2014-08-24

2014-08-25

2014-08-26

CVE-2014-5456 Aug 25, 16:55 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission to inject. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable.

XSS Social Stats

NVD

CVSS 2.0

2.1

EPSS

0.2%

CVE-2014-5457 Aug 25, 16:55 LOW Monitor

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Qnap Ts 469U Firmware Ts 469U Ts Ec1679U Rp Firmware +5

NVD

CVSS 2.0

2.1

EPSS

0.1%

CVE-2014-0974 Aug 25, 01:55 LOW PATCH Monitor

The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other. Rated low severity (CVSS 1.9).

Privilege Escalation Google Qualcomm Little Kernel Bootloader Little Kernel Project

NVD

CVSS 2.0

1.9

EPSS

0.1%