|
291251
|
- |
|
opensuse
f5
|
opensuse
nginx
|
Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.
|
CWE-787
Out-of-bounds Write
|
CVE-2014-0133
|
2024-11-21 11:01 |
2014-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291252
|
- |
|
theforeman
|
foreman
|
Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name …
|
CWE-79
Cross-site Scripting
|
CVE-2014-0089
|
2024-11-21 11:01 |
2014-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291253
|
- |
|
redhat
|
enterprise_linux
|
The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_v…
|
NVD-CWE-noinfo
|
CVE-2014-0055
|
2024-11-21 11:01 |
2014-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291254
|
- |
|
virtualaccess
|
gw6110a_firmware
gw6110a
|
The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modifi…
|
NVD-CWE-Other
|
CVE-2014-0343
|
2024-11-21 11:01 |
2014-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291255
|
- |
|
openssl
|
openssl
|
The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces…
|
CWE-310
Cryptographic Issues
|
CVE-2014-0076
|
2024-11-21 11:01 |
2014-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291256
|
- |
|
linux
opensuse
suse
|
linux_kernel
evergreen
linux_enterprise_server
|
Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the …
|
CWE-416
Use After Free
|
CVE-2014-0131
|
2024-11-21 11:01 |
2014-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291257
|
- |
|
stunnel
|
stunnel
|
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to u…
|
CWE-332
Insufficient Entropy in PRNG
|
CVE-2014-0016
|
2024-11-21 11:01 |
2014-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291258
|
- |
|
moodle
|
moodle
|
The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 al…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-0127
|
2024-11-21 11:01 |
2014-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291259
|
- |
|
moodle
|
moodle
|
badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility o…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-0129
|
2024-11-21 11:01 |
2014-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291260
|
- |
|
moodle
|
moodle
|
repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Al…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-0125
|
2024-11-21 11:01 |
2014-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
