CNA 2014

VulDB is an officially certified CVE Numbering Authority (CNA) by MITRE and Authorized Data Publisher (ADP) by NIST NVD. We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. CVE is an international program to discover vulnerabilities which are then assigned and published to the CVE list. Partners coordinate such CVE entries to communicate consistent descriptions. Information technology and cybersecurity professionals all around the world use CVE records to ensure they are discussing the same issues, and to coordinate their efforts to prioritize and address these properly.

Vendor

Not Defined	46
BestWebSoft	5
yanheven	2
saxman	2
vicamo	2

Identifying all affected vendors is a good starting point for an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Product

FFmpeg	24
Gimmie Plugin	3
yanheven console	2
saxman maps-js-icoads	2
vicamo NetworkManager	2

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Remediation

Official Fix	108
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	0

Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.

Exploitability

High	0
Functional	0
Proof-of-Concept	1
Unproven	24
Not Defined	84

Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	46
Network	63

The approach a vulnerability it becomes important to use the expected access vector. This is typically via the network, local, or physically even.

Authentication

Not Defined	0
High	3
Low	75
None	31

To exploit a vulnerability a certail level of authentication might be required. Vulnerabilities without such a requirement are much more popular.

User Interaction

Not Defined	0
Required	24
None	85

Some attack scenarios require some user interaction by a victim. This is typical for phishing, social engineering and cross site scripting attacks.

VulDB

≤1	0
≤2	0
≤3	5
≤4	23
≤5	10
≤6	59
≤7	6
≤8	5
≤9	1
≤10	0

The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.

Exploit 0-day

<1k	8
<2k	77
<5k	24
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.

