debian Go
  Dec 16, 2014
• Unscored —
  CVE-2014-9372

  Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) bef…

  Dec 16, 2014
• Unscored —
  CVE-2014-9371 EPSS 19%

  The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code…

  Dec 16, 2014
• Unscored —
  CVE-2014-5466

  Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x …

  Dec 16, 2014
• Unscored —
  CVE-2014-5359

  Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard…

  Dec 16, 2014