CVE-2014-9702

CVE-2014-9702 affects the Cmfive PHP ERP framework (specifically system/classes/DbPDO.php) up to 2015-03-15. The root cause is a vulnerability when database connectivity malfunctions, allowing remote attackers to disclose sensitive credentials (username and password) via any request, including pa...

CVE-2014-9702

system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information username and password via any request, such as a password reset request...

CVE-2014-7173

The CVE-2014-7173 case affects FarLinX X25 Gateway (through 2014-09-25). The vulnerability is a OS command-injection issue via shell metacharacters in several scripts: sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, and sysRestoreX25Cplt.php. Root cause and impact ar...

CVE-2014-7175

FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php...

CVE-2014-7174

CVE-2014-7174 affects FarLinX X25 Gateway; a directory traversal vulnerability exists in the log-handling feature, enabling access to restricted paths. Reported for versions up to 2014-09-25. CVE details show a network-accessible issue with medium overall impact (C/L, I/N, A/N per CVSSv2/v3.1). C...

CVE-2014-8941

CVE-2014-8941 affects Lexiglot (PHP translation platform) through 2014-11-20. The issue is a SQL injection vulnerability arising from unsafely built queries in the admin interface, specifically via URLs like admin.php?page=users&from_id= and admin.php?page=history&limit=. Evidence across multiple...

CVE-2014-8943

CVE-2014-8943 affects Lexiglot up to 2014-11-20 and enables a server-side request forgery (SSRF) via the admin.php?page=projects svn_url parameter. The available documents identify the vulnerable component as Lexiglot (PHP-based translation platform) and point to the svn_url parameter as the inje...

CVE-2014-8944

Lexiglot through 2014-11-20 allows XSS Reflected via the username, or XSS Stored via the admin.php?page=config installname, intromessage, or newfilecontent parameter...

CVE-2014-8944

Lexiglot (PHP-based translation platform) is affected by CVE-2014-8944 through 2014-11-20, with XSS vulnerabilities in both Reflected and Stored forms. The Reflected XSS can be triggered via the username parameter, while Stored XSS is possible in admin.php?page=config via install_name, intro_mess...

CVE-2014-8937

The CVE-2014-8937 entry concerns Lexiglot (PHP-based translation platform) up to version released 2014-11-20. The vulnerability stems from api/update.php performing svn update operations that consume substantial server resources, leading to denial of service. The connected documents confirm the c...

CVE-2014-8938

Lexiglot (up to 2014-11-20) is affected by an information-disclosure vulnerability where local users can obtain usernames and passwords by listing a process, due to credentials being exposed on the command line. Root cause: credentials present on the command line. Impact is a local confidentialit...

CVE-2014-8939

Lexiglot (PHP-based translation platform) is affected by CVE-2014-8939 via a path traversal-like leakage: remote attackers can obtain the full filesystem path by requesting include/smarty/plugins/modifier.date_format.php when PHP is configured to emit warnings. The core detail reported across sou...

CVE-2014-8940

The CVE-2014-8940 entry affects Lexiglot (a PHP-based translation platform). The vulnerability is an information disclosure allowing remote attackers to obtain names and details of projects by accessing the /update.log URI, with impact described as exposure of limited data (names and project deta...

CVE-2014-8945

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

CVE-2014-8945

CVE-2014-8945 affects Lexiglot, a PHP-based translation platform. The vulnerability is a command injection in admin.php?page=projects, exploitable through the username and password fields. Multiple sources confirm the issue, noting it affects Lexiglot releases up to and including 2014-11-20. The ...

NewStart CGSL CORE 5.04 / MAIN 5.04 : chrony Multiple Vulnerabilities (NS-SA-2020-0027)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has chrony packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1...

MS14-022: Description of the security update for SharePoint Foundation 2013: May 13, 2014

Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis security update resolves vulnerabilities in Microsoft Office server...

Update Rollup 6 for System Center 2012 R2 Data Protection Manager

Update Rollup 6 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for Update Rollup 6 for...

gamesonomy.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161401 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-2014

An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbitrary shell commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7...