|
258761
|
- |
|
igniterealtime
|
openfire
|
nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-2741
|
2014-05-5 14:34 |
2014-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258762
|
- |
|
misli
|
misli.com_app
|
The Misli.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cer…
|
CWE-310
Cryptographic Issues
|
CVE-2014-2992
|
2014-05-5 14:34 |
2014-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258763
|
- |
|
apple
|
mac_os_x
|
curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9.x before 10.9.2, does not verify that the server hostname matches a domain name…
|
CWE-310
Cryptographic Issues
|
CVE-2014-1263
|
2014-05-5 14:32 |
2014-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258764
|
- |
|
toshibacommerce
|
4690_point_of_sale_operating_system
|
The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dep…
|
CWE-310
Cryptographic Issues
|
CVE-2014-0361
|
2014-05-5 14:31 |
2014-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258765
|
- |
|
adcisolutions
|
node_view_permissions
|
The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by rea…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5965
|
2014-05-5 14:28 |
2013-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258766
|
- |
|
apache
|
struts
|
Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4310
|
2014-05-5 14:25 |
2013-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258767
|
- |
|
matrix42
|
service_store
|
Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML v…
|
CWE-79
Cross-site Scripting
|
CVE-2013-2504
|
2014-05-5 14:22 |
2013-12-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258768
|
- |
|
openstack
|
keystone
|
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by readin…
|
CWE-200
Information Exposure
|
CVE-2013-2006
|
2014-05-5 14:21 |
2013-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258769
|
- |
|
openstack
|
compute
folsom
grizzly
havana
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2030
|
2014-05-5 14:21 |
2013-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258770
|
- |
|
emc
|
alphastor
|
Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-0930
|
2014-05-5 14:19 |
2013-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
