CVE-2014-9829

CVE-2014-9829 is an ImageMagick vulnerability affecting the coders/sun.c module. A remote attacker can trigger a denial of service through a crafted sun file, due to out-of-bounds access. Multiple connected sources corroborate this description (e.g., CNVD-2017-05312; Nessus/NASL references). The ...

DEBIAN-CVE-2014-9922

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c...

CVE-2014-9922

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c...

CVE-2014-9922

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c...

CVE-2014-9922

CVE-2014-9922 affects the Linux kernel’s eCryptfs subsystem, where the combination of eCryptfs and an overlayfs stack can let a local user gain privileges. The issue is triggered by a vulnerability in fs/ecryptfs/main.c and fs/overlayfs/super.c, with impact described as local privilege escalation...

IBM WebSphere Application Server 8.5.5.x < 8.5.5.4 Multiple Vulnerabilities

Binary data 700046.prm...

IBM WebSphere Application Server 8.0.0.x < 8.0.0.10 Multiple Vulnerabilities

Binary data 700045.prm...

IBM WebSphere Application Server 7.0.0.x < 7.0.0.35 Multiple Vulnerabilities

Binary data 700044.prm...

Ubuntu: Security Advisory (USN-3253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Nagios vulnerabilities (USN-3253-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3253-1 advisory. It was discovered that Nagios incorrectly handled certain long strings. A remote authenticated attacker could use this issue to cause Nagios ...

CVE-2014-1677

Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information...

CVE-2014-3927

mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code...

CVE-2014-3928

CVE-2014-3928 affects Cougar-LG web applications (Perl-based looking-glass/router-portal) where sensitive credentials are stored under the web root with insufficient access control. This allows remote attackers to obtain credentials. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) with AV:N/AC:L/PR...

CVE-2014-3927

CVE-2014-3927 affects mrlg4php: the mrlg-lib.php file in versions before 1.0.8 allows remote execution of arbitrary shell commands due to an input handling flaw. Impact per CVSS indicates high/critical severity (network access, no authentication, no user interaction required) with partial confide...

CVE-2014-3930

CVE-2014-3930 concerns lg.pl in Cistron-LG 1.01, where sensitive information is stored under the web root with insufficient access controls. The issue enables remote attackers to obtain IP addresses and other router credentials. The vulnerability is described consistently across sources (NVD/CNVD...

CVE-2014-3929

The CVE-2014-3929 entry concerns Cougar-LG, a Perl-based set of web applications for router access. Affected component: default configuration that stores sensitive information under the web root with insufficient access control. Root cause: insecure/default file placement allows web-access to pri...

CVE-2014-1677

CVE-2014-1677 affects Technicolor TC7200 devices (firmware STD6.01.12/STD6.02.11). The root cause is information disclosure via the web interface and mismanagement of sessions/backups: an unauthenticated user can obtain sensitive admin data from the backup file (GatewaySettings.bin) through insec...

CVE-2014-9696

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

CVE-2014-3224

Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300 enable attackers to launch DoS attacks by crafting and sendi...

CVE-2014-3222

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...