Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-28 CVE-2015-1198 Path Traversal vulnerability in Linux-Ha HA 0.999P+Dfsg5
Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.
network
low complexity
linux-ha CWE-22
7.5
2017-08-28 CVE-2015-0974 Untrusted Search Path vulnerability in Mobilis Mobiconnect 1.0.0B03
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mms_dll_r.dll or mediaplayerdll.dll.
local
low complexity
mobilis CWE-426
7.8
2017-08-28 CVE-2015-0928 NULL Pointer Dereference vulnerability in Oisf Libhtp 0.5.15
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
network
low complexity
oisf CWE-476
7.5
2017-08-28 CVE-2015-0114 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM I Access for Windows 5.4/6.1/7.1
Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
local
low complexity
ibm CWE-119
7.8
2017-08-28 CVE-2014-9483 Information Exposure vulnerability in GNU Emacs 24.4
Emacs 24.4 allows remote attackers to bypass security restrictions.
network
low complexity
gnu CWE-200
7.5
2017-08-28 CVE-2014-9312 Unrestricted Upload of File with Dangerous Type vulnerability in 10Web Photo Gallery 1.2.5
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
network
low complexity
10web CWE-434
8.8
2017-08-28 CVE-2014-8900 Cross-Site Request Forgery (CSRF) vulnerability in IBM Urbancode Deploy
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier.
network
low complexity
ibm CWE-352
8.8
2017-08-28 CVE-2014-8871 Path Traversal vulnerability in SAP Hybris
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.
network
low complexity
sap CWE-22
7.5
2017-08-28 CVE-2014-5302 Path Traversal vulnerability in Manageengine products
Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code.
network
low complexity
manageengine CWE-22
8.8
2017-08-28 CVE-2014-5301 Path Traversal vulnerability in Manageengine products
Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.
network
low complexity
manageengine CWE-22
8.8