|
281541
|
5.4 |
MEDIUM
Network
|
debian
mantisbt
|
debian_linux
mantisbt
|
Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extensi…
|
CWE-79
Cross-site Scripting
|
CVE-2014-9271
|
2024-11-21 11:20 |
2015-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281542
|
- |
|
mantisbt
debian
|
mantisbt
debian_linux
|
Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web s…
|
CWE-79
Cross-site Scripting
|
CVE-2014-9269
|
2024-11-21 11:20 |
2015-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281543
|
- |
|
deliciousdays
|
cformsii
|
Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executabl…
|
NVD-CWE-Other
|
CVE-2014-9473
|
2024-11-21 11:20 |
2015-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281544
|
- |
|
strongswan
opensuse
canonical
fedoraproject
debian
|
strongswan
opensuse
ubuntu_linux
fedora
debian_linux
|
strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) g…
|
CWE-19
Data Processing Errors
|
CVE-2014-9221
|
2024-11-21 11:20 |
2015-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281545
|
- |
|
open-xchange
|
open-xchange_appsuite
|
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbi…
|
CWE-79
Cross-site Scripting
|
CVE-2014-8993
|
2024-11-21 11:20 |
2015-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281546
|
- |
|
sonatype
|
nexus
|
Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2014-9389
|
2024-11-21 11:20 |
2015-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281547
|
- |
|
mediawiki
|
mediawiki
|
The wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7 allows remote attackers to conduct PHP object injecti…
|
CWE-77
Command Injection
|
CVE-2014-9277
|
2024-11-21 11:20 |
2015-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281548
|
- |
|
mediawiki
|
mediawiki
|
Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgRawHTML is s…
|
CWE-352
Origin Validation Error
|
CVE-2014-9276
|
2024-11-21 11:20 |
2015-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281549
|
- |
|
microweber
|
microweber
|
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, rel…
|
CWE-89
SQL Injection
|
CVE-2014-9464
|
2024-11-21 11:20 |
2015-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281550
|
- |
|
php
|
php
|
sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length d…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-9427
|
2024-11-21 11:20 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
