|
282831
|
- |
|
ibm
|
cognos_mobile
|
IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logo…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-4810
|
2024-11-21 11:10 |
2014-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282832
|
- |
|
ibm
|
websphere_commerce
|
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an exter…
|
NVD-CWE-Other
|
CVE-2014-4769
|
2024-11-21 11:10 |
2014-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282833
|
- |
|
ibm
|
tririga_application_platform
|
Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 …
|
CWE-352
Origin Validation Error
|
CVE-2014-4839
|
2024-11-21 11:10 |
2014-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282834
|
- |
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 provides different web-server error codes depend…
|
CWE-200
Information Exposure
|
CVE-2014-4821
|
2024-11-21 11:10 |
2014-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282835
|
- |
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 does not properly detect recursion during entity…
|
CWE-399
Resource Management Errors
|
CVE-2014-4814
|
2024-11-21 11:10 |
2014-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282836
|
- |
|
ibm
|
websphere_portal
|
Unspecified vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authe…
|
NVD-CWE-noinfo
|
CVE-2014-4808
|
2024-11-21 11:10 |
2014-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282837
|
- |
|
wp-football_project
|
wp-football
|
Multiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to (…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4586
|
2024-11-21 11:10 |
2014-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282838
|
- |
|
ibm
|
security_appscan_source
|
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to thi…
|
CWE-200
Information Exposure
|
CVE-2014-4812
|
2024-11-21 11:10 |
2014-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282839
|
- |
|
avamar_virtual_edition
|
7.0.2-43
7.0
6.0
6.0.402
|
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-4624
|
2024-11-21 11:10 |
2014-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
282840
|
- |
|
emc
|
avamar
|
EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, wh…
|
CWE-310
Cryptographic Issues
|
CVE-2014-4623
|
2024-11-21 11:10 |
2014-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
