Approved changes feed: RSS · Atom

cpe:2.3:a:pnmsoft:sequence_kinetics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPnmsoft (862e8862-a46d-5c83-875d-600fed2081af)
ProductSequence Kinetics (f434e6a4-e95f-5d28-82a2-daad91fd9798)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6304 vulnerable 2026-06-08 05:05:57.387084 Details available
The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors.
Published: 2015-02-19T11:00:00.000Z
Updated: 2024-08-06T12:10:13.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6303 vulnerable 2026-06-08 05:05:57.386814 Details available
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2015-02-19T11:00:00.000Z
Updated: 2024-08-06T12:10:13.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6302 vulnerable 2026-06-08 05:05:57.386495 Details available
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2015-02-19T11:00:00.000Z
Updated: 2024-08-06T12:10:13.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6301 vulnerable 2026-06-08 05:05:57.386003 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-02-19T11:00:00.000Z
Updated: 2024-08-06T12:10:13.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.