The Task Scheduler in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonatio...

CWE-2542015

CVE-2015-0077

LOW

CVSS:2.1(Low)

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows...

CWE-2002015

CVE-2015-0010

LOW

CVSS:1.9(Low)

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and...

CWE-3102015

CVE-2015-0009

LOW

CVSS:3.3(Low)

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Window...

CWE-2542015

CVE-2015-0001

LOW

CVSS:1.9(Low)

The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light p...

CWE-2642015

CVE-2014-9740

LOW

CVSS:2.1(Low)

Cross-site scripting (XSS) vulnerability in the Rules Link module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer rules links" permission to inject arbitrary w...

CWE-792014

CVE-2014-9739

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML v...

CWE-792014

CVE-2014-9731

LOW

CVSS:2.1(Low)

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local u...

CWE-172014

CVE-2014-9683

LOW

CVSS:3.6(Low)

Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buff...

CWE-1892014

CVE-2014-9644

LOW

CVSS:2.1(Low)

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the ...

CWE-2692014

CVE-2014-9585

LOW

CVSS:2.1(Low)

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR p...

NVD-CWE-Other2014

CVE-2014-9584

LOW

CVSS:2.1(Low)

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local...

CWE-202014

CVE-2014-9568

LOW

CVSS:2.1(Low)

puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.

CWE-2002014

CVE-2014-9507

LOW

CVSS:2.6(Low)

MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks by setting the content ...

CWE-792014

CVE-2014-9506

LOW

CVSS:3.5(Low)

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain se...

CWE-2002014

CVE-2014-9505

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to injec...

CWE-792014

CVE-2014-9501

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...

CWE-792014

CVE-2014-9499

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via...

CWE-792014

CVE-2014-9498

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new co...

CWE-792014

CVE-2014-9496

LOW

CVSS:2.1(Low)

The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.

NVD-CWE-Other2014

CVE-2014-9478

LOW

CVSS:2.6(Low)

Cross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML v...

CWE-792014

CVE-2014-9475

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbit...

CWE-792014

CVE-2014-9461

LOW

CVSS:3.5(Low)

Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the member_d...

CWE-222014

CVE-2014-9434

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via t...

CWE-792014