|
290561
|
- |
|
lockon
|
ec-cube
|
Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the…
|
NVD-CWE-noinfo
|
CVE-2014-0808
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290562
|
- |
|
lockon
|
ec-cube
|
data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2014-0807
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290563
|
- |
|
fenrir-inc
|
sleipnir_mobile
|
The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allo…
|
CWE-200
Information Exposure
|
CVE-2014-0806
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290564
|
- |
|
cisco
|
nx-os
|
The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed H…
|
CWE-20
Improper Input Validation
|
CVE-2014-0677
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290565
|
- |
|
cisco
|
nx-os
|
Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-0676
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290566
|
- |
|
cisco
|
telepresence_video_communication_servers_software telepresence_video_communication_server_software
|
The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue9763…
|
CWE-20
Improper Input Validation
|
CVE-2014-0662
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290567
|
- |
|
cisco
|
telepresence_system_software telepresence_system_1000 telepresence_system_1300-65 telepresence_system_3000 telepresence_system_3010 telepresence_system_3200 telepresence_system_3210…
|
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote a…
|
CWE-94
Code Injection
|
CVE-2014-0661
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290568
|
- |
|
cisco
|
telepresence_isdn_gateway_software
|
Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360.
|
CWE-20
Improper Input Validation
|
CVE-2014-0660
|
2024-11-21 11:02 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290569
|
- |
|
cisco
|
mediasense
|
The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-0672
|
2024-11-21 11:02 |
2014-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290570
|
- |
|
cisco
|
mediasense
|
Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
|
CWE-20
Improper Input Validation
|
CVE-2014-0671
|
2024-11-21 11:02 |
2014-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|