Archive
December 2014
Vulnerabilities first published in this month (UTC), newest first.
97 results · Clear filters · Feed
-
Unscored —CVE-2011-5284 Public exploit
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smooth…
-
Unscored —CVE-2011-5283 Public exploit
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expr…
-
Unscored —
Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote a…
-
Unscored —CVE-2014-9254 Public exploit
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to …
-
Unscored —CVE-2014-1905 Public exploit
Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin bef…
-
Unscored —CVE-2014-1908 Public exploit
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper L…
-
Unscored —
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read …
-
Unscored —CVE-2012-1415 Public exploit
Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attacke…
-
Unscored —CVE-2010-5075 Public exploit
Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a deni…
-
Unscored —CVE-2011-4720 Public exploit
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename …
-
Unscored —CVE-2012-1203 Public exploit
Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attacke…
-
Unscored —CVE-2013-6041 Public exploit
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2013-6043 Public exploit
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication atte…
-
Unscored —CVE-2013-6227 Public exploit
Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly…
-
Unscored —CVE-2014-8810 Public exploit
SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows rem…
-
Unscored —CVE-2014-9415 Public exploit
Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted Q…
-
Unscored —CVE-2014-9416 Public exploit
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute…
-
Unscored —CVE-2014-9417 Public exploit
The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (prog…
-
Unscored —CVE-2014-9418 Public exploit
The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local user…
-
Unscored —
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows r…
-
Unscored —CVE-2014-4322 Public exploit
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) And…
-
Unscored —CVE-2014-9412 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers…
-
Unscored —CVE-2014-9115 Public exploit
SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.…
-
Unscored —CVE-2014-5216 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote att…
-
Unscored —
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.0…
-
Unscored —CVE-2014-7286 Public exploit
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local u…
-
Unscored —
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…
-
Unscored —
Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via …
-
Unscored —CVE-2014-7208 Public exploit
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in…
-
Unscored —
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 …
-
Unscored —CVE-2014-9258 Public exploit
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to exe…
-
Unscored —
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57…
-
Unscored —
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to ex…
-
Unscored —CVE-2014-9322 Public exploit
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack …
-
Unscored —
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE…
-
Unscored —
luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0…
-
Unscored —CVE-2014-8610 Public exploit
AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, whic…
-
Unscored —CVE-2014-8609 Public exploit
The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Andro…
-
Unscored —CVE-2014-8507 Public exploit
Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/Wa…
-
Unscored —CVE-2014-4323 Public exploit
The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used i…