CNA 2014

VulDB is an officially certified CVE Numbering Authority (CNA) by MITRE and Authorized Data Publisher (ADP) by NIST NVD. We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. CVE is an international program to discover vulnerabilities which are then assigned and published to the CVE list. Partners coordinate such CVE entries to communicate consistent descriptions. Information technology and cybersecurity professionals all around the world use CVE records to ensure they are discussing the same issues, and to coordinate their efforts to prioritize and address these properly.

供应商

Not Defined	46
BestWebSoft	5
yanheven	2
saxman	2
vicamo	2

产品

FFmpeg	24
Gimmie Plugin	3
yanheven console	2
saxman maps-js-icoads	2
vicamo NetworkManager	2

修正

Official Fix	108
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	0

易受攻击性

High	0
Functional	0
Proof-of-Concept	1
Unproven	24
Not Defined	84

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	46
Network	63

身份验证

Not Defined	0
High	3
Low	75
None	31

用户交互

Not Defined	0
Required	24
None	85

VulDB

≤1	0
≤2	0
≤3	5
≤4	23
≤5	10
≤6	59
≤7	6
≤8	5
≤9	1
≤10	0

利用零日

<1k	8
<2k	77
<5k	24
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

ID	漏洞	范围	负责	已创建	已更新	CVE	CNA
259628	namithjawahar Wp-Insert 跨网站脚本	VulDB	VulDB	2024-04-07	2024-04-07	CVE-2014-125111	已接受
258781	wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback 跨网站脚本	VulDB	VulDB	2024-03-30	2024-05-08	CVE-2014-125110	已接受
248956	BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render 跨网站脚本	VulDB	VulDB	2023-12-24	2024-01-18	CVE-2014-125109	已接受
248849	w3c online-spellchecker-py spellchecker 跨网站脚本	VulDB	VulDB	2023-12-22	2024-01-18	CVE-2014-125108	已接受
248270	Corveda PHPSandbox String 权限升级	VulDB	VulDB	2023-12-17	2024-01-12	CVE-2014-125107	已接受
230659	Broken Link Checker Plugin Settings Page core.php options_page 跨网站脚本	VulDB	VulDB	2023-06-03	2023-06-30	CVE-2014-125105	已接受
230263	VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax 权限升级	VulDB	VulDB	2023-05-30	2023-06-24	CVE-2014-125104	已接受
230155	BestWebSoft Twitter Plugin twitter.php twttr_settings_page 跨网站脚本	VulDB	VulDB	2023-05-29	2023-06-21	CVE-2014-125103	已接受
230113	Bestwebsoft Relevant Plugin Thumbnail 信息公开	VulDB	VulDB	2023-05-28	2023-06-21	CVE-2014-125102	已接受
230085	Portfolio Gallery Plugin SQL注入	VulDB	VulDB	2023-05-27	2023-06-21	CVE-2014-125101	已接受
227764	BestWebSoft Job Board Plugin 跨网站脚本	VulDB	VulDB	2023-04-30	2023-05-24	CVE-2014-125100	已接受
226309	I Recommend This Plugin dot-irecommendthis.php SQL注入	VulDB	VulDB	2023-04-18	2023-05-09	CVE-2014-125099	已接受
225356	Dart http_server Directory Listing virtual_directory.dart VirtualDirectory 跨网站脚本	VulDB	VulDB	2023-04-08	2023-04-26	CVE-2014-125098	已接受
225354	BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page 跨网站脚本	VulDB	VulDB	2023-04-08	2023-04-26	CVE-2014-125097	已接受
225349	Fancy Gallery Plugin Options Page class.options.php 跨网站脚本	VulDB	VulDB	2023-04-08	2023-04-26	CVE-2014-125096	已接受
225320	BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render 跨网站脚本	VulDB	VulDB	2023-04-07	2023-04-26	CVE-2014-125095	已接受
225001	phpMiniAdmin 跨网站脚本	VulDB	VulDB	2023-04-05	2023-04-22	CVE-2014-125094	已接受
222610	Ad Blocking Detector Plugin ad-blocking-detector.php 信息公开	VulDB	VulDB	2023-03-08	2023-04-01	CVE-2014-125093	已接受
222323	MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px 跨网站脚本	VulDB	VulDB	2023-03-04	2023-03-31	CVE-2014-125092	已接受
222268	codepeople cp-polls Plugin cp-admin-int-message-list.inc.php SQL注入	VulDB	VulDB	2023-03-03	2023-03-31	CVE-2014-125091	已接受
222262	Media Downloader Plugin getfile.php dl_file_resumable 跨网站脚本	VulDB	VulDB	2023-03-03	2023-03-31	CVE-2014-125090	已接受
221497	cention-chatserver InternalChatProtocol.fe _formatBody 跨网站脚本	VulDB	VulDB	2023-02-19	2023-03-23	CVE-2014-125089	已接受
221488	qt-users-jp silk header.qml 跨网站脚本	VulDB	VulDB	2023-02-18	2023-03-23	CVE-2014-125088	已接受
221480	java-xmlbuilder XML External Entity	VulDB	VulDB	2023-02-18	2023-03-23	CVE-2014-125087	已接受
220207	Gimmie Plugin trigger_login.php SQL注入	VulDB	VulDB	2023-02-04	2023-03-05	CVE-2014-125086	已接受
220206	Gimmie Plugin trigger_ratethread.php SQL注入	VulDB	VulDB	2023-02-04	2023-03-05	CVE-2014-125085	已接受
220205	Gimmie Plugin trigger_referral.php SQL注入	VulDB	VulDB	2023-02-04	2023-03-05	CVE-2014-125084	已接受
218911	Anant Labs google-enterprise-connector-dctm SQL注入	VulDB	VulDB	2023-01-18	2023-02-15	CVE-2014-125083	已接受
218464	nivit redports model.py SQL注入	VulDB	VulDB	2023-01-17	2023-02-09	CVE-2014-125082	已接受
218459	risheesh debutsav SQL注入	VulDB	VulDB	2023-01-17	2023-02-09	CVE-2014-125081	已接受
218398	frontaccounting faplanet 目录遍历	VulDB	VulDB	2023-01-15	2023-02-07	CVE-2014-125080	已接受
218356	agy pontifex.http Http.coffee SQL注入	VulDB	VulDB	2023-01-14	2023-02-07	CVE-2014-125079	已接受
218354	yanheven console horizon.instances.js 跨网站脚本	VulDB	VulDB	2023-01-14	2023-02-07	CVE-2014-125078	已接受
218351	pointhi searx_stats cron.php SQL注入	VulDB	VulDB	2023-01-14	2023-02-07	CVE-2014-125077	已接受
218022	NoxxieNl Criminals roulette.php SQL注入	VulDB	VulDB	2023-01-11	2023-02-04	CVE-2014-125076	已接受
218021	gmail-servlet Model.java search SQL注入	VulDB	VulDB	2023-01-11	2023-02-04	CVE-2014-125075	已接受
218005	Nayshlok Voyager DatabaseAccess.java SQL注入	VulDB	VulDB	2023-01-11	2023-02-01	CVE-2014-125074	已接受
217790	mapoor voteapp app.py show_refresh SQL注入	VulDB	VulDB	2023-01-10	2023-01-31	CVE-2014-125073	已接受
217719	CherishSin klattr SQL注入	VulDB	VulDB	2023-01-09	2023-01-30	CVE-2014-125072	已接受
217716	lukehutch Gribbit HttpRequestHandler.java messageReceived 权限升级	VulDB	VulDB	2023-01-09	2023-01-30	CVE-2014-125071	已接受
217651	yanheven console tables.py AvailabilityZonesTable 跨网站脚本	VulDB	VulDB	2023-01-08	2023-01-30	CVE-2014-125070	已接受
217644	saxman maps-js-icoads 信息公开	VulDB	VulDB	2023-01-08	2023-01-30	CVE-2014-125069	已接受
217643	saxman maps-js-icoads http-server.js 目录遍历	VulDB	VulDB	2023-01-08	2023-01-30	CVE-2014-125068	已接受