ID	Vulnerability	Scope	Responsible	Created	Updated	CVE	CNA
259628	namithjawahar Wp-Insert cross site scripting	VulDB	VulDB	04/07/2024	04/07/2024	CVE-2014-125111	accepted
258781	wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting	VulDB	VulDB	03/30/2024	03/30/2024	CVE-2014-125110	accepted
248956	BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting	VulDB	VulDB	12/24/2023	01/18/2024	CVE-2014-125109	accepted
248849	w3c online-spellchecker-py spellchecker cross site scripting	VulDB	VulDB	12/22/2023	01/18/2024	CVE-2014-125108	accepted
248270	Corveda PHPSandbox String protection mechanism	VulDB	VulDB	12/17/2023	01/12/2024	CVE-2014-125107	accepted
230659	Broken Link Checker Plugin Settings Page core.php options_page cross site scripting	VulDB	VulDB	06/03/2023	06/30/2023	CVE-2014-125105	accepted
230263	VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload	VulDB	VulDB	05/30/2023	06/24/2023	CVE-2014-125104	accepted
230155	BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting	VulDB	VulDB	05/29/2023	06/21/2023	CVE-2014-125103	accepted
230113	Bestwebsoft Relevant Plugin Thumbnail information disclosure	VulDB	VulDB	05/28/2023	06/21/2023	CVE-2014-125102	accepted
230085	Portfolio Gallery Plugin sql injection	VulDB	VulDB	05/27/2023	06/21/2023	CVE-2014-125101	accepted
227764	BestWebSoft Job Board Plugin cross site scripting	VulDB	VulDB	04/30/2023	05/24/2023	CVE-2014-125100	accepted
226309	I Recommend This Plugin dot-irecommendthis.php sql injection	VulDB	VulDB	04/18/2023	05/09/2023	CVE-2014-125099	accepted
225356	Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting	VulDB	VulDB	04/08/2023	04/26/2023	CVE-2014-125098	accepted
225354	BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting	VulDB	VulDB	04/08/2023	04/26/2023	CVE-2014-125097	accepted
225349	Fancy Gallery Plugin Options Page class.options.php cross site scripting	VulDB	VulDB	04/08/2023	04/26/2023	CVE-2014-125096	accepted
225320	BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting	VulDB	VulDB	04/07/2023	04/26/2023	CVE-2014-125095	accepted
225001	phpMiniAdmin cross site scripting	VulDB	VulDB	04/05/2023	04/22/2023	CVE-2014-125094	accepted
222610	Ad Blocking Detector Plugin ad-blocking-detector.php information disclosure	VulDB	VulDB	03/08/2023	04/01/2023	CVE-2014-125093	accepted
222323	MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2014-125092	accepted
222268	codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection	VulDB	VulDB	03/03/2023	03/31/2023	CVE-2014-125091	accepted
222262	Media Downloader Plugin getfile.php dl_file_resumable cross site scripting	VulDB	VulDB	03/03/2023	03/31/2023	CVE-2014-125090	accepted
221497	cention-chatserver InternalChatProtocol.fe _formatBody cross site scripting	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2014-125089	accepted
221488	qt-users-jp silk header.qml cross site scripting	VulDB	VulDB	02/18/2023	03/23/2023	CVE-2014-125088	accepted
221480	java-xmlbuilder xml external entity reference	VulDB	VulDB	02/18/2023	03/23/2023	CVE-2014-125087	accepted
220207	Gimmie Plugin trigger_login.php sql injection	VulDB	VulDB	02/04/2023	03/05/2023	CVE-2014-125086	accepted
220206	Gimmie Plugin trigger_ratethread.php sql injection	VulDB	VulDB	02/04/2023	03/05/2023	CVE-2014-125085	accepted
220205	Gimmie Plugin trigger_referral.php sql injection	VulDB	VulDB	02/04/2023	03/05/2023	CVE-2014-125084	accepted
218911	Anant Labs google-enterprise-connector-dctm sql injection	VulDB	VulDB	01/18/2023	02/15/2023	CVE-2014-125083	accepted
218464	nivit redports model.py sql injection	VulDB	VulDB	01/17/2023	02/09/2023	CVE-2014-125082	accepted
218459	risheesh debutsav sql injection	VulDB	VulDB	01/17/2023	02/09/2023	CVE-2014-125081	accepted
218398	frontaccounting faplanet path traversal	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2014-125080	accepted
218356	agy pontifex.http Http.coffee sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2014-125079	accepted
218354	yanheven console horizon.instances.js cross site scripting	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2014-125078	accepted
218351	pointhi searx_stats cron.php sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2014-125077	accepted
218022	NoxxieNl Criminals roulette.php sql injection	VulDB	VulDB	01/11/2023	02/04/2023	CVE-2014-125076	accepted
218021	gmail-servlet Model.java search sql injection	VulDB	VulDB	01/11/2023	02/04/2023	CVE-2014-125075	accepted
218005	Nayshlok Voyager DatabaseAccess.java sql injection	VulDB	VulDB	01/11/2023	02/01/2023	CVE-2014-125074	accepted
217790	mapoor voteapp app.py show_refresh sql injection	VulDB	VulDB	01/10/2023	01/31/2023	CVE-2014-125073	accepted
217719	CherishSin klattr sql injection	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2014-125072	accepted
217716	lukehutch Gribbit HttpRequestHandler.java messageReceived missing origin validation in websockets	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2014-125071	accepted
217651	yanheven console tables.py AvailabilityZonesTable cross site scripting	VulDB	VulDB	01/08/2023	01/30/2023	CVE-2014-125070	accepted
217644	saxman maps-js-icoads exposure of information through directory listing	VulDB	VulDB	01/08/2023	01/30/2023	CVE-2014-125069	accepted
217643	saxman maps-js-icoads http-server.js path traversal	VulDB	VulDB	01/08/2023	01/30/2023	CVE-2014-125068	accepted
217639	corincerami curiosity image_controller.rb sql injection	VulDB	VulDB	01/08/2023	01/30/2023	CVE-2014-125067	accepted
217636	emmflo yuko-bot denial of service	VulDB	VulDB	01/08/2023	01/30/2023	CVE-2014-125066	accepted
217632	john5223 bottle-auth sql injection	VulDB	VulDB	01/07/2023	01/30/2023	CVE-2014-125065	accepted
217631	elgs gosqljson gosqljson.go ExecDb sql injection [False-Positive]	VulDB	VulDB	01/07/2023	02/21/2023	~~CVE-2014-125064~~	revoked
217625	ada-l0velace Bid sql injection	VulDB	VulDB	01/07/2023	01/30/2023	CVE-2014-125063	accepted
217621	ananich bitstorm announce.php sql injection	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125062	accepted
