2387 matches found
CVE-2014-10019: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10018: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
PT-2015-3663
Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description The issue affects the webconfig/wlan/country.html/country component of the modem, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers ...
PT-2015-3662
Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the essid parameter in the /webconfig/wlan/country.html/country endpoint. Recommendatio...
RHEL 6 : rhevm-dwh 3.3.3 (RHSA-2014:0559)
An updated rhevm-dwh package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...
CVE-2014-8665
The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files...
CVE-2014-8665
Technical details for CVE-2014-8665 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2014-8308
Cross-site scripting XSS vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-8310
The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service server shutdown via crafted OSCAFactory::Session ORB message...
CVE-2014-8308
Cross-site scripting XSS vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-8308
CVE-2014-8308 is an XSS vulnerability in SAP BusinessObjects BI EDGE 4.0’s Send to Inbox function. CVSS2 base score 4.3 (MEDIUM); attack vector NETWORK, attack complexity MEDIUM, no authentication, confidentiality impact NONE, integrity impact PARTIAL, availability impact NONE. Exploitation detai...
CVE-2014-8310
The CVE-2014-8310 entry affects SAP BusinessObjects BI Edge 4.0, specifically the CMS CORBA listener. A vulnerability in the OSCAFactory::Session ORB handling allows remote attackers to cause a denial of service (server shutdown). The available data does not specify exploit details beyond the cra...
CVE-2014-8310
The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service server shutdown via crafted OSCAFactory::Session ORB message...
CVE-2014-8310: Improper Input Validation
The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service server shutdown via crafted OSCAFactory::Session ORB message...
PT-2014-8459
Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Edge version 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a server shutdown, by sending crafted OSCAFactory::Session ORB messages to the CMS CORBA listener. Recommendations...
CVE-2014-8308: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-8457
Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI EDGE version 4.0 Description A cross-site scripting XSS issue exists in the Send to Inbox functionality, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For SAP...
Mozilla Firefox DirectionalityUtils Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Oracle BI Publisher Mobile Service Unspecified Remote Information Disclosure (July 2014 CPU)
The remote Oracle Business Intelligence Publisher install is affected by an unspecified information disclosure vulnerability related to the 'Mobile Service' component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...