CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4524 matches found

Debian CVE•added 2014/02/06 2:0 a.m.•30 views

CVE-2014-1490

Race condition in libssl in Mozilla Network Security Services NSS before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service use-after-free or possibl...

9.3CVSS9AI score0.0399EPSS

SaveExploits1

UbuntuCve•added 2014/02/05 12:0 a.m.•48 views

CVE-2014-1491

Mozilla Network Security Services NSS before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote...

4.3CVSS6.8AI score0.04664EPSS

SaveExploits1References4

Tenable Nessus•added 2014/02/05 12:0 a.m.•40 views

FreeBSD : mozilla -- multiple vulnerabilities (1753f0ff-8dd5-11e3-9b45-b4b52fce4ce8)

The Mozilla Project reports : MFSA 2014-01 Miscellaneous memory safety hazards rv:27.0 / rv:24.3 MFSA 2014-02 Clone protected content with XBL scopes MFSA 2014-03 UI selection timeout missing on download prompts MFSA 2014-04 Incorrect use of discarded images by RasterImage MFSA 2014-05 Informatio...

10CVSS7.9AI score0.07072EPSS

SaveExploits11References29

Tenable Nessus•added 2014/02/05 12:0 a.m.•36 views

Firefox ESR 24.x < 24.3 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox ESR 24.x is earlier than 24.3 and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2014-1477 - An error exists related to...

10CVSS7.2AI score0.07072EPSS

SaveExploits9References16

NVD•added 2014/02/04 9:55 p.m.•22 views

CVE-2014-1471

SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows remote attackers to execute arbitrary SQL commands via vectors related to a ticket search URL...

7.5CVSS8.1AI score0.01774EPSS

SaveExploits0References11

OSV•added 2014/02/04 9:55 p.m.•3 views

DEBIAN-CVE-2014-1471

7.5CVSS8.4AI score0.01774EPSS

SaveExploits0References1

OSV•added 2014/02/04 9:55 p.m.•6 views

CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

7.2AI score

SaveExploits0References16

OSV•added 2014/02/04 9:55 p.m.•4 views

CVE-2014-1471

8.1AI score

SaveExploits0References12

UbuntuCve•added 2014/02/04 9:55 p.m.•25 views

CVE-2014-1471

7.5CVSS6.2AI score0.01774EPSS

SaveExploits0References3

Prion•added 2014/02/04 9:55 p.m.•19 views

Cross site request forgery (csrf)

6.8CVSS7.8AI score0.01479EPSS

SaveExploits1References12Affected Software1

UbuntuCve•added 2014/02/04 9:55 p.m.•25 views

CVE-2014-1694

6.8CVSS6AI score0.01479EPSS

SaveExploits1References3

OSV•added 2014/02/04 9:55 p.m.•5 views

UBUNTU-CVE-2014-1694

6.8CVSS5.9AI score0.01479EPSS

SaveExploits1References4

OSV•added 2014/02/04 9:55 p.m.•6 views

UBUNTU-CVE-2014-1471

7.5CVSS6.2AI score0.01774EPSS

SaveExploits0References4

Cvelist•added 2014/02/04 4:0 p.m.•32 views

CVE-2014-1694

7.1AI score0.01479EPSS

SaveExploits1References12

Debian CVE•added 2014/02/04 4:0 p.m.•49 views

CVE-2014-1694

6.8CVSS7AI score0.01479EPSS

SaveExploits1

Debian CVE•added 2014/02/04 4:0 p.m.•50 views

CVE-2014-1471

7.5CVSS8.2AI score0.01774EPSS

SaveExploits0

Packet Storm•added 2014/02/04 12:0 a.m.•46 views

ImpressCMS 1.3.5 XSS / File Deletion

Hi, I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. One is an arbitrary file deletion and the...

6.4CVSS0.2AI score0.03711EPSS

SaveExploits4

Mozilla•added 2014/02/04 12:0 a.m.•71 views

NSS ticket handling issues — Mozilla

Mozilla developer Brian Smith and security researchers Antoine Delignat-Lavaud and Karthikeyan Bhargavan of the Prosecco research team at INRIA Paris reported issues with ticket handling in the Network Security Services NSS libraries. These have been addressed in the NSS 3.15.4 release, shipping ...

9.3CVSS8.8AI score0.04664EPSS

SaveExploits2References5Affected Software4

Cisco Threats•added 2014/01/22 8:24 p.m.•10 views

Threat Outbreak Alert: Fake Airline Ticket Purchase Email Messages on January 22, 2014

Medium Alert ID: 32526 First Published: 2014 January 22 20:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an airline ticket purchase notification for the recipient. The text in the email message attempts to convince...

0.8AI score

SaveExploits0

seebug.org•added 2014/01/21 12:0 a.m.•23 views

Dell Kace 1000 Systems Management Appliance多个SQL注入漏洞

BUGTRAQ ID: 65029 Dell Kace 1000 Systems Management Appliance是系统管理设备。 Dell Kace 1000 Systems Management Appliance 5.4.76847及其他版本没有正确过滤getUploadPath及getKBot SOAP方法的"macAddress"参数值，可导致注入任意SQL代码，从而操作SQL查询。 0 Dell Kace 1000 Systems Management Appliance 5.4.76847 厂商补丁： Dell ----...

6.9AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by