Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3707 State: PUBLISHED Published: 2014-11-15T20:00:00 Last Updated: 2024-08-06T10:50:17.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.debian.org/security/2014/dsa-3069 - http://www.oracle.com/technetwork/topics/security/cpuoct2015
67936.html - http://www.debian.org/security/2014/dsa-3069 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://www.ubuntu.com/usn/USN-2399-1 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1254.html - http://www.securityfocus.com/bid/70988 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html - https://support.apple.com/kb/HT205031 - http://curl.haxx.se/d
ists.opensuse.org/opensuse-updates/2015-02/msg00040.html - https://support.apple.com/kb/HT205031 - http://curl.haxx.se/docs/adv_20141105.html
CVE ID: CVE-2014-3708 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T10:50:18.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70777 - http://rhn.redhat.com/errata/RHSA-2015-0844.html - http://rhn.redhat.com/errata/RHSA-2015-0843.html - https://bugs.launchpad.net/nova/+bug/1358583 - http://lists.openstack.org/pipermail/openstack-announce/2014-October/00
- https://bugs.launchpad.net/nova/+bug/1358583 - http://lists.openstack.org/pipermail/openstack-announce/2014-October/000301.html
CVE ID: CVE-2014-3709 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-06T10:50:18.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.keycloak.services.resources.SocialResource.callback method in JBoss KeyCloak before 1.0.3.Final allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/KEYCLOAK-765 - http://www.securityfocus.com/bid/101508 - https://bugzilla.redhat.com/show_bug.cgi?id=1154971
CVE ID: CVE-2014-3710 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T10:50:17.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=68283 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d - http://secunia.com/advisories/62347 - http://rh
?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d - http://secunia.com/advisories/62347 - http://rhn.redhat.com/errata/RHSA-2014-1767.html - http://www.ubuntu.com/usn/USN-2391-1 - https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0 - https://support.apple.com/HT204659 - http://secunia.com/advisories/61982 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://secunia.com/advisories/61763 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc - http://linux.oracle.com/errata/ELSA-2014-1768
- https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc - http://linux.oracle.com/errata/ELSA-2014-1768.html - http://www.debian.org/security/2014/dsa-3072 - http://rhn.redhat.com/errata/RHSA-2016-0760.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.ubuntu.com/usn/USN-2494-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://secunia.com/advisories/61970 - http://www.securitytracker.com/id/1031344 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/R
031344 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html - http://rhn.redhat.com/errata/RHSA-2014-1768.html - https://security.gentoo.org/glsa/201701-42 - http://secunia.com/advisories/60699 - https://security.gentoo.org/glsa/201503-03 - http://www.securityfocus.com/bid/70807 - http://secunia.com/advisories/60630 - https://bugzilla.redhat.com/show_bug.cgi?id=1155071 - http://secunia.com/advisories/62559
CVE ID: CVE-2014-3711 State: PUBLISHED Published: 2014-10-27T15:00:00 Last Updated: 2024-08-06T10:50:18.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large number of nonexistent path names. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3070 - http://secunia.com/advisories/62218 - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:22.namei.asc - http://www.securitytracker.com/id/1031100
CVE ID: CVE-2014-3712 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T10:50:17.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in content_search_controller.rb or (2) action parameter in the respond function in api/api_controller.rb in app/controllers/katello/, which is passed to the to_sym method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70707 - https://bugzilla.redhat.com/show_bug.cgi?id=1155708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97724 - ht
- https://bugzilla.redhat.com/show_bug.cgi?id=1155708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97724 - http://seclists.org/oss-sec/2014/q4/419
CVE ID: CVE-2014-3714 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:50:18.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-95.html - http://www.securitytracker.com/id/1030252 - http://www.openwall.com/lists/oss-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - h
- http://www.openwall.com/lists/oss-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - http://www.openwall.com/lists/oss-security/2014/05/15/6
CVE ID: CVE-2014-3715 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:50:18.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended DTB. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-95.html - http://www.securitytracker.com/id/1030252 - http://www.openwall.com/lists/oss-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - http://www.openwall.com/lists/oss-security/2014/05/15/6
CVE ID: CVE-2014-3716 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:50:18.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-95.html - http://www.securitytracker.com/id/1030252 - http://www.openwall.com/lists/oss-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - http://www.openwall.com/lists/oss-security/2014/05/15/6
CVE ID: CVE-2014-3717 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:50:18.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-95.html - http://www.securitytracker.com/id/1030252 - http://www.openwall.com/lists/oss-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - http://www.openwall.com/lists/oss-sec
-security/2014/05/14/4 - http://www.openwall.com/lists/oss-security/2014/05/16/1 - http://www.openwall.com/lists/oss-security/2014/05/15/6
CVE ID: CVE-2014-3718 State: PUBLISHED Published: 2020-01-30T19:03:48 Last Updated: 2024-08-06T10:50:18.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the (1) find, (2) lib, or (3) sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126654/Aleph-500-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2014/May/67
CVE ID: CVE-2014-3719 State: PUBLISHED Published: 2020-01-30T19:03:53 Last Updated: 2024-08-06T10:50:18.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the (1) find, (2) lib, or (3) sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126635/Aleph-500-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/May/65
CVE ID: CVE-2014-3730 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T10:50:18.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61281 - http://www.debian.org/security/2014/dsa-2934 - http://ubuntu.com/usn/usn-2212-1 - http://www.securityfocus.com/bid/67410 - http://lists.