217616	peel filebroker common.rb select_transfer_status_desc sql injection	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125061	accepted
217614	holdennb CollabCal calenderServer.cpp handleGet improper authentication	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125060	accepted
217613	sternenseemann sternenblog main.c blog_index file inclusion	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125059	accepted
217607	LearnMeSomeCodes project3 search.rb search_first_name sql injection	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125058	accepted
217599	mrobit robitailletheknot CSRF Token filters.php comparison	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125057	accepted
217598	Pylons horus services.py timing discrepancy	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125056	accepted
217596	agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancy	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125055	accepted
217594	koroket RedditOnRails Vote access control	VulDB	VulDB	01/07/2023	01/29/2023	CVE-2014-125054	accepted
217582	Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125053	accepted
217571	JervenBolleman sparql-identifiers RegistryDao.java sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125052	accepted
217564	himiklab yii2-jqgrid-widget JqGridAction.php addSearchOptionsRecursively sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125051	accepted
217562	ScottTZhang voter-js main.js sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125050	accepted
217560	typcn Blogile server.js getNav sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125049	accepted
217559	kassi xingwall oauth.js session fixiation	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125048	accepted
217557	tbezman school-store sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125047	accepted
217551	Seiji42 cub-scout-tracker databaseAccessFunctions.js sql injection	VulDB	VulDB	01/06/2023	01/29/2023	CVE-2014-125046	accepted
217525	meol1 index.php GetAnimal sql injection	VulDB	VulDB	01/05/2023	01/29/2023	CVE-2014-125045	accepted
217515	soshtolsus wing-tight index.php file inclusion	VulDB	VulDB	01/05/2023	01/29/2023	CVE-2014-125044	accepted
217514	vicamo NetworkManager nm-device.c send_arps return value [False-Positive]	VulDB	VulDB	01/05/2023	02/27/2023	~~CVE-2014-125043~~	revoked
217513	vicamo NetworkManager nm_setting_vlan_add_priority_str release of resource [False-Positive]	VulDB	VulDB	01/05/2023	02/27/2023	~~CVE-2014-125042~~	revoked
217486	Miccighel PR-CWT sql injection	VulDB	VulDB	01/05/2023	01/28/2023	CVE-2014-125041	accepted
217484	stevejagodzinski DevNewsAggregator RemoteHtmlContentDataAccess.php getByName sql injection	VulDB	VulDB	01/05/2023	01/28/2023	CVE-2014-125040	accepted
217352	kkokko NeoXplora Trainer cross site scripting	VulDB	VulDB	01/04/2023	01/28/2023	CVE-2014-125039	accepted
217192	IS_Projecto2 NewsBean.java sql injection	VulDB	VulDB	01/02/2023	01/27/2023	CVE-2014-125038	accepted
217191	License to Kill injury.rb sql injection	VulDB	VulDB	01/02/2023	01/27/2023	CVE-2014-125037	accepted
217190	drybjed ansible-ntp main.yml amplification	VulDB	VulDB	01/02/2023	01/27/2023	CVE-2014-125036	accepted
217189	Jobs-Plugin cross site scripting	VulDB	VulDB	01/02/2023	01/27/2023	CVE-2014-125035	accepted
217183	stiiv contact_app View.php render cross site scripting	VulDB	VulDB	01/02/2023	01/26/2023	CVE-2014-125034	accepted
217178	rails-cv-app uploaded_files_controller.rb path traversal	VulDB	VulDB	01/02/2023	01/26/2023	CVE-2014-125033	accepted
217177	porpeeranut go-with-me add.php sql injection	VulDB	VulDB	01/02/2023	01/26/2023	CVE-2014-125032	accepted
217176	kirill2485 TekNet loggedin.php cross site scripting	VulDB	VulDB	01/02/2023	01/26/2023	CVE-2014-125031	accepted
217154	taoeffect Empress hard-coded password	VulDB	VulDB	01/01/2023	01/26/2023	CVE-2014-125030	accepted
217150	ttskch PaginationServiceProvider Demo index.php sql injection	VulDB	VulDB	12/31/2022	01/26/2023	CVE-2014-125029	accepted
217148	valtech IDP Test Client main.py cross-site request forgery	VulDB	VulDB	12/31/2022	01/26/2023	CVE-2014-125028	accepted
217147	Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting	VulDB	VulDB	12/31/2022	01/26/2023	CVE-2014-125027	accepted
13428	Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management	VulDB	VulDB	06/03/2014	05/24/2022	CVE-2014-125001	accepted
12588	FFmpeg dnxhdenc.c dnxhd_init_rc memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125002	accepted
12587	FFmpeg jpeg2000dec.c get_siz memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125003	accepted
12586	FFmpeg vmnc.c decode_hextile memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125004	accepted
12585	FFmpeg mpeg4videodec.c decode_vol_header memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125005	accepted
12584	FFmpeg h264.c output_frame memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125006	accepted
12583	FFmpeg hevcpred_template.c intra_pred memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125007	accepted
12582	FFmpeg oggparsevorbis.c vorbis_header memory corruption	VulDB	VulDB	03/13/2014	06/17/2022	CVE-2014-125008	accepted
12393	FFmpeg snow.h add_yblock memory corruption	VulDB	VulDB	02/24/2014	06/17/2022	CVE-2014-125009	accepted
12392	FFmpeg h64.c decode_slice_header memory corruption	VulDB	VulDB	02/24/2014	06/17/2022	CVE-2014-125010	accepted
12391	FFmpeg ansi.c decode_frame integer coercion	VulDB	VulDB	02/24/2014	06/17/2022	CVE-2014-125011	accepted
12390	FFmpeg dxtroy.c integer coercion	VulDB	VulDB	02/24/2014	06/17/2022	CVE-2014-125012	accepted
12389	FFmpeg msrle.c msrle_decode_frame memory corruption	VulDB	VulDB	02/24/2014	06/17/2022	CVE-2014-125013	accepted
12367	FFmpeg HEVC Video Decoder memory corruption	VulDB	VulDB	02/22/2014	06/17/2022	CVE-2014-125014	accepted
12366	FFmpeg read_var_block_data memory corruption	VulDB	VulDB	02/22/2014	06/17/2022	CVE-2014-125015	accepted
12365	FFmpeg utils.c ff_init_buffer_info memory corruption	VulDB	VulDB	02/22/2014	06/17/2022	CVE-2014-125016	accepted