2014

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to caus

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which a

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Clien

EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certi

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows a

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers

The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrator

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users

A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain pri

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and

Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arb

Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inje

SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitra

Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attacke

Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Red

Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers

Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7

Cross-site request forgery (CSRF) vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers

Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote atta

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, w

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which al

Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers

plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compr

plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote att

nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of comp

IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authentic

The User Attribute implementation in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.2, an

SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote att

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access v

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and

The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or

SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attac

The SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote attackers to cause a denial

Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows rem

Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensi

An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors.

Directory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary files via unspecified

Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown ve

Unspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain sensitive port information via

Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, p

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential i

Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database passwor

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL comman

Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redir

Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script

Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to