CVE-2014-0030

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity XXE attacks via unspecified vectors...

CVE-2014-3566

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-03-08 04:13:09+00:00| seen| Telegram/vucuqGbRCztQDBt8wgDth-hLVvGp8dTTlxQcNvjhW5htig 2022-11-07 22:22:31+00:00| seen|...

CVE-2014-0224

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/opensslccs.rb 2023-04-03 15:48:41+00:00| seen|...

CVE-2014-0030

Apache Roller prior to 5.0.3 is vulnerable to XML External Entity (XXE) attacks via its XML-RPC protocol support. The issue allows an attacker to trigger XXE and read sensitive files (File Disclosure). Affected component: XML-RPC/XML processing in Roller; root cause: XXE in XML parsing. Exploitat...

CVE-2014-9474

CVE-2014-9474 affects the GNU MPFR library. The vulnerability is a buffer overflow in the mpfr_strtofr function caused by incorrect documentation for mpn_set_str, reported for MPFR versions before 3.1.2-p11. Multiple connected advisories (MiracleLinux, Oracle Linux, Red Hat, TencentOS, RHEL, SUSE...

CVE-2014-9474

Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpnsetstr...

WordPress Gallery Bank Plugin < 3.0.70 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112071";...

CVE-2014-8957

OpenKM is affected by a Cross-site Scripting (XSS) vulnerability (CVE-2014-8957) present in versions prior to 6.4.19. The issue allows remote authenticated users to inject arbitrary web script or HTML via the Tasks parameter. The vulnerability impact is limited to confidentiality/integrity of the...

CVE-2014-0047

Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...

CVE-2014-0047

Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...

CVE-2014-2903

CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake...

CVE-2014-0047

CVE-2014-0047 affects Docker before 1.5, where local users can cause unspecified impact via vectors involving unsafe /tmp usage. The available connected documents confirm the vulnerable condition and local-privilege context but do not provide concrete exploitation details or a confirmed fix/versi...

CVE-2014-2903

CVE-2014-2903 affects CyaSSL (WolfSSL) and related builds; the root cause is that key usage extension checking in leaf certificates is not performed, allowing a remote attacker to spoof a server with a certificate not authorized for SSL/TLS handshakes. The connected records corroborate the issue ...

CVE-2014-7240

Cross-site scripting XSS vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a masterresponse action to wp-admin/admin-ajax.php...

CVE-2014-8492

The CVE-2014-8492 entry concerns multiple XSS vulnerabilities in WordPress Profile Builder plugin prior to v2.0.3. Vulnerable component: assets/misc/fallback-page.php; affected parameters: site_name, message, site_url. Root cause: improper sanitization of input leading to script/HTML injection. I...

CVE-2014-8758

CVE-2014-8758: Cross-site scripting in WordPress Best Gallery Albums Plugin (before 3.0.70). The vulnerability is triggered via the order_id parameter in the gallery_album_sorting page (wp-admin/admin.php), allowing remote injection of script/HTML. Affected: Best Gallery Albums Plugin for WordPre...

CVE-2014-7240

CVE-2014-7240 describes an XSS in the WordPress plugin Easy Contact Form Solution (versions prior to 1.7). The vulnerability arises in the master_response action to wp-admin/admin-ajax.php, where an attacker can inject arbitrary script or HTML via the value parameter. Affected component: Easy Con...

2013 Yahoo Breach Affected All 3 Billion Accounts

A massive breach of Yahoo’s systems in 2013 impacted every account in existence at the time, the company said last night in a new filing with the Securities and Exchange Commission. Yahoo disclosed the breach last December when it revealed that it believed 1 billion accounts were compromised. Las...

[SECURITY] [DLA 1119-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1deb7u1 CVE ID : CVE-2014-1695 CVE-2014-2553 CVE-2014-2554 CVE-2017-14635 Debian Bug : 876462 An attacker who is logged into OTRS, a Ticket Request System, as an agent with write permissions for statistics can inject arbitrary code into the system. This can lead t...

CVE-2014-2029

The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to download configuration information from v.percona.com...