|
285151
|
- |
|
d-link
|
dcs-2103_hd_cube_network_camera_firmware
|
Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
|
CWE-22
Path Traversal
|
CVE-2014-9234
|
2024-11-21 11:20 |
2014-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285152
|
- |
|
debian
graphviz
|
debian_linux
graphviz
|
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not …
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2014-9157
|
2024-11-21 11:20 |
2014-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285153
|
- |
|
huawei
|
honor_cube_wireless_router_ws860s_firewall
honor_cube_wireless_router_ws860s
|
Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable exte…
|
NVD-CWE-Other
|
CVE-2014-9134
|
2024-11-21 11:20 |
2014-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285154
|
- |
|
icecast
|
icecast
|
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
|
CWE-200
Information Exposure
|
CVE-2014-9018
|
2024-11-21 11:20 |
2014-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285155
|
- |
|
fedoraproject
openvas
opensuse
|
fedora
openvas_manager
opensuse
|
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.
|
CWE-89
SQL Injection
|
CVE-2014-9220
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285156
|
- |
|
thomsonreuters
|
fixed_assets_cs
|
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-9141
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285157
|
- |
|
zte
|
zxdsl
|
ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi.
|
CWE-287
Improper Authentication
|
CVE-2014-9184
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285158
|
- |
|
zte
|
zxdsl
|
ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges.
|
CWE-255
Credentials Management
|
CVE-2014-9183
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285159
|
- |
|
anchorcms
|
anchor_cms
|
models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header.
|
CWE-79
Cross-site Scripting
|
CVE-2014-9182
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285160
|
- |
|
plex
|
media_server
|
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote auth…
|
CWE-22
Path Traversal
|
CVE-2014-9181
|
2024-11-21 11:20 |
2014-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
