Linux Distros Unpatched Vulnerability : CVE-2014-7945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service out-of-bounds read via a...

Linux Distros Unpatched Vulnerability : CVE-2014-9016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes aka phpass module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to...

CVE-2014-125113 Dell/Quest KACE K1000 Unauthenticated File Upload RCE

An unrestricted file upload vulnerability exists in Dell acquired by Quest KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the downloadagent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible...

Linux Distros Unpatched Vulnerability : CVE-2014-5021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the...

Linux Distros Unpatched Vulnerability : CVE-2014-3180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restartsyscall uses...

CVE-2014-125122 Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset

A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TMBlockURL parameter to the endpoint. By exploiting this flaw, an...

VulnCheck KEV: CVE-2014-125123

An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel developed by LXCenter prior to version 6.1.12. The flaw resides in the login-name parameter passed to lbin/webcommand.php, which fails to properly sanitize input, allowing an attacker to extract the...

Oracle Linux 7 : apache-commons-beanutils (ELSA-2025-10814)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10814 advisory. - Add SuppressPropertiesBeanIntrospector.SUPPRESSDECLARINGCLASS Orabug: 38176946CVE-2025-48734 - Fix CVE-2014-0114 - Fix CVE-2019-10086 - Resolves: CVE-2013-15...

CVE-2014-9194

creationtimestamp| type| source ---|---|--- 2025-07-29 17:41:51+00:00| seen| Telegram/E27Wr6NVHRJBRXcbeKI1yJCl-HFTGRWUaNPMN5R0Dziro...

CVE-2014-125118

A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username to inject arbitrary commands via a...

Exploit for CVE-2014-7911

Security-Data-Analysis-and-Visualization 2018-2020青年安全圈-活跃技术博主/博客 声明 所有数据均来自且仅来自公开信息，未加入个人先验知识，如有疑义，请及时联系[email protected]。 公开这批数据是为了大家一起更快更好地学习，请不要滥用这批数据，由此引发的问题，本人将概不负责。 对这批数据的分析文章首发在个人微信公众号，原文为：我分析了2018-2020年青年安全圈450个活跃技术博客和博主，转载请联系作者。 Why - 最初目的：个人日常安全阅读资源不足，需要从博客、Github、Twitter等多个数据源补充。 -...

CVE-2014-125116

HybridAuth

CVE-2014-125118 eScan 5.5-2 Web Management Console Command Injection

A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username to inject arbitrary commands via a...

CVE-2014-9190

creationtimestamp| type| source ---|---|--- 2025-07-24 23:35:46+00:00| seen| Telegram/4KjD9vFaQ9oo4ZspLlIr4VNLPIX8phdzkhxiED2q1SlCGYU...

CVE-2014-8514

creationtimestamp| type| source ---|---|--- 2025-07-24 23:35:46+00:00| seen| Telegram/P4Fx1e4brLs0o50aOl3IKCUGzYxzeKJbGJmygAKRXq-qUJ0...

CVE-2014-9188

creationtimestamp| type| source ---|---|--- 2025-07-24 23:35:46+00:00| seen| Telegram/P4Fx1e4brLs0o50aOl3IKCUGzYxzeKJbGJmygAKRXq-qUJ0...

CVE-2014-8513

creationtimestamp| type| source ---|---|--- 2025-07-24 23:35:46+00:00| seen| Telegram/P4Fx1e4brLs0o50aOl3IKCUGzYxzeKJbGJmygAKRXq-qUJ0...

Oracle Linux 7 : mpfr (ELSA-2025-9332)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9332 advisory. 3.1.1-4.0.1 - Fixes buffer overflow in mpfrstrtofr CVE-2014-9474 Orabug: 38103811 Tenable has extracted the preceding description block directly from the Oracle...

mpfr security update

3.1.1-4.0.1 - Fixes buffer overflow in mpfrstrtofr CVE-2014-9474 Orabug: 38103811...

CVE-2014-3931

creationtimestamp| type| source ---|---|--- 2025-07-07 17:45:06+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3ltfdnpq6c22l 2025-07-07 18:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114813266893249320 2025-07-07 19:01:10+00:00| seen|...