CVE-2014-4669HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity re…
3.5 FAIBLE
CVE-2014-4649SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via…
6.5 MOYENNE
CVE-2014-4648Les installations de la galerie photo Piwigo antérieures à la version 2.6.3 sont affectées par une faille de sécurité critique. Un attaquant distant peut compromettre totalement le…
10.0 ÉLEVÉE
CVE-2014-2613HP Release Control (versions 9.x antérieures à 9.13 p3 et 9.2x antérieures à RC 9.21.0003 p1) sur Windows et Linux est affecté par une faille d'élévation de privilèges. Un attaquan…
9.0 ÉLEVÉE
CVE-2014-2612Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated u…
4.0 MOYENNE
CVE-2014-3881Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.
6.8 MOYENNE
CVE-2014-2006Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2014-0891IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information by leveraging i…
5.0 MOYENNE
CVE-2013-6311SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
6.5 MOYENNE
CVE-2013-6310Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
3.5 FAIBLE
CVE-2013-6309IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecifi…
6.0 MOYENNE
CVE-2013-6308IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.
4.9 MOYENNE
CVE-2014-3011IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors.
5.0 MOYENNE
CVE-2011-1381Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors.
6.4 MOYENNE
CVE-2014-3433Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML vi…
4.3 MOYENNE
CVE-2014-3432Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML vi…
4.3 MOYENNE
CVE-2014-4645Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname.
4.3 MOYENNE
CVE-2014-4644Les installations de Cacti utilisant le plugin Superlinks (versions 1.4 à 2) sont vulnérables à une faille d'injection SQL dans le fichier `superlinks.php`. Un attaquant non authen…
7.5 ÉLEVÉE
CVE-2014-4643Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbi…
5.0 MOYENNE
CVE-2014-4030Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for reques…
6.8 MOYENNE
CVE-2014-4617The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via ma…
5.0 MOYENNE
CVE-2014-4349Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HT…
3.5 FAIBLE
CVE-2014-4348Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) datab…
3.5 FAIBLE
CVE-2014-3882Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
6.8 MOYENNE
CVE-2014-3299Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745.
6.8 MOYENNE
CVE-2014-2005Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, whic…
6.8 MOYENNE
CVE-2014-0206Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a la…
2.1 FAIBLE
CVE-2014-3493The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory cor…
2.7 FAIBLE
CVE-2014-0244The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and …
3.3 FAIBLE
CVE-2014-4508arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to c…
4.7 MOYENNE
CVE-2014-4171mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial o…
4.7 MOYENNE
CVE-2014-4157arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local u…
4.6 MOYENNE
CVE-2014-4027The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local user…
2.3 FAIBLE
CVE-2014-4014The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended…
6.2 MOYENNE
CVE-2014-1739The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to …
2.1 FAIBLE
CVE-2014-0203The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows l…
5.5 MOYENNE
CVE-2014-4338cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf…
4.0 MOYENNE
CVE-2014-4337The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and …
4.3 MOYENNE
CVE-2014-4336The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metachara…
5.8 MOYENNE
CVE-2014-4509The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by …
4.6 MOYENNE
CVE-2014-3883Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
6.8 MOYENNE
CVE-2014-3431Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to by…
4.3 MOYENNE
CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafte…
4.0 MOYENNE
CVE-2014-3073IBM Security Access Manager pour Mobile (8.0) et Web (7.0, 8.0) sont affectés par une faille qui permet à un attaquant distant d'exécuter du code arbitraire sur le serveur. Comme l…
10.0 ÉLEVÉE
CVE-2014-3053IBM Security Access Manager (pour Mobile 8.0 et Web 7.0/8.0) est affecté par une faille dans son interface de gestion locale. Un attaquant non authentifié disposant d'un accès au r…
8.0 ÉLEVÉE
CVE-2014-3052The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the in…
3.3 FAIBLE
CVE-2013-6737IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows…
4.0 MOYENNE
CVE-2012-5106FreeFloat FTP Server 1.0 est sensible à un dépassement de tampon lors du traitement de commandes PUT spécifiquement conçues. Un attaquant distant peut exploiter cette vulnérabilité…
10.0 ÉLEVÉE
CVE-2014-4507Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst p…
6.4 MOYENNE
CVE-2014-4506Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administ…
2.1 FAIBLE