CVE-2014-3753

AgileBits 1Password through 1.0.9.340 allows security feature bypass...

CVE-2014-3753

The CVE-2014-3753 entry concerns AgileBits 1Password up to version 1.0.9.340, where a security feature bypass is reported. The available documents identify the affected product and the general impact (bypass of a security feature) but do not provide a detailed root cause, affected components, exp...

CVE-2014-3449

CVE-2014-3449 affects BSS Continuity CMS 4.2.22640.0, exposing an Authentication Bypass due to insufficient ACLs that allowed unauthenticated access to the admin interface. The vulnerability was demonstrated by exposing the administrative path /wcm/system/pages/newui/admin.aspx, enabling bypass w...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3448

The CVE-2014-3448 issue affects BSS Continuity CMS 4.2.22640.0. Affected component is the ASPX file upload handler, which allows unauthenticated uploads without verifying file type or origin. The root cause is inadequate validation in the upload functionality, enabling remote code execution by pl...

CVE-2014-3447

CVE-2014-3447 affects BSS Continuity CMS 4.2.22640.0 . The vulnerability allows a remote, unauthenticated attacker to overload the underlying database by repeatedly calling a node enumeration script, leading to a Denial of Service within minutes. The issue arises from heavy processing within the ...

CVE-2014-2650

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2014-3211

CVE-2014-3211 affects Publify prior to 8.0.1, with a Denial of Service vulnerability. Remediation per PT-2020-7645 and Red Hat entries is to upgrade to version 8.0.1 or later; no exploit details are provided in the documents.

CVE-2014-3211

Publify before 8.0.1 is vulnerable to a Denial of Service attack...

CVE-2014-2650

The CVE concerns Unify OpenStage / OpenScape Desk Phone IP (pre-V3 R3.11.0) where the web-based management interface is vulnerable to OS command injection. Root cause is improper handling of input in the management UI, enabling an attacker to execute arbitrary commands on the device. CVSS data in...

CVE-2014-2650

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

CVE-2014-2651

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 contains an authentication bypass in the default mode of the Workpoint Interface. This is the defined impact in multiple sources (NVD entry CVE-2014-2651 and Red Hat advisory RH:CVE-2014-2651). The connected documents confirm the vulne...

CVE-2014-2686

Technical details about CVE-2014-2686 are not publicly provided in the connected documents. Monitor for updates.

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2014-5287

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface WUI...

CVE-2014-5287

CVE-2014-5287 affects Kemp Load Master 7.1-16 and earlier; a Bash script injection vulnerability arises from failure to sanitize input in the Web UI. Connected sources document multiple vulnerabilities (RCE, CSRF, XSS, DoS) in Kemp Load Master 7.1-16 and earlier, with exploit references (Exploit-...

CVE-2014-2072

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks...

CVE-2014-2072

CVE-2014-2072 affects Dassault Systemes Catia V5-6R2013. The issue is a Stack Buffer Overflow in CATIA V5-6R2013 due to inadequate boundary checks, reported as a network-based vulnerability with high to critical impact (CVSS2: 7.5, CVSS3.1: 9.8). Public references indicate exploitation resources ...

CVE-2014-1860

CVE-2014-1860 affects Contao CMS up to version 3.2.4, where PHP Object Injection vulnerabilities are reported. The connected zdt entry documents a code execution vulnerability in Contao 3.2.4 and earlier, linked to improper handling of user input that is unserialized, enabling potential arbitrary...