|
289851
|
- |
|
hiphop_virtual_machine_for_php_project
|
hiphop_virtual_machine_for_php
|
The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml hand…
|
NVD-CWE-Other
|
CVE-2014-1439
|
2024-11-21 11:04 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289852
|
9.8 |
CRITICAL
Network
|
mozilla
canonical
debian
redhat
fedoraproject
opensuse
suse
|
seamonkey
firefox
firefox_esr
thunderbird
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server…
|
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to c…
|
NVD-CWE-noinfo
|
CVE-2014-1477
|
2024-11-21 11:04 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289853
|
- |
|
easyxdm
|
easyxdm
|
Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value.
|
CWE-79
Cross-site Scripting
|
CVE-2014-1403
|
2024-11-21 11:04 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289854
|
- |
|
fortinet
|
fortiweb
|
Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML…
|
CWE-79
Cross-site Scripting
|
CVE-2014-1458
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289855
|
- |
|
otrs
|
otrs
|
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ …
|
CWE-352
Origin Validation Error
|
CVE-2014-1694
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289856
|
- |
|
otrs
|
otrs
|
SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows…
|
CWE-89
SQL Injection
|
CVE-2014-1471
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289857
|
- |
|
mediawiki
|
mediawiki
|
MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metac…
|
CWE-20
Improper Input Validation
|
CVE-2014-1610
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289858
|
- |
|
media5
|
mediatrix_voip_gateway_4402_firmware
mediatrix_voip_gateway
|
Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject …
|
CWE-79
Cross-site Scripting
|
CVE-2014-1612
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289859
|
- |
|
anonymous_posting_project
|
anonymous_posting
|
Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the contact name field.
|
CWE-79
Cross-site Scripting
|
CVE-2014-1611
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289860
|
- |
|
skybluecanvas
|
skybluecanvas
|
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary …
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2014-1683
|
2024-11-21 11:04 |
2014-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
