CVE-2014-125042

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2014-6061

CVE-2014-6061 affects Symfony HttpFoundation: parsing of the Authorization header in HTTP basic/digest auth is incorrect, potentially exploitable in certain server setups. Affected: Symfony HttpFoundation 2.0.x–2.5.x. Remediation: upgrade to fixed releases — Symfony 2.3.19+, 2.4.9+, or 2.5.4+. So...

CVE-2014-5244

The CVE-2014-5244 entry maps to Symfony HttpFoundation DoS via an overly permissive hostname validation in Request::getHost(). Affected versions are Symfony HttpFoundation 2.0.X through 2.5.X. Root cause: hostname parsing/validation using a regex can trigger denial of service when a crafted Host ...

CVE-2014-6072

CVE-2014-6072 concerns the Symfony WebProfiler import/export feature. The connected documents indicate a CSRF-protected form that accepts PHP-serialized profiler data, which can be crafted to inject code via unserialize, leading to potential code injection. Affected versions are Symfony WebProfil...

Ubuntu: Security Advisory (USN-4771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4767-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-125083

creationtimestamp| type| source ---|---|--- 2023-01-19 12:21:38+00:00| seen| https://t.me/cibsecurity/56707...

CVE-2014-125083

The CVE-2014-125083 entry applies to Anant Labs google-enterprise-connector-dctm up to version 3.2.3. The root cause is SQL injection via manipulation of the username and domain arguments in the affected functionality. The issue is rated critical (CVSS v3.1) with potential high impact to confiden...

CVE-2022-47966

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain...

CVE-2014-125082 nivit redports model.py sql injection

A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code of the file redports-trac/redports/model.py. The manipulation leads to sql injection. The name of the patch is fc2c1ea1b8d795094abb15ac73cab90830534e04. It is recommended to appl...

CVE-2014-125082

The CVE-2014-125082 entry concerns nivit redports. A SQL injection flaw affects the file redports-trac/redports/model.py. The vulnerability is described as critical, with exploitation described via manipulation of code in that file. A patch is identified: fc2c1ea1b8d795094abb15ac73cab90830534e04,...

CVE-2014-125081

The CVE-2014-125081 entry concerns risheesh debutsav, where a SQL injection vulnerability affects an unknown processing path. The issue is classified as critical with a patch reference: 7a8430df79277c613449262201cc792db894fc76. Connected sources confirm this vulnerability leads to SQL injection a...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2014-7810)

Summary WebSphere Application Server is shipped with IBM Tivoli System Automation Application Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: Multiple security vulnerabilities has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2014-0114, CVE-2012-1007, CVE-2016-1182, CVE-2016-1181)

Summary WebSphere Application Server is shipped with IBM Tivoli System Automation Application Manager. Information about multiple security vulnerabilities affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed...

CVE-2014-125080

creationtimestamp| type| source ---|---|--- 2023-01-16 20:23:58+00:00| seen| https://t.me/cibsecurity/56561...

CVE-2014-125080

CVE-2014-125080 affects frontaccounting faplanet and is described as a path traversal vulnerability. The initial and connected documents consistently name unknown code as the vulnerable component and indicate exploitation could lead to unauthorized access to files via path traversal. A patch is i...

CVE-2014-125080 frontaccounting faplanet path traversal

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue...

CVE-2014-125078

CVE-2014-125078 affects yanheven console. The vulnerability targets horizon/static/horizon/js/horizon.instances.js and enables cross-site scripting when an attacker manipulates unknown functionality, with remote attack potential. A patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd, ...

SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2023:0072-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0072-1 advisory. - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string bsc1206958. Tenable has extracted the preceding...