CVE-2014-2949

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3476

OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...

CVE-2014-0220

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...

CVE-2014-0220

CVE-2014-0220 affects Cloudera Manager versions prior to 4.8.3 and prior to 5.0.1 in the 5.x line. The vulnerability is an information disclosure via the API, where remote authenticated users can obtain sensitive configuration values. The issue is tied to API access controls that fail to redact o...

Design/Logic Flaw

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors...

CVE-2014-2506

EMC Documentum Content Server (versions 6.7 SP1 P28, 6.7 SP2 P14, 7.0 before P15, 7.1 before P05) contains a privilege-escalation vulnerability (CVE-2014-2506) exploitable by remote authenticated users to create system objects with super-user privileges and bypass data access/server action restri...

CVE-2014-2575

The CVE-2014-2575 entry concerns DevExpress ASPxFileManager for WebForms and MVC. A directory traversal vulnerability allows remote authenticated users to read or write arbitrary files by supplying a relative path in __EVENTARGUMENT, affecting DevExpress ASPxFileManager versions up to 13.2.8 (and...

CVE-2014-3280

CVE-2014-3280 affects Cisco VOSS CDM (Cisco Unified Communications Domain Manager) versions 9.0(.1) and earlier. The issue is an improper access-control enforcement in the web framework, allowing remote authenticated users to access potentially sensitive user information by visiting an unspecifie...

CVE-2013-6744

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...

CVE-2013-6744

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...

UBUNTU-CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...

CVE-2013-6741

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration...

CVE-2013-6741

The CVE-2013-6741 issue affects IBM Maximo Asset Management and related IBM Tivoli products, allowing remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error. Affected products include Maximo Asset Management 7.x (before 7.1.1.7 LAFIX.20140319...

CVE-2014-0849

IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups...

CVE-2014-2200

CVE-2014-2200 affects Cisco NX-OS 5.0 (before 5.0(5)) on Nexus 7000 devices with local authentication and multiple VDCs enabled. A remote, authenticated user can escalate privileges to an unintended VDC via SSH to a management interface (Bug CSCti11629). The issue is documented in Cisco’s NX-OS a...

CVE-2014-3275

SQL injection vulnerability in the web framework in Cisco Identity Services Engine ISE 1.2.1 patch 2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337...

UBUNTU-CVE-2014-3801

OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...

CVE-2014-2948

Bizagi BPM Suite (workflowenginesoa.asmx) is affected by CVE-2014-2948, a SQL injection vulnerability reported to allow a remote authenticated attacker to execute arbitrary SQL via a crafted SOAP request. The issue targets the workflowenginesoa.asmx web service and is described alongside an addit...

mysql: unspecified DoS related to Partition (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition...