33554 matches found
CVE-2014-8089
CVE-2014-8089 describes a SQL injection in Zend Framework when using the sqlsrv PHP extension. The vulnerability affects: Zend Framework 1.x up to 1.12.9; 2.2.x before 2.2.8; and 2.3.x before 2.3.3, enabling remote attackers to execute arbitrary SQL commands via a null byte in input. Documents fr...
CVE-2014-8089
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte...
CVE-2014-4981
CVE-2014-4981 affects LPAR2RRD prior to 3.5 (and up to 3.5) and related versions where insufficient input sanitization of web GUI parameters allows remote attackers to execute arbitrary commands. The underlying issue is input validation that enables arbitrary command injection on the LPAR2RRD ser...
CVE-2014-1947
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...
Stack overflow
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...
CVE-2014-7236
CVE-2014-7236 affects TWiki (lib/TWiki/Plugins.pm) prior to 6.0.1. The vulnerability is an eval injection in the debugenableplugins parameter used during do/view/Main/WebHome, enabling remote Perl code execution with the web server user’s privileges. Evidence across sources (CVE entry, NVD/CIRCL/...
CVE-2014-7236
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...
CVE-2014-1947
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...
CVE-2014-1947
CVE-2014-1947, 2014-1958, and 2014-2030 describe stack-based buffer overflows in ImageMagick’s PSD handling (psd.c): WritePSDImage and DecodePSDPixels functions are implicated. 1947 targets WritePSDImage in ImageMagick 6.5.4 and earlier, enabling potential denial of service or remote code executi...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5005. Reason: This candidate is a reservation duplicate of CVE-2014-5005. Notes: All CVE users should reference CVE-2014-5005 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2014-9404
CVE-2014-9404 entry is rejected/not used; refer to CVE-2014-5005.
Security Bulletin: Information disclosure in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2014-3603)
Summary Man in the middle vulnerability CVE-2014-3603 affects Websphere Liberty and OpenLiberty Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Log Analysis| 1.3.1 Log Analysis| 1.3.2...
Security Bulletin: Vulnerabilities in Websphere Liberty and OpenLiberty
Summary There are vulnerabilities in Websphere Liberty used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2014-3603 DESCRIPTION: The 1 HttpResource and 2 FileBackedHttpResource implementations in Shibboleth Identity Provider IdP before 2.4.1 and...
CVE-2014-1617
CVE-2014-1617 affects Microsys PROMOTIC 8.2.13. A buffer overflow in the ActiveX control Start routine can cause denial of service. All available sources describe the vulnerability as a vulnerability in the PROMOTIC ActiveX component, but the provided documents do not specify exact exploit vector...
CVE-2014-3208
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free pszQuery,...
CVE-2014-3208
CVE-2014-3208 affects askpop3d 0.7.7 (free build) and is described as a denial-of-service condition triggered through the pszQuery input. The linked sources confirm a DoS impact with partial availability impact per CVSS v2 and high availability impact per CVSS v3, but no concrete exploitation det...
CVE-2014-3208
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free pszQuery,...
CVE-2014-3919
Netgear CG3100 devices (pre-3.9.2421.13.mp3 V0027) are vulnerable via an embedded malicious script in an unspecified page, enabling potential information disclosure. The exact root cause, affected subcomponents, and remediation are not detailed in the provided documents. What is clear: exposure r...
CVE-2014-4198
The vulnerability CVE-2014-4198 affects BS-Client Private Client, versions 2.4 and 2.5. A flaw in the authentication flow allows a two-factor bypass via an XML request that omits ADPswID and AD parameters, enabling a malicious user to access privileged functions. Root cause stated as improper han...