CVE-2014-125030

creationtimestamp| type| source ---|---|--- 2023-01-01 12:15:37+00:00| seen| https://t.me/cibsecurity/55717...

CVE-2014-125030 taoeffect Empress hard-coded password

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a pat...

CVE-2014-125030

CVE-2014-125030 affects taoeffect Empress. The vulnerability is due to hard-coded credentials in an unknown functionality, classified as critical. A patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d and is recommended to fix the issue. Connected documents corroborate hard-coded pass...

CVE-2014-125028

creationtimestamp| type| source ---|---|--- 2022-12-31 22:14:59+00:00| seen| https://t.me/cibsecurity/55677...

CVE-2014-125028

CVE-2014-125028 affects the valtech IDP Test Client, with the vulnerability stemming from unknown functionality in the file python-flask/main.py that enables cross-site request forgery (CSRF) . The issue may be exploitable remotely, and a patch named f1e7b3d431c8681ec46445557125890c14fa295f is re...

CVE-2014-125027

creationtimestamp| type| source ---|---|--- 2022-12-31 18:36:17+00:00| seen| https://t.me/cibsecurity/55675 2025-04-11 14:51:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11431...

CVE-2014-125027

CVE-2014-125027 affects Yuna Scatari TBDev up to version 2.1.17, impacting the get_user_icons function in usersearch.php. The vulnerability arises from improper handling of the parameter n/r/r2/em/ip/co/ma/d/d2/ul/ul2/ls/ls2/dl/dl2, allowing cross-site scripting and remote exploitation. The advis...

CVE-2014-125026

A flaw was found in the golz4 package. LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input...

CVE-2014-125026

creationtimestamp| type| source ---|---|--- 2022-12-28 00:11:58+00:00| seen| https://t.me/cibsecurity/55448...

CVE-2014-125026 Out-of-bounds write in github.com/cloudflare/golz4

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input...

CVE-2014-125026 Out-of-bounds write in github.com/cloudflare/golz4

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input...

K16847: Apache vulnerabilities CVE-2014-8109, CVE-2014-3581, CVE-2014-3583

Security Advisory Description Description CVE-2014-8109 modlua.c in the modlua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which...

Security Bulletin: Multiple vulnerabilities have been identified in Smack API shipped with IBM Tivoli Netcool Impact (CVE-2014-0363, CVE-2014-0364)

Summary Smack API is used by IBM Tivoli Netcool Impact as part of the Jabber service component. IBM Tivoli Netcool Impact has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2014-0363 DESCRIPTION: Ignite Realtime Smack API could allow a remote attacker to conduct spoofing attacks,...

Security Bulletin: Apache Commons HttpClient 3.x (and few others) allow Man-In-The-Middle (MITM) attack

Summary Apache Commons HttpClient 3.x and few others used do not verify the server hostname in the subject Common Name CN and allows Man-In-The-Middle MITM attack Vulnerability Details CVEID:CVE-2012-5783 DESCRIPTION: Apache Commons HttpClient, as used in Amazon Flexible Payments Service FPS...

Log4j: One Year Later

One year ago, the Log4j remote code execution vulnerability known as Log4Shell CVE-2021-44228 was announced. The critical severity level vulnerability in a logging framework used across virtually all Java environments quickly set the internet on fire when it was released and exploited. It’s...

SUSE: Security Advisory (SUSE-SU-2022:4371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2022 : rsyslog (ALAS2022-2022-211)

The version of rsyslog installed on the remote host is prior to 8.2204.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-211 advisory. - rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of...

Security Bulletin: This Power System update is being released to address multiple CVEs for vTPM1.2

Summary This update addresses multiple CVEs that impacts any VM configured with a virtual trusted platform module vTPM version 1.2 Vulnerability Details CVEID:CVE-2018-5407 DESCRIPTION: Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive...

Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2014-7810)

Summary IBM Cloud Transformation Advisor has addressed the following vulnerability. CVE-2014-7810 Vulnerability Details CVEID: CVE-2014-7810 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the use of expression language. An attacker could exploi...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2022:4260-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4260-1 advisory. - CVE-2014-9645: Fixed loading of unwanted module with / in module names bsc914660. - Enable...