PT-2014-1979

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is related to the external control of a file name or path in the Advantech WebAccess browser plugin, which can be exploited by a remote attacker to execute arbitrary code...

CVE-2014-9249: Undefined Security Weakness

The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408...

CVE-2014-6407: Improper Link Resolution Before File Access

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a 1 symlink or 2 hard link attack in an image archive in a a pull or b load operation...

xorg-server: multiple issues

CVE-2014-8091 denial of service X.Org X Window System, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a crafted connection...

PT-2014-6381

Name of the Vulnerable Software and Affected Versions Fasttoggle module versions 7.x-1.3 through 7.x-1.4 for Drupal Description The issue allows remote attackers to block or unblock an account via a crafted user status link. Recommendations For Fasttoggle module versions 7.x-1.3 and 7.x-1.4,...

CVE-2014-8088: Improper Authentication

The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind...

CVE-2014-3663: Undefined Security Weakness

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

USN-2369-1 file vulnerability

It was discovered that file incorrectly handled certain CDF documents. A attacker could use this issue to cause file to hang or crash, resulting in a denial of service...

PT-2014-2316

Name of the Vulnerable Software and Affected Versions Zope versions prior to 2.12.21 Zope versions 2.13.x prior to 2.13.11 Plone versions prior to 4.2.3 Plone version 4.3 before beta 1 Description The issue allows remote authenticated users to gain access to restricted attributes via unspecified...

WordPress Infusionsoft Gravity Forms Add-on Arbitrary File Upload Vulnerability

WordPress Infusionsoft Gravity Forms Add-on is prone to remote file upload vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE: Security Advisory for Firefox (openSUSE-SU-2014:1100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2365 Advantech WebAccess Improper Access Control

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors...

ownCloud 'calid' Parameter privilege Escalation Vulnerability

ownCloud is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

2daybiz Businesscard Script Authentication bypass

No description provided by source. Exploit Title: 2daybiz Businesscard Script Authentication bypass Date: 14th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Software Link:http://www.2daybiz.com/products/businesscard/index.php Greetz to :b0nd, Fbih2s,rockey killer,The empty,...

Cerbere Proxy Server 1.2 Long Host Header Field Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server. A remote attacker may caus...

PostgreSQL 8.3.6 Low Cost Function Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34069/info PostgreSQL is prone to an information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. PostgreSQL 8.3.6 is vulnerable; other...

Enthrallweb eHomes homeDetail.asp AD_ID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

CVE-2013-4427: Improper Input Validation

pyxtrlock before 0.2 does not properly check the return values of the 1 xcbgrabpointer and 2 xcbgrabkeyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors...

OrbiTeam BSCW 'op' Parameter Information Disclosure Vulnerability

OrbiTeam BSCW is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...