apache-commons-beanutils security update

1.8.3-15 - Fix CVE-2014-0114 - Fix CVE-2019-10086...

CVE-2014-2680

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack...

CVE-2014-2680

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack...

CVE-2014-2680

CVE-2014-2680 affects Xmind 3.4.1 and earlier. The flaw lies in the update process, which allowed remote attackers to execute arbitrary code via a man-in-the-middle attack during updates. Connected sources corroborate the issue as a network-based exploit tied to the update mechanism. No explicit ...

CVE-2014-5007

Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...

CVE-2014-5007

CVE-2014-5007 affects ManageEngine Desktop Central and Desktop Central MSP before 9 build 90055. A directory traversal in the agentLogUploader servlet allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. in the filename parameter. This is a network-based impact with ...

CVE-2014-6448

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2014-6448

CVE-2014-6448 affects Juniper Networks Junos OS: versions 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3. The vulnerability allows local users to bypass restrictions and execute arbitrary Python code through vectors involving shell access. The cited sources describe a local privileg...

Oracle Primavera Gateway Multiple Vulnerabilities (Jan 2020 CPU)

According to its self-reported version number, the Oracle Primavera Gateway installation running on the remote web server is 15.x prior to 15.2.18, 16.x prior to 16.2.11, 17.x prior to 17.12.6, or 18.x prior to 18.8.8.1. It is, therefore, affected by multiple vulnerabilities, including the...

CVE-2014-2271

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java...

CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

UBUNTU-CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...

CVE-2014-7844

CVE-2014-7844 affects BSD mailx 8.1.2 and earlier and Heirloom mailx 12.5 and earlier. Root cause: the expand function (fio.c) allows shell meta-characters in an email address to trigger remote command execution. Impact: remote attacker could execute arbitrary commands with the privileges of the ...

CVE-2014-7844

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...

CVE-2014-2271

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java...

CVE-2014-2271

The CVE-2014-2271 entry concerns cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, embedded in Huawei P2 devices prior to V100R001C00B043. The issue arises when CloudPrintWebView falls back to HTTP if the HTTPS connection to the registry is blocked, enabling man-in-the...

CVE-2014-5238

CVE-2014-5238 concerns an XML external entity (XXE) vulnerability in Open-Xchange AppSuite. The OpenDocument Text handling allows expansion of XML entities (DTD recursive entities), enabling an attacker to read server files via a crafted document. The NVD entry notes the affected products as Open...