CVE-2014-2312

The main function in androidmain.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid...

CVE-2014-2293

CVE-2014-2293 affects Zikula Application Framework prior to 1.3.7 build 11. The vulnerability arises from PHP object injection via crafted serialized data in index.php parameters: authentication_method_ser, authentication_info_ser, or zikulaMobileTheme. This can allow remote attackers to delete a...

CVE-2014-2048

CVE-2014-2048 corresponds to an access-control bypass in ownCloud Server via the user_openid app caused by an insecure OpenID implementation. Technical details in connected sources show the issue affects ownCloud Server versions prior to 5.0.15, with the vulnerability enabling remote login by an ...

CVE-2014-2312

Thermald contains a local-privilege vulnerability in android_main.cpp that allows a symlink attack on /tmp/thermald.pid to overwrite arbitrary files. Impact is arbitrary file write (I = HIGH) with local access and no user interaction required. The connected sources confirm the affected software (...

Debian: Security Advisory (DLA-1304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4912

CVE-2014-4912 affects Frog CMS 0.9.5: Arbitrary file upload due to lack of extension validation. Root cause: missing extension validation. Impact: partial confidentiality, integrity, and availability (CVSS2/3 indicate HIGH/CRITICAL). Exploitation details are not provided in the documents; an expl...

CVE-2014-4912

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation...

pfSense < 2.1.5 Multiple Vulnerabilities ( SA-14_14 )

According to its self-reported version number, the remote pfSense install is a version prior to 2.1.5 It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108516; scriptversion"1.4";...

CVE-2014-2031

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service out-of-bounds read and crash by leveraging permission to perform recursive queries against Deadwood, related to a logic error...

CVE-2014-2031

Summary of CVE-2014-2031 : The Deadwood component (bundled with MaraDNS) is affected. Affected versions are Deadwood before 2.3.09, Deadwood 3.x before 3.2.05, and MaraDNS deployments using Deadwood before 1.4.14 or 2.x before 2.0.09. The vulnerability arises from a logic error that allows remote...

CVE-2014-1457

Open Web Analytics (OWA) before 1.5.6 is affected by CVE-2014-1457: it generates nonces for CSRF protection in a way that can be bypassed by knowledge of an OWA user name. Affects the OWA component responsible for CSRF defense; root cause is nonce generation not sufficiently random. Impact is par...

CVE-2014-2032

Removed by vendor...

CVE-2014-2032

CVE-2014-2032 affects Deadwood (the recursive resolver component) used in MaraDNS. Vectors: remote attackers can trigger an out-of-bounds read during recursive queries due to missing input validation, causing a denial-of-service (crash). Affected: Deadwood before 2.3.09, and 3.x before 3.2.05, us...

CVE-2014-3990

The CVE-2014-3990 entries describe an OpenCart

CVE-2014-1215

Core FTP Server is affected (versions prior to 1.2 build 508). The vulnerability consists of multiple buffer overflows that occur when reading data from config.dat and the Windows Registry, caused by insufficient boundary checks. A local attacker can exploit these overflows to gain privileges on ...

CVE-2014-4928

CVE-2014-4928 describes an SQL injection in Invision Power Board (IPB/IP.Board) prior to version 3.4.6. The vulnerability allows a remote attacker to execute arbitrary SQL commands through the cId parameter. Multiple connected documents corroborate the affected product (IPB/IP.Board) and the vuln...

CVE-2014-2031

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service out-of-bounds read and crash by leveraging permission to perform recursive queries against Deadwood, related to a logic error...

CVE-2014-4024

SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used with third-party Secure Sockets Layer SSL accelerator cards, might allow remote attackers to have...

CVE-2014-2274

Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...

CVE-2014-2550

Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...