|
276801
|
- |
|
process-one
|
ejabberd
|
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
|
CWE-310
Cryptographic Issues
|
CVE-2014-8760
|
2024-11-21 11:19 |
2014-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276802
|
- |
|
mageia_project dokuwiki
|
mageia dokuwiki
|
DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) characte…
|
CWE-287
Improper Authentication
|
CVE-2014-8764
|
2024-11-21 11:19 |
2014-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276803
|
- |
|
dokuwiki mageia_project
|
dokuwiki mageia
|
DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user …
|
CWE-287
Improper Authentication
|
CVE-2014-8763
|
2024-11-21 11:19 |
2014-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276804
|
- |
|
dokuwiki
|
dokuwiki
|
The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.
|
CWE-200
Information Exposure
|
CVE-2014-8762
|
2024-11-21 11:19 |
2014-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276805
|
- |
|
dokuwiki
|
dokuwiki
|
inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call.
|
CWE-200
Information Exposure
|
CVE-2014-8761
|
2024-11-21 11:19 |
2014-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276806
|
- |
|
panasonic
|
network_camera_recorder_firmware
|
The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote attackers to execute arbitrary code via a crafted GetVOLHeader method call, which writes null bytes to a…
|
NVD-CWE-noinfo
|
CVE-2014-8756
|
2024-11-21 11:19 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276807
|
- |
|
panasonic
|
network_camera_view
|
Panasonic Network Camera View 3 and 4 allows remote attackers to execute arbitrary code via a crafted page, which triggers an invalid pointer dereference, related to "the ability to nullify an arbitr…
|
CWE-20
Improper Input Validation
|
CVE-2014-8755
|
2024-11-21 11:19 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276808
|
- |
|
openstack
|
nova
|
Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance tha…
|
CWE-362
Race Condition
|
CVE-2014-8750
|
2024-11-21 11:19 |
2014-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276809
|
- |
|
allomani
|
allomani_weblinks
|
Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified p…
|
CWE-89
SQL Injection
|
CVE-2014-8766
|
2024-11-21 11:19 |
2014-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276810
|
- |
|
drupal
|
project_issue_file_review
|
Multiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR) module 6.x-2.x before 6.x-2.17 for Drupal allow (1) remote attackers to inject arbitrary web script …
|
CWE-79
Cross-site Scripting
|
CVE-2014-8765
|
2024-11-21 11:19 |
2014-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|