|
290971
|
9.8 |
CRITICAL
Network
|
atos
|
openstage_80_firmware
openstage_80_g_firmware
openstage_60_g_firmware
openstage_60_firmware
openstage_40_firmware
openstage_40_g_firmware
openstage_20_e_firmware
openstage_20_fir…
|
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
|
CWE-78
OS Command
|
CVE-2014-2650
|
2024-11-21 11:06 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290972
|
4.4 |
MEDIUM
Local
|
pen_project
opensuse
debian
|
pen
opensuse
debian_linux
|
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2014-2387
|
2024-11-21 11:06 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290973
|
7.5 |
HIGH
Network
|
projectfloodlight
|
open_sdn_controller
|
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw i…
|
CWE-20
Improper Input Validation
|
CVE-2014-2304
|
2024-11-21 11:06 |
2019-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290974
|
8.8 |
HIGH
Network
|
apereo
|
cas_server
|
XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google Accounts Integration is enabled, allows rem…
|
CWE-611
XXE
|
CVE-2014-2296
|
2024-11-21 11:06 |
2018-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290975
|
9.8 |
CRITICAL
Network
|
webedition
|
webedition_cms
|
The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org.
|
CWE-94
Code Injection
|
CVE-2014-2302
|
2024-11-21 11:06 |
2018-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290976
|
9.8 |
CRITICAL
Network
|
brookinsconsulting
|
collected_information_export
|
Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2552
|
2024-11-21 11:06 |
2018-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290977
|
9.8 |
CRITICAL
Network
|
openwebanalytics
|
open_web_analytics
|
Open Web Analytics (OWA) before 1.5.7 allows remote attackers to conduct PHP object injection attacks via a crafted serialized object in the owa_event parameter to queue.php.
|
CWE-74
Injection
|
CVE-2014-2294
|
2024-11-21 11:06 |
2018-04-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290978
|
5.9 |
MEDIUM
Network
|
oleumtech
|
ft1_firmware
ad1_firmware
|
OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data.
|
CWE-200
Information Exposure
|
CVE-2014-2359
|
2024-11-21 11:06 |
2018-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290979
|
5.5 |
MEDIUM
Local
|
intel
|
thermald
|
The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
|
CWE-59
Link Following
|
CVE-2014-2312
|
2024-11-21 11:06 |
2018-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290980
|
9.8 |
CRITICAL
Network
|
zikula
|
zikula_application_framework
|
Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitrary PHP code via crafted serialized data…
|
CWE-94
Code Injection
|
CVE-2014-2293
|
2024-11-21 11:06 |
2018-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
