|
279391
|
- |
|
alienvault
|
open_source_security_information_management
|
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
|
CWE-200
Information Exposure
|
CVE-2014-4153
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279392
|
- |
|
alienvault
|
open_source_security_information_management
|
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.
|
CWE-94
Code Injection
|
CVE-2014-4152
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279393
|
- |
|
alienvault
|
open_source_security_information_management
|
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
|
CWE-94
Code Injection
|
CVE-2014-4151
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279394
|
- |
|
opensuse php debian
|
opensuse php debian_linux
|
Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary co…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4049
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279395
|
- |
|
xen
|
xen
|
Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4021
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279396
|
- |
|
wireshark
|
wireshark
|
wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4174
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279397
|
- |
|
wireshark
|
wireshark
|
The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended t…
|
CWE-189
Numeric Errors
|
CVE-2014-4020
|
2024-11-21 11:09 |
2014-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279398
|
- |
|
nice
|
recording_express
|
Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) USRLNM par…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4308
|
2024-11-21 11:09 |
2014-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279399
|
- |
|
webtitan
|
webtitan
|
SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter.
|
CWE-89
SQL Injection
|
CVE-2014-4307
|
2024-11-21 11:09 |
2014-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279400
|
- |
|
webtitan
|
webtitan
|
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) in the logfile parameter in a download action.
|
CWE-22
Path Traversal
|
CVE-2014-4306
|
2024-11-21 11:09 |
2014-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|