CVE-2014-8872

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50...

CVE-2014-8393

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...

Salt has an unspecified vulnerability

Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management , remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete the data...

CVE-2014-8872

Summary: CVE-2014-8872 covers an improper verification of cryptographic signatures in AVM FRITZ!Box firmware images. Affected products (examples): FRITZ!Box 6810 LTE (firmware 5.22+), FRITZ!Box 6840 LTE (firmware 5.23+), and other models with firmware 5.50. Root cause (as described): The firmware...

CVE-2014-8393

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...

CVE-2014-8393

CVE-2014-8393 corresponds to a DLL hijacking vulnerability in Corel products (CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015 and Corel PDF Fusion, plus related apps). The flaw arises when a file is opened and the application searches the document’s directory for DL...

CVE-2014-8163

Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5...

CVE-2014-8163

CVE-2014-8163 : Affected product is Red Hat Satellite 5. The vulnerability is a directory traversal in the XMLRPC interface, enabling an attacker to write arbitrary files or directories to the Satellite server’s /var/satellite directory. Root cause: directory traversal via XMLRPC handling. Impact...

CVE-2014-5301

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4...

CVE-2014-8428

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-9557

Multiple cross-site scripting XSS vulnerabilities in SmartCMS v.2...

CVE-2014-9483

Emacs 24.4 allows remote attackers to bypass security restrictions...

CVE-2014-5302

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code...

CVE-2014-9312

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5...

CVE-2014-9514

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-8900

Cross-site request forgery CSRF vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier...

CVE-2014-9469

Cross-site scripting XSS vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3...

CVE-2014-9557

CVE-2014-9557 describes multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v2 (Smartwebsites). Affected product: SmartCMS v.2; vulnerability type: XSS. The root cause/technical details are not fully disclosed in the provided documents, and no explicit exploit scenario is described he...

CVE-2014-9558

Multiple SQL injection vulnerabilities in SmartCMS v.2...

CVE-2014-5301

CVE-2014-5301 describes a directory traversal vulnerability affecting ManageEngine products (ServiceDesk Plus MSP v5–v9.0 v9030; AssetExplorer v4–v6.1; SupportCenter v5–v7.9; IT360 v8–v10.4). The root cause is insufficient validation during file upload, enabling traversal sequences to write arbit...