Archive
19 December 2014
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —
nds/files/opt/novell/eDirectory/lib64/ndsimon/public/images in iMonitor in Novell eDirectory before 8.8 SP8 Patch 4 all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in nds/search/data in iMonitor in Novell eDirectory before 8.8 SP8 Patch 4 all…
-
Unscored —
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which m…
-
Unscored —
Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependen…
-
Unscored —CVE-2014-7208 Public exploit
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in…
-
Unscored —
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 …
-
Unscored —
The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cau…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 O…
-
Unscored —
Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is …
-
Unscored —
The XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote attackers to cause a deni…
-
Unscored —
The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return valu…
-
Unscored —
The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unl…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mikiurl Wordpress Eklentisi plugin 2.0 and earlier fo…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPre…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the yURL ReTwitt plugin 1.4 and earlier for WordPress all…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow …
-
Unscored —
Heap-based buffer overflow in the nbns_spoof function in plug-ins/nbns_spoof/nbns_spoof.c in Ettercap 0.8.1 allows remo…
-
Unscored —CVE-2014-9258 Public exploit
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to exe…
-
Unscored —
The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote a…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and earlier for WordPress al…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allo…
-
Unscored —
Puppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and certificate signing request in…
-
Unscored —
Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitr…
-
Unscored —
Ettercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a denial of service (cra…
-
Unscored —
The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to caus…
-
Unscored —
The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the or…
-
Unscored —
Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers…
-
Unscored —
Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and poss…
-
Unscored —
The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of servic…
-
Unscored —
The radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an incorrect cast, which allows …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.0.5 allow remote attackers to hi…
-
Unscored —
Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activa…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and earlier for WordPress allow …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and ea…
-
Unscored —
Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-864…