33554 matches found
CVE-2014-5381
The CVE-2014-5381 entry affects Grand MA 300 fingerprint readers (firmware 6.60) from Granding. The vulnerability stems from weak PIN verification, enabling brute-force attempts to recover a PIN via network/WIGAND traffic. Public PoCs and advisories describe the flaw and provide an example brute-...
CVE-2014-5380
Grand MA 300 allows retrieval of the access PIN from sniffed data...
CVE-2014-5380
CVE-2014-5380 concerns the Grand MA 300 fingerprint access control device, where a weak PIN verification flaw allows retrieval of the access PIN from sniffed data. Connected advisories describe affected versioning (Grand MA 300/ID with firmware 6.60) and provide concrete attack details, including...
CVE-2014-6039
CVE-2014-6039 affects ManageEngine EventLog Analyzer (v7–v9.9 build 9002). A information-disclosure path via the hostdetails servlet exposes usernames and passwords for managed Windows/AS/400 hosts; exploitation relies on prior CVE-2014-6038 flow to obtain host identifiers and then extract creden...
CVE-2014-6038
CVE-2014-6038 affects Zoho/ManageEngine EventLog Analyzer (v7–v9.9 build 9002). The cited issue is an information disclosure in the agentHandler servlet, enabling an unauthenticated remote attacker to obtain usernames, passwords or hashes from the managed hosts’ data. Some connected sources also ...
CVE-2014-6059
WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability...
CVE-2014-5092
Status2k allows Remote Command Execution in admin/options/editpl.php...
CVE-2014-4561
The ultimate-weather plugin 1.0 for WordPress has XSS...
CVE-2014-5093
Status2k Server Monitoring Software (CVE-2014-5093) is documented to not remove the install directory, enabling credential reset. Connected sources corroborate multiple vulnerabilities across CVEs CVE-2014-5088…CVE-2014-5094 (XSS, SQL Injection, command execution) affecting Status2k, with exploit...
CVE-2014-5092
CVE-2014-5092 affects the Status2k Server Monitoring Software . The initial description states that “Status2k allows Remote Command Execution in admin/options/editpl.php,” indicating a vulnerability in the web interface that enables an attacker to execute commands remotely via the affected PHP fi...
CVE-2014-4530
flog plugin 0.1 for WordPress has XSS...
CVE-2014-4561
CVE-2014-4561 affects the WordPress Ultimate Weather Plugin (
CVE-2014-4530
CVE-2014-4530 concerns the WordPress flog plugin (version 0.1). The vulnerability is a cross-site scripting (XSS) issue arising from insufficient input validation in the flog plugin, leading to unauthenticated, reflected XSS. Multiple connected sources (Red Hat, CNVD, NVD, CVE lists, and WP explo...
CVE-2014-4982
CVE-2014-4982 concerns a command-injection flaw in LPAR2RRD where insufficient input sanitization on the web GUI parameters allows arbitrary command execution on the application server. Affected versions are reported as ≤ 4.53 and ≤ 3.5. The underlying issue is rooted in input handling on the app...
CVE-2014-5081
CVE-2014-5081 affects Sphider before 1.3.6, Sphider Pro before 3.2, and Sphider Plus before 3.2. The authenticated bypass arises from an insecure login flow in auth.php where credentials could be accepted without proper validation; the fix implemented was to exit() after successful/failed login t...
CVE-2014-5081
sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass...
CVE-2014-4984
CVE-2014-4984 affects Déjà Vu Crescendo Sales CRM with a remote SQL Injection vulnerability. NVD lists CVSS2 base 7.5 (HIGH) and CVSS3.1 base 9.8 (CRITICAL); exploitation is supported by multiple public references (PacketStorm, SecurityFocus, IBM X-Force) and exploit listings exist. The Connected...
CVE-2014-4984
Déjà Vu Crescendo Sales CRM has remote SQL Injection...
