CVE-2023-34328

CVE-2023-34328 relates to Xen where a PV vCPU can place a breakpoint over the live GDT, potentially locking up the CPU. This is described in the CNA as a Xen/AMD x86 debugging state handling issue that can lead to a denial of service. The entry references XSA-156 and CVE-2015-8104 as related cont...

Festo CECX-X-C1 and CECX-X-M1 Improper Authentication (CVE-2014-0760)

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX- X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via...

Festo CECX-X-C1 and CECX-X-M1 Improper Authentication (CVE-2014-0769)

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX- X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to 1 modify the configuration via a request to the debug service on port 4000 ...

CVE-2014-125109

The CVE-2014-125109 entry concerns the BestWebSoft Portfolio Plugin (WordPress) up to version 2.27, specifically the function bws_add_menu_render in bws_menu/bws_menu.php. The vulnerability arises from manipulation of the bwsmn_form_email argument, enabling cross-site scripting (XSS). Exploitatio...

CVE-2014-125108

The CVE-2014-125108 entry concerns w3c online-spellchecker-py (up to 20140130). The vulnerability is a cross-site scripting flaw in processing the spellchecker file, potentially exploitable remotely with high attack complexity and low overall impact (no availability impact, low confidentiality/in...

CVE-2014-125107

CVE-2014-125107 affects Corveda PHPSandbox 1.3.4. The issue is in the String Handler component, leading to protection mechanism failure that could be triggered remotely. A fix is available in PHPSandbox 1.3.5 (patch: 48fde5ffa4d76014bad260a3cbab7ada3744a4cc). Multiple sources (Red Hat, GHSA, OSV,...

elo.gemfw-wennigsen.de Cross Site Scripting vulnerability OBB-3806848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Flex System switch firmware products are affected by information disclosure vulnerability (CVE-2014-8730)

Summary IBM Flex System switch firmware products have addressed the following TLS padding information disclosure vulnerability. Vulnerability Details CVEID: CVE-2014-8730 DESCRIPTION: Multiple F5 products could allow a remote attacker to obtain sensitive information, caused by the failure to chec...

CVE-2014-4210

creationtimestamp| type| source ---|---|--- 2023-12-06 17:56:36+00:00| seen| https://t.me/arpsyndicate/1522 2024-07-18 16:40:25+00:00| published-proof-of-concept| https://t.me/CNArsenal/2807 2024-07-18 20:18:18+00:00| published-proof-of-concept| https://t.me/realLulzSec/13943 2024-07-18...

CVE-2014-4242

creationtimestamp| type| source ---|---|--- 2023-12-06 13:37:27+00:00| seen| https://t.me/arpsyndicate/1491...

CVE-2014-4241

creationtimestamp| type| source ---|---|--- 2023-12-06 13:10:46+00:00| seen| https://t.me/arpsyndicate/1487...

glm-ett-empleo.com Improper Access Control vulnerability OBB-3800146

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-4078

creationtimestamp| type| source ---|---|--- 2023-11-22 14:15:18+00:00| seen| Telegram/w2J7UPxEnVtPvHiMQZgcXgfrgvzOOsq-k0QIIOIAAbTGczw 2026-07-29 12:01:19+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen|...

CVE-2014-9690

creationtimestamp| type| source ---|---|--- 2023-11-20 15:14:03+00:00| seen| https://t.me/arpsyndicate/292...

Rockwell Automation Stratix Multiple Vulnerabilities in Cisco IOS Software Metadata (CVE-2014-3356)

Two vulnerabilities in the metadata flow feature of Cisco IOS Software could allow an unauthenticated, remote attacker to reload a vulnerable device. The vulnerabilities are due to improper handling of transit RSVP packets that need to be processed by the metadata infrastructure. An attacker coul...

Rockwell Automation Stratix Anonymous ECDH Denial of Service (CVE-2014-3470)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

Rockwell Automation Stratix Cisco IOS Software Crafted IPv6 Packet Denial of Service (CVE-2014-2113)

A vulnerability in the implementation of the IP version 6 IPv6 protocol stack in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause I/O memory depletion on an affected device that has IPv6 enabled. The vulnerability is triggered when an affected...

Rockwell Automation Stratix Cisco IOS Software Network Address Translation Denial of Service (CVE-2014-3361)

A vulnerability in the Network Address Translation NAT feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper translation of IP version 4 IPv4 packets. This plugin only...

Rockwell Automation Stratix DTLS Invalid Fragment (CVE-2014-0195)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

Rockwell Automation Stratix ECDSA NONCE Side-Channel Recovery Attack (CVE-2014-0076)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...