217639	corincerami curiosity image_controller.rb SQL注入	VulDB	VulDB	2023-01-08	2023-01-30	CVE-2014-125067	已接受
217636	emmflo yuko-bot 拒绝服务	VulDB	VulDB	2023-01-08	2023-01-30	CVE-2014-125066	已接受
217632	john5223 bottle-auth SQL注入	VulDB	VulDB	2023-01-07	2023-01-30	CVE-2014-125065	已接受
217631	elgs gosqljson gosqljson.go ExecDb SQL注入 [False-Positive]	VulDB	VulDB	2023-01-07	2023-02-21	~~CVE-2014-125064~~	撤销
217625	ada-l0velace Bid SQL注入	VulDB	VulDB	2023-01-07	2023-01-30	CVE-2014-125063	已接受
217621	ananich bitstorm announce.php SQL注入	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125062	已接受
217616	peel filebroker common.rb select_transfer_status_desc SQL注入	VulDB	VulDB	2023-01-07	2024-08-06	CVE-2014-125061	已接受
217614	holdennb CollabCal calenderServer.cpp handleGet 弱身份验证	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125060	已接受
217613	sternenseemann sternenblog main.c blog_index 权限升级	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125059	已接受
217607	LearnMeSomeCodes project3 search.rb search_first_name SQL注入	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125058	已接受
217599	mrobit robitailletheknot CSRF Token filters.php 权限升级	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125057	已接受
217598	Pylons horus services.py 信息公开	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125056	已接受
217596	agnivade easy-scrypt scrypt.go VerifyPassphrase 信息公开	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125055	已接受
217594	koroket RedditOnRails Vote 权限升级	VulDB	VulDB	2023-01-07	2023-01-29	CVE-2014-125054	已接受
217582	Piwigo-Guest-Book Navigation Bar guestbook.inc.php SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125053	已接受
217571	JervenBolleman sparql-identifiers RegistryDao.java SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125052	已接受
217564	himiklab yii2-jqgrid-widget JqGridAction.php addSearchOptionsRecursively SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125051	已接受
217562	ScottTZhang voter-js main.js SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125050	已接受
217560	typcn Blogile server.js getNav SQL注入	VulDB	VulDB	2023-01-06	2024-08-06	CVE-2014-125049	已接受
217559	kassi xingwall oauth.js 弱身份验证	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125048	已接受
217557	tbezman school-store SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125047	已接受
217551	Seiji42 cub-scout-tracker databaseAccessFunctions.js SQL注入	VulDB	VulDB	2023-01-06	2023-01-29	CVE-2014-125046	已接受
217525	meol1 index.php GetAnimal SQL注入	VulDB	VulDB	2023-01-05	2023-01-29	CVE-2014-125045	已接受
217515	soshtolsus wing-tight index.php 权限升级	VulDB	VulDB	2023-01-05	2023-01-29	CVE-2014-125044	已接受
217514	vicamo NetworkManager nm-device.c send_arps 权限升级 [False-Positive]	VulDB	VulDB	2023-01-05	2023-02-27	~~CVE-2014-125043~~	撤销
217513	vicamo NetworkManager nm_setting_vlan_add_priority_str 拒绝服务 [False-Positive]	VulDB	VulDB	2023-01-05	2023-02-27	~~CVE-2014-125042~~	撤销
217486	Miccighel PR-CWT SQL注入	VulDB	VulDB	2023-01-05	2023-01-28	CVE-2014-125041	已接受
