33561 matches found
CVE-2014-9502
Multiple cross-site request forgery CSRF vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks...
CVE-2014-3005
XML external entity XXE vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request...
CVE-2014-9504
CVE-2014-9504 affects Drupal Open Atrium’s OG Subgroups module. When used with Open Atrium 7.x-2.x prior to 7.x-2.26, it allows a remote attacker to access child groups via vectors related to membership inheritance. Documents confirm the vulnerable configuration and the affected version range; no...
CVE-2014-9503
CVE-2014-9503 affects the Open Atrium 7.x-2.x Discussions sub module (pre-7.x-2.26). The vulnerability allows remote authenticated users with "access content" permissions to modify arbitrary nodes due to improper access checks on unspecified AJAX callbacks. Impact is limited to Drupal/Open Atrium...
CVE-2014-3752
The CVE-2014-3752 entry details a local privilege escalation affecting G Data TotalProtection 2014 (versions up to 24.0.2.1). The vulnerability resides in the MiniIcpt.sys driver, where a crafted 0x83170180 call allows local users with administrator rights to execute arbitrary code with SYSTEM pr...
CVE-2014-9502
Multiple cross-site request forgery CSRF vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks...
CVE-2014-3244
CVE-2014-3244 concerns an XML external entity (XXE) vulnerability in the RSSDashlet dashlet of SugarCRM prior to 6.5.17. The underlying issue is an XXE in XML requests that allows an attacker to read arbitrary files or potentially execute arbitrary code. Affected product: SugarCRM RSSDashlet comp...
CVE-2014-3005
CVE-2014-3005 is an XXE vulnerability in Zabbix across multiple branches: 1.8.x < 1.8.21rc1, 2.0.x < 2.0.13rc1, 2.2.x < 2.2.5rc1, and 2.3.x
CVE-2014-3519
The CVE-2014-3519 details: OpenVZ modification for the Linux kernel 2.6.32, before 042stab090.5, with simfs, exposes open_by_handle_at in vzkernel to local container users with CAP_DAC_READ_SEARCH, bypassing container protections and enabling access to arbitrary files via file_handle-related vect...
CVE-2014-3005
XML external entity XXE vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request...
CVE-2014-1632
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter...
CVE-2014-1632
CVE-2014-1632 : In Eventum, vulnerable up to version 2.3.4, the installation script/config handling allows remote code execution via the hostname parameter in /config/config.php during setup. The underlying issue is code injection due to insufficient input sanitization, enabling an attacker with ...
CVE-2014-1632
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter...
CVE-2014-1631
CVE-2014-1631 affects Eventum prior to 2.3.5. The root cause is incorrect default permissions in the installation workflow (setup/index.php) allowing remote reinstall, paired with potential code injection through /config/config.php during setup. Affected versions include Eventum 2.3.4 (and earlie...
[SECURITY] [DLA 1265-1] krb5 security update
Package : krb5 Version : 1.10.1+dfsg-5+deb7u9 CVE ID : CVE-2013-1418 CVE-2014-5351 CVE-2014-5353 CVE-2014-5355 CVE-2016-3119 CVE-2016-3120 Debian Bug : 728845 762479 773226 778647 819468 832572 Kerberos, a system for authenticating users and services on a network, was affected by several...
pfSense < 2.1.3 Remote Denial of Service Vulnerability (SA-14_05)
According to its self-reported version number, the remote pfSense install is prior to 2.1.3. It is, therefore, affected by a denial of service vulnerability as stated in the referenced vendor advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106489;...
CVE-2014-4705
The CVE-2014-4705 issue affects Huawei eSap software platform used in multiple devices: Campus S9300, S7700, S9700, S5300, S5700, S6300, S6700 switches; AR series routers (AR150/AR160/AR200/AR1200/AR2200/AR3200/AR530/NetEngine16EX/SRG1300/SRG2300/SRG3300); and WLAN controllers AC6005/AC6605/ACU2....
Debian: Security Advisory (DLA-977-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ManageEngine Desktop Central - Create Administrator Vulnerability
Exploit for multiple platform in category web applications Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP Discovered by Pedro Ribeiro email protected, Agile Information Security =================================================================================...
