CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-8139

CVE-2014-8139 is a vulnerability in Info-ZIP UnZip 6.0 and earlier, where a heap-based buffer overflow during CRC32 verification can be triggered by a crafted zip file, enabling code execution via unzip -t. Several Connected documents confirm this flaw is present in bundled/unzip implementations ...

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-3809

CVE-2014-3809 describes a reflected cross-site scripting (XSS) vulnerability in the management interface of Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html. The root...

CVE-2014-3809

Cross-site scripting XSS vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch PSS 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html...

CVE-2014-5039

CVE-2014-5039 is a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x prior to 4.0.2. The XSS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected product and vulnerability class, bu...

CVE-2014-8338

CVE-2014-8338 – details available Affected software: VideoWhisper Webcam plugins for Drupal 7.x, specifically the file vwrooms/js/jsor-jcarousel/examples/special_textscroller.php. Vulnerability: Cross-site Scripting (XSS) via a crafted SVG file supplied in the feed parameter. The vulnerability or...

CVE-2014-8126

CVE-2014-8126 affects the HTCondor scheduler prior to version 8.2.6, where an authenticated remote user could exploit the scheduler component to execute arbitrary code. Multiple connected sources corroborate this, including OSV entries and the NVD bulletin, which describe the flaw in HTCondor and...

CVE-2014-8126

The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...

CVE-2014-8322

Stack-based buffer overflow in the tcptest function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value...

CVE-2014-8322

The CVE-2014-8322 entry describes a stack-based buffer overflow in the tcp_test function of aireplay-ng.c in Aircrack-ng prior to 1.2 RC1. This allows remote attackers to execute arbitrary code via a crafted length parameter value. Affected software: Aircrack-ng (before 1.2 RC1). Root cause: impr...

CVE-2014-8321

CVE-2014-8321 affects Aircrack-ng before 1.2_rc1. The vulnerability is a stack-based overflow in gps_tracker() within aircrack-ng/airodump-ng.c, enabling local users to potentially execute arbitrary code or gain privileges. Upgrading to a version that includes the fix (Aircrack-ng 1.2_rc1 or newe...

CVE-2014-5236

CVE-2014-5236 affects Open-Xchange AppSuite, where the documentconverter component is vulnerable to absolute path traversal via crafted OLE Objects or images in OpenDocument text files. The impact is reading sensitive server files. Vendors provided fixes in versions: 7.4.2-rev10 and 7.6.0-rev10. ...

CVE-2014-3868

CVE-2014-3868 affects the ZeusCart 4.x line with multiple SQL injection vulnerabilities . Exploitation is reported as remote over the network with low attack complexity and low privileges required (CVSS‑3.1: AV:N/AC:L/PR:L/UI:N). The CVSS 3.1 base score is 8.8 (HIGH) , and impacts include confide...

CVE-2014-3868

Multiple SQL injection vulnerabilities in ZeusCart 4.x...

CVE-2014-3119

CVE-2014-3119 affects web2Project 3.1 and earlier. The vulnerability is due to insufficient sanitization of user inputs, allowing remote authenticated users to inject arbitrary SQL via the POST parameter search_string (index.php, contacts module) or via updatekey (do_updatecontact.php) or updatek...

CVE-2014-2843

Cross-site scripting XSS vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2843

CVE-2014-2843 is a reflected XSS vulnerability in infoware MapSuite MapAPI. Affected versions are MapAPI before 1.0.36 (and 1.1.x before 1.1.49). Fixed releases are MapAPI 1.0.36 and 1.1.49. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ...

CVE-2014-2843

Cross-site scripting XSS vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...