33560 matches found
CVE-2014-5081
CVE-2014-5081 affects Sphider before 1.3.6, Sphider Pro before 3.2, and Sphider Plus before 3.2. The authenticated bypass arises from an insecure login flow in auth.php where credentials could be accepted without proper validation; the fix implemented was to exit() after successful/failed login t...
CVE-2014-5081
sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass...
CVE-2014-4984
CVE-2014-4984 affects Déjà Vu Crescendo Sales CRM with a remote SQL Injection vulnerability. NVD lists CVSS2 base 7.5 (HIGH) and CVSS3.1 base 9.8 (CRITICAL); exploitation is supported by multiple public references (PacketStorm, SecurityFocus, IBM X-Force) and exploit listings exist. The Connected...
CVE-2014-4984
Déjà Vu Crescendo Sales CRM has remote SQL Injection...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
DEBIAN-CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
Remote code execution
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
CVE-2014-5011
CVE-2014-5011 affects Dompdf prior to 0.6.2. The vulnerability arises from improper handling/validation of untrusted input when processing HTML content, enabling information disclosure. Impact is limited to affected Dompdf versions; remediation is upgrading to Dompdf 0.6.2 or later as indicated b...
CVE-2014-5012
CVE-2014-5012 affects Dompdf up to version 0.6.2; faulty input handling allows denial of service during HTML-to-PDF processing. The provided documents confirm the vulnerability and a fix in v0.6.2 (GitHub release tag). No exploitation context or in-the-wild details are provided in the connected d...
CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5013
CVE-2014-5013 affects Dompdf prior to 0.6.2 and allows remote code execution; the issue is linked to CVE-2014-2383. The related advisories indicate a security-focused 0.6.2 release that addresses multiple vulnerabilities in dompdf (including RCE and information-disclosure issues) and recommends u...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...