33558 matches found
CVE-2014-3208
CVE-2014-3208 affects askpop3d 0.7.7 (free build) and is described as a denial-of-service condition triggered through the pszQuery input. The linked sources confirm a DoS impact with partial availability impact per CVSS v2 and high availability impact per CVSS v3, but no concrete exploitation det...
CVE-2014-3208
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free pszQuery,...
CVE-2014-3919
Netgear CG3100 devices (pre-3.9.2421.13.mp3 V0027) are vulnerable via an embedded malicious script in an unspecified page, enabling potential information disclosure. The exact root cause, affected subcomponents, and remediation are not detailed in the provided documents. What is clear: exposure r...
CVE-2014-4198
The vulnerability CVE-2014-4198 affects BS-Client Private Client, versions 2.4 and 2.5. A flaw in the authentication flow allows a two-factor bypass via an XML request that omits ADPswID and AD parameters, enabling a malicious user to access privileged functions. Root cause stated as improper han...
CVE-2014-4198
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function...
CVE-2014-3860
CVE-2014-3860 concerns Xilisoft Video Converter Ultimate 7.8.1 build-20140505, which is vulnerable to a DLL Hijacking flaw. The connected material confirms a DLL hijack scenario involving the quserex.dll component and lists vulnerable executables (vcloader.exe, vc.exe, vc_buy.exe). An exploit des...
CVE-2014-3860
Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability...
CVE-2014-4607
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run...
AZL-40776 CVE-2014-4607 affecting package valgrind 3.22.0-1
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-4607
CVE-2014-4607 affects Oberhumer liblzo2 and lzo-2 up to version 2.07 on 32-bit platforms. The vulnerability arises from an integer overflow in the lzo1x_decompress_safe function when handling any variant of a Literal Run, which could lead to memory corruption and potentially remote code execution...
CVE-2014-4607
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-2560
PhonerLite SIP Digest Leak (CVE-2014-2560) affects PhonerLite before version 2.15. The vulnerability is an information disclosure where the client reveals MD5-digest authenticated user credentials in a response to an invalid authentication challenge, exposed via spoofed SIP INVITE messages. This ...
CVE-2014-8128
LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service out-of-bounds write via a crafted TIFF image...
CVE-2014-8128
LibTIFF prior to 4.0.4 (used in Apple iOS before 8.4 and OS X before 10.10.4) is vulnerable to remote denial of service via a crafted TIFF image, due to an out-of-bounds write in TIFF handling. The CVE-2014-8128 entry is documented with network-exploitable impact (I:NONE, A:H) and related CVSS da...
CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before...
CVE-2014-6262
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...
CVE-2014-9390
CVE-2014-9390 describes a remote command-execution risk in Git and several VCS clients when interacting with repositories on case-insensitive filesystems. A crafted .git/config in a tree can trigger arbitrary commands on the server/client, depending on the tool. Affected versions (per provided so...
CVE-2014-6262
CVE-2014-6262 describes multiple format string vulnerabilities in the Python RRDtool module used by Zenoss Core (before 4.2.5) and other products. An attacker can exploit a crafted third argument to rrdtool.graph to execute arbitrary code or cause an application crash (DoS). Related to CVE-2013-2...
CVE-2014-6262
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...
