33558 matches found
CVE-2014-4913
CVE-2014-4913 (ZF2014-03) describes a cross-site scripting vulnerability in Zend Framework caused by insufficient validation of client-side data in multiple view helpers. Affected versions include Zend Framework before 2.2.7 and before 2.3.1. Impact is potential execution of arbitrary script in u...
CVE-2014-3701
CVE-2014-3701 describes a tmp file race condition in eDeploy. NVD lists CVSSv3.1 8.1 (Network, High, UI=None, Privileges=None, Scope=Unchanged) with high impact to confidentiality, integrity, and availability; CVSSv2 9.3 (Network, High) also indicates complete impact. Connected entries reiterate ...
CVE-2014-3699
CVE-2014-3699 affects the Linux configuration/update tool eDeploy . The vulnerability is a deserialization flaw: untrusted data deserialized via Python’s cPickle , leading to remote code execution. Public references in the documents consistently describe an RCE impact without detailing specific e...
CVE-2014-3643
CVE-2014-3643 is an XXE vulnerability in Jersey's SAX XML parsing path. The issue allows a remote attacker to obtain sensitive information by sending specially crafted XML data to Jersey that is parsed by the SAX parser with parameter entities not disabled. The IBM bulletin for IBM DevOps Release...
CVE-2014-3536
CFME CloudForms Management Engine 5: RHN account information is logged to topoutput.log during registration...
CVE-2014-3536
CVE-2014-3536 affects Red Hat CloudForms Management Engine (CFME) version 5. The vulnerability stems from CFME logging RHN account information to top_output.log during the registration process, leading to potential information disclosure. Multiple connected records corroborate the issue as a disc...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2014-1867
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
DEBIAN-CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2014-1867
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2014-3495
CVE-2014-3495 affects duplicity 0.6.24, with the root cause described as improper verification of SSL certificates. The CVSS v3.1 base score is 7.5 (HIGH), driven by confidentiality impact. Exploitation details, affected environments, and remediation steps are not provided in the supplied documen...
CVE-2014-0241
rubygem-hammercliforeman: File /etc/hammer/cli.modules.d/foreman.yml world readable...
UBUNTU-CVE-2014-0212
qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors...
CVE-2014-2387
CVE-2014-2387 affects Pen 0.18.0, which has insecure temporary file creation. The vulnerability allows local attackers to exploit symlink attacks via temporary files such as "/tmp/webfile.html" and "/tmp/penctl.cgi", potentially corrupting system files. The provided documents state the issue but ...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2014-1867
CVE-2014-1867 affects suPHP prior to 0.7.2. The vulnerability stems from the source-highlighting feature, which enables a security bypass and could lead to arbitrary code execution. Public references (NVD, CVE listings) describe the issue, but exploitation details and concrete patches are not pro...