CVE-2014-100026

The CVE-2014-100026 entry corresponds to a readme.php-based XSS in WordPress plugin “April’s Super Functions Pack” prior to version 1.4.8. The vulnerability allows an attacker to inject arbitrary script or HTML via the page parameter, enabling cross-site scripting. The affected product is the Wor...

CVE-2014-100026

Cross-site scripting XSS vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information...

CVE-2014-100026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information...

ManageEngine Password Manager Pro SQL Injection Exploit

ManageEngine Password Manager Pro PMP has an authenticated blind SQL injection vulnerability in SQLAdvancedALSearchResult.cc that can be abused to escalate privileges and obtain Super Administrator access. A Super Administrator can then use his privileges to dump the whole password database in CS...

Password Manager Pro / Pro MSP - Blind SQL Injection

No description provided by source. Authenticated blind SQL injection in Password Manager Pro / Pro MSP Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 08/11/2014 / Last updated:...

ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection

ManageEngine Password Manager Pro PMP has an authenticated blind SQL injection vulnerability in SQLAdvancedALSearchResult.cc that can be abused to escalate privileges and obtain Super Administrator access. A Super Administrator can then use his privileges to dump the whole password database in CS...

A General campus of the system to the presence of multiple high-risk vulnerabilities(registration logic&getshell)-vulnerability warning-the black bar safety net

About Beijing Chong star weiye software Technology Co., Ltd. development of the education system vulnerability report 1. A large cattle submitted to such a vulnerability : the versatility of the SQL injection vulnerability of 1influence of Beijing, all kindergarten schools, etc., a SQL injection...

CVE-2014-7396

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7396

The CVE-2014-7396 entry concerns the PocketKnife Bravo Super Android app (com.wPocketKnifeBravo) version 0.54.13345.33028, which does not verify X.509 SSL certificates. This缺证 allows MITM attackers to spoof SSL servers and obtain sensitive information via a crafted certificate. The connected sour...

CVE-2014-7396

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7396: Undefined Security Weakness

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities (ESA-2014-091)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper handling of system objects that allows a user to escalate their privileges to super-user status. CVE-2014-4621 - A...

CVE-2014-5966

The Dreamland Super Theme GO Gold aka com.gau.go.launcherex.viptheme.dreamland.gold application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5966: Undefined Security Weakness

The Dreamland Super Theme GO Gold aka com.gau.go.launcherex.viptheme.dreamland.gold application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4621

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

Authorization

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

CVE-2014-4621: Undefined Security Weakness

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...