Path traversal

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...

CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...

CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...

CVE-2013-7179

creationtimestamp| type| source ---|---|--- 2014-02-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39074...

Buffer overflow

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014...

Wikipedia Remote Execution Vulnerability Patched

A serious remote code execution vulnerability was recently patched by the Wikimedia Foundation. The flaw could have put at risk any of the foundation’s sites running MediaWiki software, including Wikipedia. Researchers within Check Point Software Technologies’ Vulnerability Research Group...

VulnCheck KEV: CVE-2013-7246

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014...

CVE-2014-1632

creationtimestamp| type| source ---|---|--- 2014-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39066...

CVE-2014-1664

creationtimestamp| type| source ---|---|--- 2014-01-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39061...

Adobe Reader Multiple Vulnerabilities - 01 (Jan 2014) - Windows

Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-7219

creationtimestamp| type| source ---|---|--- 2014-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39028...

MS14-001: Description of the security update for Word Automation Services in SharePoint Server 2010: January 14, 2014

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software. An attacker who successfully exploited the vulnerabilities could gain the same user right...

CVE-2013-6017

creationtimestamp| type| source ---|---|--- 2014-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39015...

CVE-2014-1671

creationtimestamp| type| source ---|---|--- 2014-01-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39057...

CVE-2014-1618

creationtimestamp| type| source ---|---|--- 2014-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39012 2014-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39011...

CVE-2014-1915

creationtimestamp| type| source ---|---|--- 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38957 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38958...

CVE-2014-1637

creationtimestamp| type| source ---|---|--- 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38956...

CVE-2013-6480

creationtimestamp| type| source ---|---|--- 2014-01-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38937...

CVE-2013-7240

creationtimestamp| type| source ---|---|--- 2013-12-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38936...

CVE-2013-7278

creationtimestamp| type| source ---|---|--- 2013-12-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38935...