|
280221
|
- |
|
cogentdatahub
|
cogent_datahub
|
Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
|
CWE-255
Credentials Management
|
CVE-2014-2354
|
2024-11-21 11:06 |
2014-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280222
|
- |
|
cogentdatahub
|
cogent_datahub
|
Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2014-2353
|
2024-11-21 11:06 |
2014-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280223
|
- |
|
cogentdatahub
|
cogent_datahub
|
Directory traversal vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to read arbitrary files of unspecified types, or cause a web-server denial of service, via a crafted pathname.
|
CWE-22
Path Traversal
|
CVE-2014-2352
|
2024-11-21 11:06 |
2014-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280224
|
- |
|
trianglemicroworks
|
scada_data_gateway
|
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.
|
CWE-20
Improper Input Validation
|
CVE-2014-2343
|
2024-11-21 11:06 |
2014-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280225
|
- |
|
trianglemicroworks
|
scada_data_gateway
|
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.
|
CWE-20
Improper Input Validation
|
CVE-2014-2342
|
2024-11-21 11:06 |
2014-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280226
|
- |
|
izarc
|
izarc
|
IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote…
|
CWE-94
Code Injection
|
CVE-2014-2720
|
2024-11-21 11:06 |
2014-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280227
|
- |
|
hp
|
operations_manager_i
|
Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.
|
NVD-CWE-noinfo
|
CVE-2014-2607
|
2024-11-21 11:06 |
2014-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280228
|
- |
|
emc
|
documentum_d2
|
EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions and execute arbitrary…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2504
|
2024-11-21 11:06 |
2014-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280229
|
- |
|
emerson
|
deltav
|
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrat…
|
CWE-255
Credentials Management
|
CVE-2014-2350
|
2024-11-21 11:06 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280230
|
- |
|
emerson
|
deltav
|
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2349
|
2024-11-21 11:06 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|