33563 matches found
CVE-2014-8426
CVE-2014-8426 affects Barracuda Load Balancer ADC with firmware 5.0.0.015, where hard-coded weak credentials are present. Connected sources describe a hard-coded credential issue and related weaknesses (including SSH key issues and offline password-reset vectors) that could enable unauthorized ac...
CVE-2014-9514
BMC Footprints Service Core 11.5 is affected by a cross-site scripting (XSS) vulnerability in its web UI. CNVD-2017-30588 states that a remote attacker can exploit this to inject arbitrary web script or HTML. The NVD entry confirms XSS in Footprints Service Core 11.5. No remediation details are p...
CVE-2014-9483
Technical details for CVE-2014-9483 are not publicly provided in the supplied documents. The entries mention Emacs 24.4 and a generic bypass of security restrictions. Monitor for updates from vendors and security advisories.
CVE-2014-0141
Cross-site scripting XSS vulnerability in Red Hat Satellite 6.0.3...
CVE-2014-8871
Hybris Commerce Software Suite v5.x has a Directory Traversal / Arbitrary File Disclosure vulnerability (CVE-2014-8871). The flaw affects releases up to and including: 5.3.0.1, 5.2.0.3, 5.1.1.2, 5.1.0.1, 5.0.4.4, 5.0.3.3, and 5.0.0.3. Root cause: the media retrieval path uses a Base64-encoded con...
CVE-2014-9558
CVE-2014-9558 affects SmartCMS v.2 (Smartwebsites). Multiple SQL injection vulnerabilities arise from improper handling of user input before SQL query construction, allowing an attacker to abuse query logic and potentially access/modify database data. Public sources describe the vendor/product as...
CVE-2014-8168
Red Hat Satellite 6 is affected. The vulnerability allows local users to access the mongod database and delete the pulp_database. The provided documents do not specify the root cause, exact vulnerable component version, or a mitigation/patch. No exploitation details or in‑the‑wild usage are descr...
CVE-2014-9312
CVE-2014-9312 : WordPress Photo Gallery plugin (version 1.2.5) contains an Unrestricted File Upload vulnerability. The root cause is UploadHandler.php allowing access to file uploads without proper verification/sanitization, enabling an attacker with a registered user account to upload arbitrary ...
CVE-2014-4925
Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...
CVE-2014-9312
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5...
CVE-2014-0141
Red Hat Satellite 6.0.3 contains a cross-site scripting (XSS) vulnerability in its web interface. The CNVD entry specifies a remote attacker could exploit this to inject arbitrary web script or HTML, implying browser-level impact on users authenticated to the Satellite console. The available conn...
CVE-2014-8753
CVE-2014-8753 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6. Affected component: Cit-e-Access 6 (Cit-e-Net). Root cause: reflected/stored XSS vulnerabilities allowing malicious URIs to be parsed by clients. Practical impact (as described): attacker...
CVE-2014-4925
The CVE-2014-4925 entry concerns Good for Enterprise for Android (versions 2.8.0.398 and 1.9.0.40) with a cross-site scripting/HTML-injection flaw in emails. Public disclosures describe a crafted HTML payload (notably a meta refresh) that can redirect users to a malicious URL when opening a messa...
CVE-2014-8900
IBM UrbanCode Release is vulnerable to cross-site request forgery (CSRF) due to improper validation of user-supplied input. A remote attacker could entice an authenticated user to visit a malicious site to send crafted requests, potentially enabling cross-site scripting, web cache poisoning, and ...
CVE-2014-9557
Multiple cross-site scripting XSS vulnerabilities in SmartCMS v.2...
CVE-2014-9469
CVE-2014-9469: A cross-site scripting (XSS) vulnerability affects vBulletin Forum versions 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5 and 5.1.3. Connected sources identify a vBulletin Forum XSS vulnerability on the orum/helpulpage, with the OpenVAS entry calling it a vBulletin Forum 'forum/help' ...
CVE-2014-8428
CVE-2014-8428 affects Barracuda Load Balancer 5.0.0.015, causing privilege escalation via an improperly protected SSH key. Multiple sources (NVD entry and CNVD/PRION records) corroborate a vulnerability in Barracuda Load Balancer with this issue, noting the SSH key protection flaw as the root cau...
CVE-2014-9513
CVE-2014-9513 concerns insecure use of temporary files in xbindkeys-config 0.1.3-2, enabling remote code execution. The primary affected component is xbindkeys-config (version 0.1.3-2). The description across connected sources consistently states that insecure handling of temporary files allows r...
CVE-2014-5302
CVE-2014-5302 affects ManageEngine ServiceDesk Plus/Plus MSP (v5–v9.0 v9030), AssetExplorer (v4–v6.1), SupportCenter (v5–v7.9), and IT360 (v8–v10.4). The issue is a directory traversal/file-upload vulnerability in WsDiscoveryServlet/attachment endpoints that enables remote code execution. Exploit...
