|
291041
|
9.8 |
CRITICAL
Network
|
mozilla
canonical
debian
redhat
fedoraproject
opensuse
suse
|
seamonkey
firefox
firefox_esr
thunderbird
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server…
|
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to c…
|
NVD-CWE-noinfo
|
CVE-2014-1477
|
2024-11-21 11:04 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291042
|
- |
|
easyxdm
|
easyxdm
|
Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value.
|
CWE-79
Cross-site Scripting
|
CVE-2014-1403
|
2024-11-21 11:04 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291043
|
- |
|
fortinet
|
fortiweb
|
Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML…
|
CWE-79
Cross-site Scripting
|
CVE-2014-1458
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291044
|
- |
|
otrs
|
otrs
|
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ …
|
CWE-352
Origin Validation Error
|
CVE-2014-1694
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291045
|
- |
|
otrs
|
otrs
|
SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows…
|
CWE-89
SQL Injection
|
CVE-2014-1471
|
2024-11-21 11:04 |
2014-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291046
|
- |
|
mediawiki
|
mediawiki
|
MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metac…
|
CWE-20
Improper Input Validation
|
CVE-2014-1610
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291047
|
- |
|
media5
|
mediatrix_voip_gateway_4402_firmware
mediatrix_voip_gateway
|
Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject …
|
CWE-79
Cross-site Scripting
|
CVE-2014-1612
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291048
|
- |
|
anonymous_posting_project
|
anonymous_posting
|
Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the contact name field.
|
CWE-79
Cross-site Scripting
|
CVE-2014-1611
|
2024-11-21 11:04 |
2014-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291049
|
- |
|
skybluecanvas
|
skybluecanvas
|
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary …
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2014-1683
|
2024-11-21 11:04 |
2014-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291050
|
- |
|
openbsd
|
openssh
|
The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attack…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-1692
|
2024-11-21 11:04 |
2014-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
