2014

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an

Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated us

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of

The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before

Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0

Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code vi

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “CreateProcess.” This method contains validation to ensure

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter a

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buff

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buf

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control.

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer

To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argume

By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buff

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll i

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 20

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Clien

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers

The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrator

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands

SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitra

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, w

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which al

Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers

plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compr

plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote att

nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of comp

SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote att

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access v

The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or

SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attac

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows rem

Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensi

An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors.

Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown ve

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL comman

Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, p

The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5),

Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 be

Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 be

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in

Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allo

Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service

Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 a

Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.184