CVE-2014-1930

Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

• CWE-200

• http://jvn.jp/vu/JVNVU97441356/index.html
• http://osvdb.org/102814
• http://osvdb.org/102815
• http://www.kb.cert.org/vuls/id/566894US Government Resource
• http://www.securityfocus.com/bid/65305
• http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_detailsVendor Advisory
• http://jvn.jp/vu/JVNVU97441356/index.html
• http://osvdb.org/102814
• http://osvdb.org/102815
• http://www.kb.cert.org/vuls/id/566894US Government Resource
• http://www.securityfocus.com/bid/65305
• http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_detailsVendor Advisory

Published

Feb 10, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-1924The MARC framework import/export function (admin/import_expo…9.8
• CVE-2014-1925SQL injection vulnerability in the MARC framework import/exp…9.8
• CVE-2014-1926Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-1927The shell_quote function in python-gnupg 0.3.5 does not prop…
• CVE-2014-1928The shell_quote function in python-gnupg 0.3.5 does not prop…
• CVE-2014-1929python-gnupg 0.3.5 and 0.3.6 allows context-dependent attack…
• CVE-2014-1931The user login page in Visibility Software Cyber Recruiter b…
• CVE-2014-1932The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghost…
• CVE-2014-1933The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts…
• CVE-2014-1934tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlie…
• CVE-2014-19359base 1:6-6 and 1:6-7 insecurely creates temporary files whi…5.3
• CVE-2014-1936rc before 1.7.1-5 insecurely creates temporary files.7.5