CVE-2014-7985

Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter to install/index.php...

CVE-2014-7986

install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameter...

CVE-2014-7987: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php...

CVE-2014-7986: Undefined Security Weakness

install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameter...

PT-2014-8358

Name of the Vulnerable Software and Affected Versions EsppoCRM versions prior to 2.6.0 Description The issue allows remote attackers to re-install the application. This can be achieved by setting the installProcess parameter to 1 in the install/index.php file. Recommendations For versions prior t...

PT-2014-8359

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 2.6.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to "install/index.php". This is a cross-site scripting XSS issue. Recommendations F...

PT-2014-8357

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 2.6.0 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter to "install/index.php" API endpoint. Recommendations For versions prior to 2.6....

CVE-2014-7985: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter to install/index.php...

SSL v3 Poodle security vulnerability fix recommendations-vulnerability warning-the black bar safety net

! The use of SSL to protect your website traffic far more than is on the server install an SSL certificate. Era in constant development,with the browser of aging, password strength reduction as well as attackers become more creative, the situation has undergone subtle changes. For early...

CVE-2014-4283

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277...

CVE-2014-4283

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277...

CVE-2014-4283

Technical details about CVE-2014-4283 are not publicly disclosed in the provided documents. Monitor for updates.

CVE-2014-4277: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283...

CVE-2014-4283: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277...

PT-2014-5779

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects confidentiality and is related to the Automated Install Engine. The exact vectors of the issue are unknown. Recommendations For Oracle Sun Solaris version 11, at the moment, there is ...

PT-2014-5774

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects confidentiality and is related to the Automated Install Engine. The exact nature of the vulnerability and the vectors used for exploitation are not specified. Recommendations For Orac...

Fedora Update for lzo FEDORA-2014-7939

Check the version of lzo SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868396";...

Fedora Update for seamonkey FEDORA-2014-11744

Check the version of seamonkey SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868375";...