Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9734
HistoryJun 30, 2015 - 2:59 p.m.

CVE-2014-9734

2015-06-3014:59:00
CWE-22
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.375 Low

EPSS

Percentile

97.2%

JSON

Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php.

Affected configurations

NVD
Node
themepunchslider_revolutionRange≤4.1.4wordpress

Related

cve 2
openvas 3
cvelist 2
prion 2
patchstack 1
checkpoint_advisories 1
nvd 1
packetstorm 1
nuclei 1
threatpost 1
cve
cve
CVE-2014-9734
2022-10-03 16:20:41
CVE-2015-1579
2015-02-11 19:59:06
openvas
openvas
WordPress Revslider Arbitrary File Download Vulnerability
2015-07-10 00:00:00
WordPress Slider Revolution Arbitrary File Download Vulnerability
2015-03-31 00:00:00
WordPress Multiple Plugins / Themes Directory Traversal / File Download Vulnerability (HTTP)
2020-11-20 00:00:00
cvelist
cvelist
CVE-2014-9734
2022-10-03 16:20:41
CVE-2015-1579
2015-02-11 19:00:00
prion
prion
Directory traversal
2015-06-30 14:59:00
Directory traversal
2015-02-11 19:59:00
patchstack
patchstack
WordPress Slider Revolution Plugin <= 4.1.4 - Arbitrary File Download
2015-03-30 00:00:00
checkpoint_advisories
checkpoint_advisories
WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
2014-12-17 00:00:00
nvd
nvd
CVE-2015-1579
2015-02-11 19:59:06
packetstorm
packetstorm
WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script
2017-04-07 00:00:00
nuclei
nuclei
WordPress Slider Revolution - Local File Disclosure
2021-11-21 11:30:25
threatpost
threatpost
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
2020-06-03 20:37:44

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.375 Low

EPSS

Percentile

97.2%

JSON
Related for NVD:CVE-2014-9734
cve2openvas3cvelist2prion2patchstack1checkpoint_advisories1nvd1packetstorm1nuclei1threatpost1