|
281571
|
9.8 |
CRITICAL
Network
|
unitedplanet
|
intrexx
|
Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attacke…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2014-2025
|
2024-11-21 11:05 |
2020-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281572
|
9.8 |
CRITICAL
Network
|
koha
|
koha
|
SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14…
|
CWE-89
SQL Injection
|
CVE-2014-1925
|
2024-11-21 11:05 |
2020-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281573
|
9.8 |
CRITICAL
Network
|
koha
|
koha
|
The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authenticat…
|
CWE-89
SQL Injection
|
CVE-2014-1924
|
2024-11-21 11:05 |
2020-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281574
|
7.5 |
HIGH
Network
|
koha
|
koha
|
Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3…
|
CWE-22
Path Traversal
|
CVE-2014-1923
|
2024-11-21 11:05 |
2020-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281575
|
7.5 |
HIGH
Network
|
koha
|
koha
|
Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote attackers to read arbitrary fil…
|
CWE-22
Path Traversal
|
CVE-2014-1922
|
2024-11-21 11:05 |
2020-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281576
|
6.5 |
MEDIUM
Network
|
owncloud
|
owncloud
|
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords…
|
CWE-352
Origin Validation Error
|
CVE-2014-2050
|
2024-11-21 11:05 |
2020-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281577
|
8.1 |
HIGH
Network
|
wps huawei
|
wps_office p2-6011_firmware
|
cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, …
|
CWE-20
Improper Input Validation
|
CVE-2014-2271
|
2024-11-21 11:05 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281578
|
9.8 |
CRITICAL
Network
|
3ds
|
catia
|
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
|
CWE-787
Out-of-bounds Write
|
CVE-2014-2072
|
2024-11-21 11:05 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281579
|
9.8 |
CRITICAL
Network
|
contao
|
contao_cms
|
Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2014-1860
|
2024-11-21 11:05 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281580
|
7.8 |
HIGH
Local
|
suphp
|
suphp
|
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution
|
CWE-287
Improper Authentication
|
CVE-2014-1867
|
2024-11-21 11:05 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|