CVE-2014-125055

creationtimestamp| type| source ---|---|--- 2023-01-07 12:25:42+00:00| seen| https://t.me/cibsecurity/56110...

CVE-2014-125058

The CVE-2014-125058 entry concerns LearnMeSomeCodes project3 where the SQL injection vulnerability resides in the search_first_name function of search.rb. The root cause is improper handling of input in that function, enabling manipulation of SQL queries. A patch named d3efa17ae9f6b2fc25a6bbcf165...

CVE-2014-125057

CVE-2014-125057 affects the mrobit robitailletheknot CSRF Token Handler, specifically the file app/filters.php. The vulnerability arises from improper handling of the _token argument, causing incorrect comparison and enabling remote attack. Exploitation details are not fully enumerated in the pro...

CVE-2014-125056

CVE-2014-125056 affects Pylons Horus, specifically an unknown functionality in the file horus/flows/local/services.py where manipulation leads to an observable timing discrepancy. The sources consistently describe high attack complexity and difficult exploitation. A patch identified as fd56ccb62c...

CVE-2014-125055

The CVE concerns the Go library agnivade/easy-scrypt. Affected is the VerifyPassphrase function in scrypt.go, where an observable timing discrepancy is introduced due to the underlying implementation flaw. Per multiple sources, upgrading to version 1.0.0 fixes the issue (patch: 477c10cf3b144ddf96...

CVE-2014-125054 koroket RedditOnRails Vote access control

A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as...

CVE-2014-125054

CVE-2014-125054 affects koroket RedditOnRails, specifically the Vote Handler component. The issue is improper access controls in that handler, with remote exploitation possible. A patch is identified as 7f3c7407d95d532fcc342b00d68d0ea09ca71030 (VDB-217594). Multiple sources (NVD, Red Hat, CVE rec...

CVE-2014-125052

creationtimestamp| type| source ---|---|--- 2023-01-07 00:24:39+00:00| seen| https://t.me/cibsecurity/56083...

CVE-2014-125053

Affected software: Piwigo-Guest-Book (up to version 1.3.0) with vulnerability in the Navigation Bar component. Root cause: manipulation of the start argument in include/guestbook.inc.php enables SQL injection. Impact: potential unauthorized access/manipulation via SQL injection; CVSS vectors in s...

CVE-2014-125052

CVE-2014-125052 affects the JervenBolleman sparql-identifiers project, specifically the code path in src/main/java/org/identifiers/db/RegistryDao.java. The vulnerability is described as a SQL injection arising from how input is processed within RegistryDao, leading to potential impact on confiden...

CVE-2014-125052 JervenBolleman sparql-identifiers RegistryDao.java sql injection

A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of the file src/main/java/org/identifiers/db/RegistryDao.java. The manipulation leads to sql injection. The patch is named 44bb0db91c064e305b192fc73521d1dfd25bde52...

CVE-2014-125051

creationtimestamp| type| source ---|---|--- 2023-01-06 20:20:19+00:00| seen| https://t.me/cibsecurity/56062...

CVE-2014-125050

creationtimestamp| type| source ---|---|--- 2023-01-06 20:20:17+00:00| seen| https://t.me/cibsecurity/56060...

CVE-2014-125048

creationtimestamp| type| source ---|---|--- 2023-01-06 16:59:32+00:00| seen| https://t.me/cibsecurity/56045...

CVE-2014-125051

The CVE-2014-125051 entry concerns himiklab yii2-jqgrid-widget (up to 1.0.7). A vulnerability in addSearchOptionsRecursively (JqGridAction.php) allows SQL injection. Root cause: improper handling in the affected function leading to data-exposure/modify risk. Publicly stated impact is high/critica...

CVE-2014-125049

creationtimestamp| type| source ---|---|--- 2023-01-06 16:20:11+00:00| seen| https://t.me/cibsecurity/56044...

CVE-2014-125050

CVE-2014-125050 affects the voter-js project, with the vulnerability residing in an unknown functionality of main.js that enables SQL injection. Public documents confirm the issue is critical and tied to voter-js; a patch is identified by the commit hash 6317c67a56061aeeaeed3cf9ec665fd9983d8044, ...

CVE-2014-125050 ScottTZhang voter-js main.js sql injection

A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch ...

CVE-2014-125049

CVE-2014-125049 affects typcn Blogile. The vulnerability is in the getNav function of the file server.js , where manipulation of the query argument leads to a SQL injection . A patch named cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d is identified as the fix, associated with vulnerability identifier ...

CVE-2014-125048

The CVE-2014-125048 entry concerns kassi xingwall with a vulnerability in processing at app/controllers/oauth.js that can lead to session fixation. The defect is tied to the patch e9f0d509e1408743048e29d9c099d36e0e1f6ae7, and applying this patch is recommended. Multiple sources (NVD, Red Hat, CVE...