|
281201
|
7.5 |
HIGH
Network
|
zenoss
debian
|
zenoss_core
debian_linux
|
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of s…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2014-6262
|
2024-11-21 11:14 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281202
|
7.1 |
HIGH
Network
|
juniper
|
junos
|
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Juniper Junos OS 12.1X44 before …
|
CWE-79
Cross-site Scripting
|
CVE-2014-6447
|
2024-11-21 11:14 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281203
|
6.1 |
MEDIUM
Network
|
watchguard
|
fireware_xtm
|
A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script.
|
CWE-79
Cross-site Scripting
|
CVE-2014-6413
|
2024-11-21 11:14 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281204
|
7.8 |
HIGH
Local
|
juniper
|
junos
|
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.
|
CWE-269
Improper Privilege Management
|
CVE-2014-6448
|
2024-11-21 11:14 |
2020-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281205
|
5.9 |
MEDIUM
Network
|
fusionforge
debian
|
fusionforge
debian_linux
|
FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it …
|
CWE-200
Information Exposure
|
CVE-2014-6275
|
2024-11-21 11:14 |
2020-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281206
|
6.1 |
MEDIUM
Network
|
livefyre
|
livecomments
|
Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture.
|
CWE-79
Cross-site Scripting
|
CVE-2014-6420
|
2024-11-21 11:14 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281207
|
9.8 |
CRITICAL
Network
|
vanderbilt
debian
|
adaptive_communication_environment
debian_linux
|
generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges.
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2014-6311
|
2024-11-21 11:14 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281208
|
9.8 |
CRITICAL
Network
|
call-cc
debian
|
chicken
debian_linux
|
Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function.
|
CWE-120
Classic Buffer Overflow
|
CVE-2014-6310
|
2024-11-21 11:14 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281209
|
8.1 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2014-6412
|
2024-11-21 11:14 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281210
|
8.8 |
HIGH
Network
|
tryton
|
tryton
|
The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary …
|
CWE-77
Command Injection
|
CVE-2014-6633
|
2024-11-21 11:14 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
