|
282551
|
8.1 |
HIGH
Network
|
wps huawei
|
wps_office p2-6011_firmware
|
cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, …
|
CWE-20
Improper Input Validation
|
CVE-2014-2271
|
2024-11-21 11:05 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282552
|
9.8 |
CRITICAL
Network
|
3ds
|
catia
|
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
|
CWE-787
Out-of-bounds Write
|
CVE-2014-2072
|
2024-11-21 11:05 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282553
|
9.8 |
CRITICAL
Network
|
contao
|
contao_cms
|
Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2014-1860
|
2024-11-21 11:05 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282554
|
7.8 |
HIGH
Local
|
suphp
|
suphp
|
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution
|
CWE-287
Improper Authentication
|
CVE-2014-1867
|
2024-11-21 11:05 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282555
|
6.1 |
MEDIUM
Network
|
posh_project
|
posh
|
Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) error parameter t…
|
CWE-79
Cross-site Scripting
|
CVE-2014-2214
|
2024-11-21 11:05 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282556
|
6.1 |
MEDIUM
Network
|
posh_project
|
posh
|
Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in th…
|
CWE-601
Open Redirect
|
CVE-2014-2213
|
2024-11-21 11:05 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282557
|
5.5 |
MEDIUM
Local
|
rply_project
|
rply
|
python-rply before 0.7.4 insecurely creates temporary files.
|
CWE-59
Link Following
|
CVE-2014-1938
|
2024-11-21 11:05 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282558
|
7.5 |
HIGH
Network
|
gamera_project
|
gamera
|
Gamera before 3.4.1 insecurely creates temporary files.
|
CWE-20
Improper Input Validation
|
CVE-2014-1937
|
2024-11-21 11:05 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282559
|
7.5 |
HIGH
Network
|
rc_project debian
|
rc debian_linux
|
rc before 1.7.1-5 insecurely creates temporary files.
|
CWE-20
Improper Input Validation
|
CVE-2014-1936
|
2024-11-21 11:05 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282560
|
5.3 |
MEDIUM
Network
|
9base_project debian
|
9base debian_linux
|
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.
|
CWE-20
Improper Input Validation
|
CVE-2014-1935
|
2024-11-21 11:05 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|