33554 matches found
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-3230
CVE-2014-3230 affects the libwww-perl LWP::Protocol::https module (versions 6.04–6.06) when using IO::Socket::SSL as the SSL socket class. The underlying issue is that server certificate validation can be disabled via the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables. Impact described in th...
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-2581
CVE-2014-2581 affects Smb4K before 1.1.1, where the cuid option in the Additional options line edit can let remote attackers obtain credentials. CVSS: CVSS v3.1 base score 7.5 (HIGH) with NETWORK access and no user interaction; CVSS v2 base score 5.0 (PARTIAL confidentiality). Remediation: upgrad...
CVE-2014-3445
CVE-2014-3445 describes an authentication bypass in HandsomeWeb SOS Webpages prior to 1.1.12. The vulnerability resides in backup.php, which allows an unauthenticated user to perform administrative backups and potentially disclose the administrator password hash by manipulating the MD5-based key ...
CVE-2014-5500
creationtimestamp| type| source ---|---|--- 2020-01-27 23:37:37+00:00| seen| https://t.me/cveNotify/470...
CVE-2014-7302
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:41+00:00| seen| https://t.me/cveNotify/469...
CVE-2014-7301
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:04+00:00| seen| https://t.me/cveNotify/468...
CVE-2014-3979
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:03+00:00| seen| https://t.me/cveNotify/467...
CVE-2014-5500
Synacor Zimbra Collaboration before 8.0.8 has XSS...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
CVE-2014-8563
CVE-2014-8563 affects Synacor Zimbra Collaboration Suite before version 8.0.9. The vulnerability is described as plaintext command injection during STARTTLS, stemming from input data not properly filtered when constructing OS-executable commands. Several connected sources reiterate that versions ...
CVE-2014-5500
CVE-2014-5500 affects Synacor Zimbra Collaboration Suite (ZCS) prior to version 8.0.8. The connected documents confirm a cross-site scripting (XSS) vulnerability in the Web application, stemming from insufficient validation of client‑side data. Public references describe the affected product and ...
CVE-2014-8741
Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors...
CVE-2014-8742
Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2014-3979
CVE-2014-3979 affects Bytemark Symbiosis. A remote attacker can cause a denial of service by supplying a crafted username that triggers the firewall to blacklist the attacker’s IP. The vulnerability’s impact is described as availability-related (per CVSS: partial/ HIGH in newer metrics), but the ...
CVE-2014-8741
CVE-2014-8741 documents a directory traversal vulnerability in the Lexmark MarkVision Enterprise product, specifically the GfdFileUploadServerlet servlet, before version 2.1. The issue allows a remote attacker to write to arbitrary files via unspecified vectors, with public references noting poss...