|
283481
|
- |
|
efssoft
|
easy_file_sharing_web_server
|
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-3791
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283482
|
- |
|
call-cc
|
chicken
|
Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corr…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-3776
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283483
|
- |
|
construtiva
|
cis_manager_cms
|
SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp.
|
CWE-89
SQL Injection
|
CVE-2014-3749
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283484
|
- |
|
zenoss
|
zenoss
|
Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…
|
CWE-20
Improper Input Validation
|
CVE-2014-3739
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283485
|
- |
|
zenoss
|
zenoss
|
Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a device.
|
CWE-79
Cross-site Scripting
|
CVE-2014-3738
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283486
|
- |
|
juniper
|
junos_space junos_space_ja1500_appliance junos_space_ja2500_appliance
|
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2014-3412
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283487
|
- |
|
microfocus
|
sentinel sentinel_agent_manager
|
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently ex…
|
CWE-22
Path Traversal
|
CVE-2014-3460
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283488
|
- |
|
realnetworks
|
realplayer
|
The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and app…
|
CWE-94
Code Injection
|
CVE-2014-3444
|
2024-11-21 11:08 |
2014-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283489
|
- |
|
sap
|
netweaver
|
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2014-3787
|
2024-11-21 11:08 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283490
|
- |
|
intel
|
indeo_video
|
ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-3735
|
2024-11-21 11:08 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|