|
278661
|
- |
|
cyberoam
|
cyberoam_os
|
Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-5501
|
2024-11-21 11:12 |
2014-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278662
|
- |
|
yorba
|
geary
|
Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted cer…
|
CWE-310
Cryptographic Issues
|
CVE-2014-5444
|
2024-11-21 11:12 |
2014-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278663
|
- |
|
php
oracle
opensuse
|
php
solaris
evergreen
opensuse
|
The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, …
|
CWE-59
Link Following
|
CVE-2014-5459
|
2024-11-21 11:12 |
2014-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278664
|
- |
|
geniuscloud
|
smart_browser
|
The Smart Browser (aka smartbrowser.geniuscloud) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain …
|
CWE-310
Cryptographic Issues
|
CVE-2014-5809
|
2024-11-21 11:12 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278665
|
- |
|
mr384
|
mzone_login
|
The Mzone Login (aka com.mr384.MzoneLogin) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…
|
CWE-310
Cryptographic Issues
|
CVE-2014-5665
|
2024-11-21 11:12 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278666
|
- |
|
schneider-electric
aveva
|
scada_expert_clearscada
clearscada
|
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryp…
|
CWE-310
Cryptographic Issues
|
CVE-2014-5413
|
2024-11-21 11:12 |
2014-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278667
|
- |
|
schneider-electric
aveva
|
scada_expert_clearscada
clearscada
|
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-5412
|
2024-11-21 11:12 |
2014-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278668
|
- |
|
fatfreecrm
|
fat_free_crm
|
Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) …
|
CWE-79
Cross-site Scripting
|
CVE-2014-5441
|
2024-11-21 11:12 |
2014-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278669
|
- |
|
mpexsolutions
|
mx-smartimer
|
SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password para…
|
CWE-89
SQL Injection
|
CVE-2014-5440
|
2024-11-21 11:12 |
2014-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278670
|
- |
|
tribulant
|
tibulant_slideshow_gallery
|
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then a…
|
CWE-20
Improper Input Validation
|
CVE-2014-5460
|
2024-11-21 11:12 |
2014-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
