|
278021
|
- |
|
linux
suse
redhat
canonical
|
linux_kernel
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_real_time_extension
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_eus
ub…
|
The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dere…
|
CWE-476
NULL Pointer Dereference
|
CVE-2014-5077
|
2024-11-21 11:11 |
2014-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278022
|
- |
|
linux
redhat
|
linux_kernel
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_eus
|
The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a s…
|
CWE-59
Link Following
|
CVE-2014-5045
|
2024-11-21 11:11 |
2014-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278023
|
- |
|
sap
|
fi_manager_self-service
|
SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2014-5176
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278024
|
- |
|
sap
|
solution_manager
|
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
|
CWE-287
Improper Authentication
|
CVE-2014-5175
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278025
|
- |
|
sap
|
netweaver_business_warehouse
|
The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive info…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-5174
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278026
|
- |
|
sap
|
hana_extended_application_services
|
SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-5173
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278027
|
- |
|
sap
|
hana
|
Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2014-5172
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278028
|
- |
|
sap
|
hana_extended_application_services
|
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and othe…
|
CWE-310
Cryptographic Issues
|
CVE-2014-5171
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278029
|
- |
|
torproject
|
tor
|
Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirm…
|
NVD-CWE-Other
|
CVE-2014-5117
|
2024-11-21 11:11 |
2014-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278030
|
- |
|
cairographics
|
cairo
|
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
|
NVD-CWE-Other
|
CVE-2014-5116
|
2024-11-21 11:11 |
2014-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
