|
258361
|
- |
|
ibm
|
openpages_grc_platform
|
Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors.
|
NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1381
|
2014-06-30 23:02 |
2014-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258362
|
- |
|
horizon_quick_content_management_system_project
|
horizon_quick_content_management_system
|
Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in t…
|
CWE-22
Path Traversal
|
CVE-2013-7138
|
2014-06-28 02:08 |
2014-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258363
|
- |
|
tech-banker
|
contact_bank
|
Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form lay…
|
CWE-79
Cross-site Scripting
|
CVE-2014-3841
|
2014-06-28 01:56 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258364
|
- |
|
imember360
|
imember360
|
Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) decrypt or…
|
CWE-79
Cross-site Scripting
|
CVE-2014-3842
|
2014-06-28 01:56 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258365
|
- |
|
zemanta
|
search_everything
|
Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vect…
|
CWE-352
Origin Validation Error
|
CVE-2014-3843
|
2014-06-28 01:53 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258366
|
- |
|
tinymce
|
color_picker
|
The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these det…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-3844
|
2014-06-28 01:52 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258367
|
- |
|
tinymce
|
color_picker
|
Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that…
|
CWE-352
Origin Validation Error
|
CVE-2014-3845
|
2014-06-28 01:51 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258368
|
- |
|
bizagi
|
business_process_management_suite
|
SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.
|
CWE-89
SQL Injection
|
CVE-2014-2948
|
2014-06-28 01:50 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258369
|
- |
|
cogentdatahub
|
cogent_datahub
|
Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary code via a negative value in the Content-Length field…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-3788
|
2014-06-28 01:48 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258370
|
- |
|
coscms
|
coscms
|
The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file.
|
CWE-78
OS Command
|
CVE-2013-1668
|
2014-06-28 01:35 |
2014-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
