CVE-2014-5203: Undefined Security Weakness

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...

php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw

A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute...

PHPYun 3.1 /model/class/action.class.php SQL注入漏洞

No description provided by source...

WordPress 3.4 - 3.5.1 DoS in class-phpass.php

...

OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB...

Oracle JRockit R27 < R27.8.3.9 / R28 < R28.3.3.10 Multiple Vulnerabilities (July 2014 CPU)

The remote host has a version of Oracle JRockit that is affected by multiple vulnerabilities that could allow a remote user to affect the confidentiality of the system via : - A design flaw in the RSA 'blinding' security component of the 'RASCore' class. By performing operations requiring the use...

Cisco WebEx Meetings Server OutlookAction Class Vulnerability

A vulnerability in the OutlookAction Class of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL...

CVE-2014-3304

The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722...

CVE-2014-3304

Cisco WebEx Meetings Server’s OutlookAction Class is vulnerable to unauthenticated remote enumeration of valid user accounts through crafted URL requests due to improper sanitization of returned messages (Bug ID CSCuj81722). The Cisco advisory notes that software updates are not available to fix ...

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

CVE-2014-1999

The auto-format feature in the RequestCurl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response...

CVE-2014-1999

The auto-format feature in the RequestCurl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response...

CVE-2014-1999

The auto-format feature in the RequestCurl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response...

JVN#94791545: FuelPHP vulnerable to remote code execution

FuelPHP is a PHP web framework for creating web applications. FuelPHP applications contain an issue in the RequestCurl class, which may result in arbitrary code execution. Impact When specially crafted input is processed, arbitrary files may be deleted or arbitrary code may be executed on the...

HP Onboard Administrator < 4.22 Information Disclosure Vulnerability

A potential security vulnerability has been identified with HP BladeSystem c-Class Onboard Administrator OA running OpenSSL. This vulnerability could be exploited remotely to allow the disclosure of information. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted fr...

NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger = v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NewLife...

Quest InTrust 10.4.x ReportTree and SimpleTree Classes

No description provided by source. Quest InTrust 10.4.x ReportTree and SimpleTree Classes ArDoc.dll ActiveX Control Remote File Creation / Overwrite homepage: http://www.quest.com/intrust/ description: InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and...

Sun Java Applet2ClassLoader - Remote Code Execution Exploit

No description provided by source. $Id: javacodebasetrust.rb 11983 2011-03-16 05:01:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...