8717 matches found
CVE-2014-6295
The CVE-2014-6295 case concerns the WEC Map (wec_map) extension for TYPO3. Affected versions include 3.0.2 and earlier, with vulnerabilities described as SQL Injection (and related Cross‑Site Scripting) that allow remote execution of arbitrary SQL commands via unspecified vectors. Remediation is ...
CVE-2014-6296
Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6897
The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6897
The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6897
The Skyrim Map (com.neko.skyrimmap) Android app version 2.1 contains a certificate validation flaw: it does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The CVE-2014-6897 entry...
PT-2014-7140
Name of the Vulnerable Software and Affected Versions TYPO3 extension wec map versions prior to 3.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.0.3, update to version 3.0.3 or later to resol...
CVE-2014-6296: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-7139
Name of the Vulnerable Software and Affected Versions TYPO3 extension wec map versions prior to 3.0.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue...
CVE-2014-6897: Undefined Security Weakness
The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6295: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-7573
Name of the Vulnerable Software and Affected Versions The Skyrim Map aka com.neko.skyrimmap version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...
Kernel: mm/shmem: denial of service
A race condition flaw was found in the way the Linux kernel's mmap2, madvise2, and fallocate2 system calls interacted with each other while operating on virtual memory file system files. A local user could use this flaw to cause a denial of service...
Linux/x86 - Add map in /etc/hosts file
Linux/x86 - Add map in /etc/hosts file. Shellcode exploit for linx86 platform / ;modifyhosts.asm ;this program add a new entry in hosts file pointing google.com to 127.1.1.1 ;author Javier Tejedor ;date 24/09/2014 global start section .text start: xor ecx, ecx mul ecx mov al, 0x5 push ecx push...
Treasure Map — Five Eyes Surveillance Program to Map the Entire Internet
The National Security Agency and its British counterpart, GCHQ, gained secret access to the German telecom companies’ internal networks, including Deutsche Telekom and Netcologne, in an effort to “map the entire Internet — any device, anywhere, all the time.” As reported by German news publicatio...
PT-2014-7112
Name of the Vulnerable Software and Affected Versions st address map extension versions prior to 0.3.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.3.6, update to version 0.3.6 or later to resolve the issue...
PT-2014-2597
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x through 3.x Description The issue concerns the device-initialization functionality in the MSM camera driver, which allows for an unrestricted mmap interface via MSM CAM IOCTL SET MEM MAP INFO ioctl calls. This enabl...
UBUNTU-CVE-2014-3601
The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to 1 cause a denial of service host OS memory corruption or possibly have unspecified other impact by...
UBUNTU-CVE-2014-3171
Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to...
