258321
|
- |
|
aas9
|
zerocms
|
Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the article_id parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4195
|
2014-07-9 10:29 |
2014-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258322
|
- |
|
avg
|
safeguard secure_search_toolbar
|
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access c…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2956
|
2014-07-9 03:49 |
2014-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258323
|
- |
|
avg
|
safeguard secure_search_toolbar
|
Per: http://www.kb.cert.org/vuls/id/960193
"This issue is addressed in AVG Secure Search toolbar version 18.1.7.598 and AVG Safeguard 18.1.7.644"
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2956
|
2014-07-9 03:49 |
2014-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258324
|
- |
|
easy_banners_plugin_project
|
easy_banners
|
Cross-site scripting (XSS) vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4723
|
2014-07-9 00:27 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258325
|
- |
|
foxitsoftware
|
foxit_pdf_sdk_dll
|
Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4646
|
2014-07-9 00:12 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258326
|
- |
|
netgear
|
gs108pe_firmware gs108pe
|
NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify mem…
|
CWE-255
Credentials Management
|
CVE-2014-2969
|
2014-07-8 04:14 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258327
|
- |
|
autodesk
|
vred
|
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
|
CWE-78
OS Command
|
CVE-2014-2967
|
2014-07-8 04:10 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258328
|
- |
|
email\
|
\
|
Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking i…
|
NVD-CWE-Other
|
CVE-2014-4720
|
2014-07-7 23:52 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258329
|
- |
|
email\
|
\
|
<a href="http://cwe.mitre.org/data/definitions/185.html" target="_blank">CWE-185: CWE-185: Incorrect Regular Expression</a>
|
NVD-CWE-Other
|
CVE-2014-4720
|
2014-07-7 23:52 |
2014-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258330
|
- |
|
kryo
|
iodine
|
(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering.
|
CWE-287
Improper Authentication
|
CVE-2014-4168
|
2014-07-7 23:49 |
2014-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|