CVE-2014-3655

CVE-2014-3655 affects JBoss KeyCloak; vulnerability is soft token deletion via CSRF. Notable details from connected docs indicate exposure in affected Keycloak releases and a fix later stated as Keycloak 1.0.2.Final. Practical impact is limited to CSRF-enabled token deletion without broader acces...

CVE-2014-3592

CVE-2014-3592 affects OpenShift Origin where improperly validated team names can lead to stored XSS attacks. The linked records confirm the affected component is OpenShift Origin and describe the issue as a validation flaw for team name input that enables stored XSS. CVSS scores are provided (2.0...

SUSE-SU-2019:2719-2 Security update for python-xdg

This update for python-xdg fixes the following issues: Security issue fixed: - CVE-2014-1624: Fixed a TOCTOU race condition in getruntimedir. bsc859835...

UBUNTU-CVE-2014-7143

Python Twisted 14.0 trustRoot is not respected in HTTP client...

CVE-2014-7143

Python Twisted 14.0 trustRoot is not respected in HTTP client...

CVE-2014-7143

CVE-2014-7143 relates to Python Twisted 14.0 where the HTTP client does not respect trustRoot. Connected documents consistently describe this flaw as related to trustRoot not being respected in the Twisted 14.0 HTTP client. The available material does not provide explicit affected versions beyond...

EulerOS 2.0 SP5 : less (EulerOS-SA-2019-2164)

According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An out of bound read, with a maximum of 5 bytes, was found in the way the isutf8wellformed function parsed UTF-8 characters. If less was to be...

EulerOS 2.0 SP5 : gpgme (EulerOS-SA-2019-2125)

According to the versions of the gpgme package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG Made Easy GPGME is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption,...

EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2019-2131)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...

CVE-2014-9013

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmpppajaxcall with an execution target of wpinsertuser...

CVE-2014-9013

Summary: CVE-2014-9013 affects the WordPress WP Marketplace plugin (version 2.4.0) and is triggered via the ajaxinit function in wpmarketplace/libs/cart.php. The vulnerability allows remote authenticated users to call wpmp_pp_ajax_call and, through the execution target wp_insert_user or related c...

CVE-2014-9013

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmpppajaxcall with an execution target of wpinsertuser...

CVE-2014-9014

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...

CVE-2014-9014

The CVE-2014-9014 entry corresponds to a directory traversal vulnerability in WP Marketplace (WordPress plugin) before 2.4.1. An authenticated user could exploit an improper file parameter handling in wpmarketplace/libs/cart.php (ajaxinit) to download arbitrary files via a .. path traversal. Publ...

CVE-2014-3180

CVE-2014-3180 affects the Linux kernel prior to 3.17, specifically the compatibility code path in kernel/compat.c. The vulnerability is an out-of-bounds read where restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. Note: the description states the code path is unreachab...

CVE-2014-8181

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...

CVE-2014-8181

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...

CVE-2014-8181

CVE-2014-8181 affects the Linux kernel in Red Hat Enterprise Linux 7 and MRG-2, where SG_IO buffer garbage data is not cleared, potentially leaking sensitive information to userspace. The core issue is the kernel not clearing garbage data in SG_IO buffers, enabling partial information disclosure ...

Mozilla Firefox ESR < 31.2 Multiple Vulnerabilities

Binary data 701248.prm...

CVE-2014-3649

CVE-2014-3649 affects Red Hat/JBoss AeroGear and refers to a reflected XSS vulnerability in the password field. The root cause cited by CNVD is lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code in a victim’s browser. Public expl...