Search:
WLB2

[ Bugs ]   [ Exploits ]
WLB2RSS Bugtraq WLB2RSS
[ Bogus ]   [ Tricks ]
2014-12-18
Medium Risk

vBulletin Moderator Control Panel 4.2.2 CSRF

Tomescu Daniel
Low Risk

Jease CMS 2.11 Script Insertion

Manideep K
Medium Risk

WordPress Bird Feeder 1.2.3 CSRF / XSS

(CVE)
Vulnerability La...
Medium Risk

Revive Adserver 3.0.5 Cross Site Scripting / Denial Of Service

(CVE)
Matteo Beccati
Low Risk

Revive Adserver 3.0.5 Cross Site Scripting

(CVE)
High-Tech Bridge...
Low Risk

W3 Total Cache 0.9.4 Cross Site Scripting

(CVE)
Tobias Glemser
High Risk

Morfy CMS 1.05 Remote Command Execution

(CVE)
Vulnerability La...
High Risk

E-Journal 1.0 Shell Upload / SQL Injection

X-Cisadane
Medium Risk

Jaangle 0.98i.977 Denial Of Service

hadji samir
2014-12-17
High Risk

Linux Kernel 'Grinch' polkit/wheel group issue

Joab Jackson
High Risk

Ettercap 8.0 / 8.1 Code Execution / Denial Of Service

(CVE)
Nick Sampanis
Low Risk

Arris Touchstone TG862G/CT Cross Site Scripting

(CVE)
Seth Art
Low Risk

Arris Touchstone TG862G/CT Cross Site Request Forgery

(CVE)
Seth Art
High Risk

CIK Telecom SVG6000RW Default Account / Command Execution

Chako
Medium Risk

iWifi For Chat 1.1 Denial Of Service

Vulnerability La...
High Risk

iUSB 1.2 Arbitrary Code Execution

Vulnerability La...
Low Risk

D-Link DCS-2103 Brute Force / Cross Site Scripting

MustLive
Low Risk

Elefant CMS 1.3.9 Cross Site Scripting

Vulnerability La...
High Risk

RStickets! 1.0.0 Remote Shell Upload

Ibrahim Raafat
High Risk

RSform!Pro 1.3.0 Remote Shell Upload

Ibrahim Raafat
Low Risk

Konakart 7.3.0.1 Cross Site Scripting

Vulnerability La...
High Risk

WordPress A.F.D. Theme Echelon Arbitrary File Download

Cleiton Pinheiro
Low Risk

Fuzzylime 3.03b Cross Site Scripting

Vulnerability La...
Low Risk

RelateIQ Mail Encoding Script Code Injection

Vulnerability La...
2014-12-16
High Risk

Linux Kernel 3.2 multiple x86_64 vulnerabilities

(CVE)
Andy Lutomirski
High Risk

Intrexx Professional 6.0 / 5.2 Remote Code Execution

(CVE)
Christian Schnei...
Low Risk

Intrexx Professional 6.0 / 5.2 Cross Site Scripting

(CVE)
Christian Schnei...
High Risk

ActualAnalyzer ant Cookie Command Execution

Brendan Coles
Medium Risk

CA LISA Multiple Vulns

(CVE)
Ken Williams
Medium Risk

WordPress O2Tweet 0.0.4 CSRF / XSS

(CVE)
Manideep K
2014-12-15
Medium Risk

glibc 2.21 DNS endless loop in getaddr_r

Yash
Low Risk

phpMyAdmin 4.0.x, 4.1.x, 4.2.x Denial of Service

Javier Nieto
Medium Risk

CodeMeter 4.50.906.503 Service Trusted Path Privilege Escalation

Hadji Samir
Medium Risk

HTCSyncManager 3.1.33.0 Service Trusted Path Privilege Escalation

Hadji Samir
High Risk

Wordpress Wp Symposium 14.11 Unauthenticated Shell Upload Exploit

Claudio Viviani
[ Read More ]

  Top CWE:   CWE-89 (SQL Injection)   CWE-79 (XSS)   CWE-119 (Buffer Overflow)   CWE-22 (Path Traversal)  

[ CVE Related ]   [ CWE Related ]   [ Dorks ]  

[ CVE Products ] [ CVE Vendors ]
WLB2RSS CVE CVEMAP.ORG WLB2RSS CVE
Last Update: 2014-12-18
2014-12-18
 
CVE-2014-3580
( 5/10 )
 
  Apache Subversion
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does n...
 
CVE-2014-8108
( 5/10 )
 
  Apache Subversion
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a...
2014-12-17
 
CVE-2014-8133
( 2.1/10 )
 
  Linux Linux kernel
arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mec...
 
CVE-2014-9322
( 7.2/10 )
 
  Linux Linux kernel
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access t...
 
CVE-2014-7285
( 6.5/10 )
 
  Symantec Web gateway
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.
 
CVE-2014-7880
( 5/10 )
 
  HP Tcp ip services openvms
Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors.
 
CVE-2014-5437
( 6.8/10 )
 
  Arris Touchstone tg862g/ct firmware
Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote ...
 
CVE-2014-5438
( 3.5/10 )
 
  Arris Touchstone tg862g/ct firmware
Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_device...
 
CVE-2014-9253
( 4.3/10 )
 
  Dokuwiki Dokuwiki
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to...
 
CVE-2013-7402
( 5/10 )
 
  C-icap project C-icap
Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (crash) via a crafted ICAP request.
 
CVE-2014-7170
( 1.9/10 )
 
  Puppetlabs Puppet server
Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.
 
CVE-2014-8116
( 5/10 )
 
  File project FILE
The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
 
CVE-2014-8117
( 5/10 )
 
  File project FILE
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
 
CVE-2014-8553
( 5/10 )
 
  Mantisbt Mantisbt
The mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18 allows remote attackers to obtain sensitive information via a (1) mc_project_get_users, (2) mc_issue_get, (3) mc_filter_get_issues, or (4) mc_project_ge...
 
CVE-2014-9387
( 10/10 )
 
  SAP Businessobjects
SAP BussinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905.
 
CVE-2014-9388
( 5/10 )
 
  Mantisbt Mantisbt
bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter.
2014-12-16
 
CVE-2013-6435
( 7.5/10 )
 
  RPM RPM
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the...
 
CVE-2014-4936
( 9.3/10 )
 
  Malwarebytes Malwarebytes anti-exploit
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and up...
 
CVE-2014-5359
( 7.8/10 )
 
  Safenet-inc Safenet authentication service...
Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter to owa/owa.
 
CVE-2014-5466
( 4.3/10 )
 
  Splunk Splunk
Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
[ Read More ]

Top Vendors:

Apple   Microsoft   Google   Oracle   Apache   IBM   Red Hat   HP   Adobe   Mozilla  

[ Full List of Vendors ]  

Top Products:

Linux Kernel   Mac OS X   Windows XP   Windows 7   Flash Player   Adobe Reader   PHP   JRE   JDK  
Wordpress   Joomla   Chrome   IE   Firefox   Safari   HTTPD   Tomcat   Nginx  

[ Full List of Products ]  



 
Copyright 2014, cxsecurity.com