CVE-2014-125108

The CVE-2014-125108 entry concerns w3c online-spellchecker-py (up to 20140130). The vulnerability is a cross-site scripting flaw in processing the spellchecker file, potentially exploitable remotely with high attack complexity and low overall impact (no availability impact, low confidentiality/in...

CVE-2014-125107

CVE-2014-125107 affects Corveda PHPSandbox 1.3.4. The issue is in the String Handler component, leading to protection mechanism failure that could be triggered remotely. A fix is available in PHPSandbox 1.3.5 (patch: 48fde5ffa4d76014bad260a3cbab7ada3744a4cc). Multiple sources (Red Hat, GHSA, OSV,...

elo.gemfw-wennigsen.de Cross Site Scripting vulnerability OBB-3806848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Flex System switch firmware products are affected by information disclosure vulnerability (CVE-2014-8730)

Summary IBM Flex System switch firmware products have addressed the following TLS padding information disclosure vulnerability. Vulnerability Details CVEID: CVE-2014-8730 DESCRIPTION: Multiple F5 products could allow a remote attacker to obtain sensitive information, caused by the failure to chec...

CVE-2014-4210

creationtimestamp| type| source ---|---|--- 2023-12-06 17:56:36+00:00| seen| https://t.me/arpsyndicate/1522 2024-07-18 16:40:25+00:00| published-proof-of-concept| https://t.me/CNArsenal/2807 2024-07-18 20:18:18+00:00| published-proof-of-concept| https://t.me/realLulzSec/13943 2024-07-18...

CVE-2014-4242

creationtimestamp| type| source ---|---|--- 2023-12-06 13:37:27+00:00| seen| https://t.me/arpsyndicate/1491...

CVE-2014-4241

creationtimestamp| type| source ---|---|--- 2023-12-06 13:10:46+00:00| seen| https://t.me/arpsyndicate/1487...

glm-ett-empleo.com Improper Access Control vulnerability OBB-3800146

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-4078

creationtimestamp| type| source ---|---|--- 2023-11-22 14:15:18+00:00| seen| Telegram/w2J7UPxEnVtPvHiMQZgcXgfrgvzOOsq-k0QIIOIAAbTGczw 2026-07-29 12:01:19+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen|...

CVE-2014-9690

creationtimestamp| type| source ---|---|--- 2023-11-20 15:14:03+00:00| seen| https://t.me/arpsyndicate/292...

Rockwell Automation Stratix Anonymous ECDH Denial of Service (CVE-2014-3470)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

Rockwell Automation Stratix Multiple Vulnerabilities in Cisco IOS Software Metadata (CVE-2014-3356)

Two vulnerabilities in the metadata flow feature of Cisco IOS Software could allow an unauthenticated, remote attacker to reload a vulnerable device. The vulnerabilities are due to improper handling of transit RSVP packets that need to be processed by the metadata infrastructure. An attacker coul...

Rockwell Automation Stratix Cisco IOS Software Network Address Translation Denial of Service (CVE-2014-3361)

A vulnerability in the Network Address Translation NAT feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper translation of IP version 4 IPv4 packets. This plugin only...

Rockwell Automation Stratix ECDSA NONCE Side-Channel Recovery Attack (CVE-2014-0076)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

Rockwell Automation Stratix DTLS Invalid Fragment (CVE-2014-0195)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

Rockwell Automation Stratix Cisco IOS Software Crafted IPv6 Packet Denial of Service (CVE-2014-2113)

A vulnerability in the implementation of the IP version 6 IPv6 protocol stack in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause I/O memory depletion on an affected device that has IPv6 enabled. The vulnerability is triggered when an affected...

CVE-2014-3507

creationtimestamp| type| source ---|---|--- 2023-11-10 22:08:30+00:00| seen| https://t.me/arpsyndicate/64...

CVE-2014-9940 affecting package kernel 5.15.133.1-1

CVE-2014-9940 affecting package kernel 5.15.133.1-1. A patched version of the package is available...

[SECURITY] Fedora 39 Update: fbthrift-2023.10.16.00-1.fc39

Thrift is a serialization and RPC framework for service communication. Thrift enables these features in all major languages, and there is strong support for C++, Python, Hack, and Java. Most services at Facebook are written using Thri ft for RPC, and some storage systems use Thrift for serializin...

SUSE CVE-2014-0186

A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux RHEL 7 allows remote attackers to cause a denial of service CPU consumption via a crafted request. NOTE: this vulnerability exists because of an unspecified regression...