33560 matches found
Medium: mod_wsgi
Issue Overview: Failure to handle errors when attempting to drop group privileges: modwsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors...
CVE-2014-9958
CVE-2014-9958 is an elevation of privilege in Qualcomm closed‑source components within Android kernel. The vulnerability affects Qualcomm components integrated in Android devices and is listed in the Android security bulletin with fixes provided by Qualcomm AMSS and Android patch updates (June 20...
CVE-2014-9956
CVE-2014-9956 technical details are not publicly provided in the supplied documents; no concrete affected component/version/root cause/fix is disclosed here. Monitor for updates.
CVE-2014-9954
CVE-2014-9954 is an elevation of privilege vulnerability in Qualcomm closed‑source components used by Android. Affected product: Android kernel. Root cause details are not fully disclosed in the provided documents, but the NVD entry lists an elevation of privilege impact with a as‑is Android kern...
CVE-2014-9955
CVE-2014-9955 is an elevation-of-privilege vulnerability affecting Android, specifically in Qualcomm closed‑source components with the Android kernel as the platform. The connected CVE records confirm the issue is associated with Qualcomm closed‑source components and that fixes are not delivered ...
CVE-2014-9959
CVE-2014-9959 is described as an elevation of privilege vulnerability affecting Qualcomm closed‑source components within Android, specifically the Android kernel. The initial description notes an elevation of privilege with high/critical impact, but the connected documents only reiterate the exis...
CVE-2014-9953
CVE-2014-9953 is an elevation-of-privilege vulnerability affecting Qualcomm closed‑source components within Android kernels. The CVE is documented across multiple sources (NVD, CVE List, prion-like aggregations) as a Qualcomm‑related issue with a critical impact. The vulnerability is categorized ...
CVE-2014-5170
The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003...
CVE-2014-5170
The CVE-2014-5170 entry concerns the Drupal Storage API module. Affected: Storage API module for Drupal 7.x before 7.x-1.6. Root cause: failure to update .htaccess file contents after SA-CORE-2013-003, enabling remote attackers to execute arbitrary code. The issue is documented in DRUPAL-SA-CONTR...
CVE-2014-6604
Vulnerability context: CVE-2014-6604 affects the WordPress Subscribe2 plugin, specifically the class-s2-list-table.php component, with exploitation via the ip parameter. The issue is an XSS vulnerability in versions prior to 10.16. What’s affected: Subscribe2 plugin for WordPress (plugin file: cl...
CVE-2014-5132
Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...
CVE-2014-5130
Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token...
CVE-2014-5132
CVE-2014-5132 affects Avolve Software ProjectDox 8.1. The vulnerability is a User Enumeration issue where a remote attacker can determine valid users via vectors related to email addresses. Documented details confirm that the application exposes user-existence information, enabling enumeration wi...
CVE-2014-5132
Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...
CVE-2014-5130
The CVE-2014-5130 entry applies to Avolve Software ProjectDox 8.1 . The vulnerability is described as an information disclosure where remote authenticated users can obtain sensitive data from other users via vectors involving a direct access token. The connected documentation confirms multiple re...
CVE-2014-0486
Knot DNS allows remote DoS via a crafted DNS message in versions before 1.5.2, causing application crash. The issue affects Knot DNS when processing DNS messages; no remediation or mitigation details are provided in the supplied documents.
CVE-2014-4959
Technical details about CVE-2014-4959 are not publicly provided in the included documents; no affected products, root cause, impact, or remediation are specified. Monitor for updates.
CVE-2014-2048
The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...