|
279131
|
- |
|
gnupg
debian
opensuse
|
gnupg
debian_linux
opensuse
|
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed …
|
CWE-20
Improper Input Validation
|
CVE-2014-4617
|
2024-11-21 11:10 |
2014-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279132
|
- |
|
phpmyadmin
|
phpmyadmin
|
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ta…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4349
|
2024-11-21 11:10 |
2014-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279133
|
- |
|
phpmyadmin
|
phpmyadmin
|
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) tab…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4348
|
2024-11-21 11:10 |
2014-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279134
|
- |
|
linux
canonical
|
linux_kernel
ubuntu_linux
|
arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of se…
|
CWE-189
Numeric Errors
|
CVE-2014-4508
|
2024-11-21 11:10 |
2014-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279135
|
- |
|
netiq
|
identity_manager
|
The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by leveraging eDirecto…
|
NVD-CWE-Other
|
CVE-2014-4509
|
2024-11-21 11:10 |
2014-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279136
|
- |
|
theforeman
|
foreman
|
Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fe…
|
CWE-22
Path Traversal
|
CVE-2014-4507
|
2024-11-21 11:10 |
2014-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279137
|
- |
|
louis_jimenez
|
custom_meta
|
Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer custom meta sett…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4506
|
2024-11-21 11:10 |
2014-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279138
|
- |
|
roger_padilla_camacho
|
easy_breadcrumb
|
Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4505
|
2024-11-21 11:10 |
2014-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279139
|
7.5 |
HIGH
Network
|
zte
|
zxv10_w300_firmware
|
ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direc…
|
CWE-200
Information Exposure
|
CVE-2014-4019
|
2024-11-21 11:09 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279140
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a policy that does not exist, which causes the loaded policy chain to no be discard…
|
CWE-287
Improper Authentication
|
CVE-2014-3879
|
2024-11-21 11:09 |
2020-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
