33558 matches found
CVE-2014-2906
CVE-2014-2906 affects fish-shell (psub) up to version 2.1.1, where the temporary file creation is mishandled, allowing a local attacker to execute commands via a predictable temporary file name. Affected product is the fish-shell line, with the root cause described as improper temporary file hand...
CVE-2014-3856
The CVE-2014-3856 entry pertains to fish-shell (fish) 1.23.0 prior to 2.1.1, where temporary files are created improperly, allowing local privilege elevation via a predictable-named temporary file. The vulnerability is a local impact issue (high severity per CVSS v3.1 in the connected data) and i...
CVE-2014-2914
CVE-2014-2914 affects fish-shell up to version 2.0.0; versions before 2.1.1 do not restrict access to the configuration service (fish_config), enabling remote code execution via unspecified vectors (demonstrated by set_prompt). The NVD entry lists a CVSS‑3.1 base score of 9.8 (CRITICAL) and CVSS‑...
CVE-2014-2581
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit...
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-3230
CVE-2014-3230 affects the libwww-perl LWP::Protocol::https module (versions 6.04–6.06) when using IO::Socket::SSL as the SSL socket class. The underlying issue is that server certificate validation can be disabled via the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables. Impact described in th...
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-3230
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...
CVE-2014-2581
CVE-2014-2581 affects Smb4K before 1.1.1, where the cuid option in the Additional options line edit can let remote attackers obtain credentials. CVSS: CVSS v3.1 base score 7.5 (HIGH) with NETWORK access and no user interaction; CVSS v2 base score 5.0 (PARTIAL confidentiality). Remediation: upgrad...
CVE-2014-3445
CVE-2014-3445 describes an authentication bypass in HandsomeWeb SOS Webpages prior to 1.1.12. The vulnerability resides in backup.php, which allows an unauthenticated user to perform administrative backups and potentially disclose the administrator password hash by manipulating the MD5-based key ...
CVE-2014-5500
creationtimestamp| type| source ---|---|--- 2020-01-27 23:37:37+00:00| seen| https://t.me/cveNotify/470...
CVE-2014-7302
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:41+00:00| seen| https://t.me/cveNotify/469...
CVE-2014-7301
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:04+00:00| seen| https://t.me/cveNotify/468...
CVE-2014-3979
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:03+00:00| seen| https://t.me/cveNotify/467...
CVE-2014-5500
Synacor Zimbra Collaboration before 8.0.8 has XSS...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
CVE-2014-8563
CVE-2014-8563 affects Synacor Zimbra Collaboration Suite before version 8.0.9. The vulnerability is described as plaintext command injection during STARTTLS, stemming from input data not properly filtered when constructing OS-executable commands. Several connected sources reiterate that versions ...
CVE-2014-8563
Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS...
CVE-2014-5500
CVE-2014-5500 affects Synacor Zimbra Collaboration Suite (ZCS) prior to version 8.0.8. The connected documents confirm a cross-site scripting (XSS) vulnerability in the Web application, stemming from insufficient validation of client‑side data. Public references describe the affected product and ...