|
277231
|
- |
|
xen
|
xen
|
The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when…
|
CWE-399
Resource Management Errors
|
CVE-2014-6268
|
2024-11-21 11:14 |
2015-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277232
|
- |
|
ettercap-project
|
ettercap
|
The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted passwor…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-6396
|
2024-11-21 11:14 |
2014-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277233
|
- |
|
ettercap-project
|
ettercap
|
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitra…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-6395
|
2024-11-21 11:14 |
2014-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277234
|
- |
|
zenoss
|
zenoss_core
|
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers to execute arbitrary code by (1) spoofing the callhome server or (2) deploying a …
|
CWE-94
Code Injection
|
CVE-2014-6261
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277235
|
- |
|
zenoss
|
zenoss_core
|
Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, which allows remote attackers to execute arbitrary commands or cause a denial of service (paging outag…
|
CWE-77
Command Injection
|
CVE-2014-6260
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277236
|
- |
|
zenoss
|
zenoss_core
|
Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML docu…
|
CWE-399
Resource Management Errors
|
CVE-2014-6259
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277237
|
- |
|
zenoss
|
zenoss_core
|
An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consumption) by triggering an arbitrary regular-expression match attempt, aka ZEN-154…
|
CWE-399
Resource Management Errors
|
CVE-2014-6258
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277238
|
- |
|
zenoss
|
zenoss_core
|
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-6257
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277239
|
- |
|
zenoss
|
zenoss_core
|
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public (1) read or (2) execute access via a move action, aka ZEN-15386.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-6256
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277240
|
- |
|
zenoss
|
zenoss_core
|
Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from paramet…
|
NVD-CWE-Other
|
CVE-2014-6255
|
2024-11-21 11:14 |
2014-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|