|
285981
|
- |
|
checkpoint
|
session_authentication_agent
|
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2014-1673
|
2024-11-21 11:04 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285982
|
- |
|
checkpoint
|
management_server security_gateway
|
Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, whic…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-1672
|
2024-11-21 11:04 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285983
|
- |
|
galen_charlton
|
marc-xml
|
XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-1626
|
2024-11-21 11:04 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285984
|
- |
|
dell
|
kace_k1200s_systems_management_appliance kace_k1100s_systems_management_appliance kace_k1000_systems_management_appliance_software kace_k1000_systems_management_appliance kace_k1000_syste…
|
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress elem…
|
CWE-89
SQL Injection
|
CVE-2014-1671
|
2024-11-21 11:04 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285985
|
- |
|
microsoft
|
bing
|
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
|
CWE-94
Code Injection
|
CVE-2014-1670
|
2024-11-21 11:04 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285986
|
- |
|
drupal
|
drupal
|
The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to ob…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-1476
|
2024-11-21 11:04 |
2014-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285987
|
- |
|
drupal
|
drupal
|
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2014-1475
|
2024-11-21 11:04 |
2014-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285988
|
- |
|
redhat
|
libvirt
|
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepaliv…
|
CWE-362
Race Condition
|
CVE-2014-1447
|
2024-11-21 11:04 |
2014-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285989
|
- |
|
doug_poulin
|
command_school_student_management_system
|
Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a database backup via a direct request.
|
CWE-200
Information Exposure
|
CVE-2014-1637
|
2024-11-21 11:04 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285990
|
- |
|
doug_poulin
|
command_school_student_management_system
|
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to (1) admin…
|
CWE-89
SQL Injection
|
CVE-2014-1636
|
2024-11-21 11:04 |
2014-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|