217484	stevejagodzinski DevNewsAggregator RemoteHtmlContentDataAccess.php getByName SQL注入	VulDB	VulDB	2023-01-05	2023-01-28	CVE-2014-125040	已接受
217352	kkokko NeoXplora Trainer 跨网站脚本	VulDB	VulDB	2023-01-04	2023-01-28	CVE-2014-125039	已接受
217192	IS_Projecto2 NewsBean.java SQL注入	VulDB	VulDB	2023-01-02	2023-01-27	CVE-2014-125038	已接受
217191	License to Kill injury.rb SQL注入	VulDB	VulDB	2023-01-02	2023-01-27	CVE-2014-125037	已接受
217190	drybjed ansible-ntp main.yml 拒绝服务	VulDB	VulDB	2023-01-02	2023-01-27	CVE-2014-125036	已接受
217189	Jobs-Plugin 跨网站脚本	VulDB	VulDB	2023-01-02	2023-01-27	CVE-2014-125035	已接受
217183	stiiv contact_app View.php render 跨网站脚本	VulDB	VulDB	2023-01-02	2023-01-26	CVE-2014-125034	已接受
217178	rails-cv-app uploaded_files_controller.rb 信息公开	VulDB	VulDB	2023-01-02	2023-01-26	CVE-2014-125033	已接受
217177	porpeeranut go-with-me add.php SQL注入	VulDB	VulDB	2023-01-02	2023-01-26	CVE-2014-125032	已接受
217176	kirill2485 TekNet loggedin.php 跨网站脚本	VulDB	VulDB	2023-01-02	2023-01-26	CVE-2014-125031	已接受
217154	taoeffect Empress 弱身份验证	VulDB	VulDB	2023-01-01	2023-01-26	CVE-2014-125030	已接受
217150	ttskch PaginationServiceProvider Demo index.php SQL注入	VulDB	VulDB	2022-12-31	2023-01-26	CVE-2014-125029	已接受
217148	valtech IDP Test Client main.py 跨网站请求伪造	VulDB	VulDB	2022-12-31	2023-01-26	CVE-2014-125028	已接受
217147	Yuna Scatari TBDev usersearch.php get_user_icons 跨网站脚本	VulDB	VulDB	2022-12-31	2023-01-26	CVE-2014-125027	已接受
13428	Cardo Systems Scala Rider Q3 Cardo-Updater api 权限升级	VulDB	VulDB	2014-06-03	2022-05-24	CVE-2014-125001	已接受
12588	FFmpeg dnxhdenc.c dnxhd_init_rc 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125002	已接受
12587	FFmpeg jpeg2000dec.c get_siz 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125003	已接受
12586	FFmpeg vmnc.c decode_hextile 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125004	已接受
12585	FFmpeg mpeg4videodec.c decode_vol_header 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125005	已接受
12584	FFmpeg h264.c output_frame 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125006	已接受
12583	FFmpeg hevcpred_template.c intra_pred 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125007	已接受
12582	FFmpeg oggparsevorbis.c vorbis_header 内存损坏	VulDB	VulDB	2014-03-13	2022-06-17	CVE-2014-125008	已接受
12393	FFmpeg snow.h add_yblock 内存损坏	VulDB	VulDB	2014-02-24	2022-06-17	CVE-2014-125009	已接受
12392	FFmpeg h64.c decode_slice_header 内存损坏	VulDB	VulDB	2014-02-24	2022-06-17	CVE-2014-125010	已接受
12391	FFmpeg ansi.c decode_frame	VulDB	VulDB	2014-02-24	2022-06-17	CVE-2014-125011	已接受
12390	FFmpeg dxtroy.c 拒绝服务	VulDB	VulDB	2014-02-24	2022-06-17	CVE-2014-125012	已接受
12389	FFmpeg msrle.c msrle_decode_frame 内存损坏	VulDB	VulDB	2014-02-24	2022-06-17	CVE-2014-125013	已接受
12367	FFmpeg HEVC Video Decoder 内存损坏	VulDB	VulDB	2014-02-22	2022-06-17	CVE-2014-125014	已接受
12366	FFmpeg read_var_block_data 内存损坏	VulDB	VulDB	2014-02-22	2022-06-17	CVE-2014-125015	已接受
12365	FFmpeg utils.c ff_init_buffer_info 内存损坏	VulDB	VulDB	2014-02-22	2022-06-17	CVE-2014-125016	已接受