n.org/security/2014/dsa-2934 - http://ubuntu.com/usn/usn-2212-1 - http://www.securityfocus.com/bid/67410 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.openwall.com/lists/oss-security/2014/05/15/3 - https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/ - http://www.openwall.com/lists/oss-security/2014/05/14/10
CVE ID: CVE-2014-3735 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:50:18.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126640/Intel-Ideo-Video-4.5-Memory-Corruption.html - http://www.securityfocus.com/bid/67431
CVE ID: CVE-2014-3737 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T10:50:17.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/defaultheader.php in Lamp Design Storesprite before 7 - 19-06-14, when using the currency selection dropdown, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to brand.php, related to the currencyUrl function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68197 - http://www.storesprite.com/docs/26/htb23215_xss_vulnerability/ - http://www.securityfocus.com/archive/1/532552/100/0/threaded - ht
.storesprite.com/docs/26/htb23215_xss_vulnerability/ - http://www.securityfocus.com/archive/1/532552/100/0/threaded - https://www.htbridge.com/advisory/HTB23215 - http://secunia.com/advisories/59524 - http://packetstormsecurity.com/files/127221/Storesprite-7-Cross-Site-Scripting.html
CVE ID: CVE-2014-3738 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T10:50:17.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67396 - http://www.openwall.com/lists/oss-security/2014/05/15/5 - http://www.exploit-db.com/exploits/34165 - https://www.youtube.com/watch?v=wtmdsz24evo - http://www.openwall.com/lists/oss-security/2014/05/14/5 - http://packetstormsecurity.com/files/127623/Zenoss-Monitoring-System-4.2.5
penwall.com/lists/oss-security/2014/05/14/5 - http://packetstormsecurity.com/files/127623/Zenoss-Monitoring-System-4.2.5-2108-Cross-Site-Scripting.html
CVE ID: CVE-2014-3739 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T10:50:18.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the came_from parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67396 - http://www.openwall.com/lists/oss-security/2014/05/15/5 - https://www.youtube.com/watch?v=wtmdsz24evo - http://www.openwall.com/lists/oss-security/2014/05/14/5
CVE ID: CVE-2014-3740 State: PUBLISHED Published: 2014-09-11T18:00:00 Last Updated: 2024-08-06T10:50:17.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbitrary web script or HTML via the Summary field in a ticket request to the portal page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532346/100/0/threaded - http://osvdb.org/show/osvdb/106916 - http://seclists.org/fulldisclosure/2014/Jun/42 - http://packetstormsecurity.com/files/126994/SpiceWorks-IT-Ticketing-System-Cross-Site-Scripting.html - http://w
Jun/42 - http://packetstormsecurity.com/files/126994/SpiceWorks-IT-Ticketing-System-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/33330 - http://research.openflare.org/advisories/OF-2014-07/spiceworks_xss.txt - http://secunia.com/advisories/58522 - http://research.openflare.org/poc/OF-2014-07/spiceworks_crafted_ticket.mp4 - http://packetstormsecurity.com/files/126596/SpiceWorks-7.2.00174-Cross-Site-Scripting.html
CVE ID: CVE-2014-3741 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T10:50:17.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://nodesecurity.io/advisories/printer_potential_command_injection - https://github.com/tojocky/node-printer/commit/e001e38738c17219a1d9dd8c31f7d8
ries/printer_potential_command_injection - https://github.com/tojocky/node-printer/commit/e001e38738c17219a1d9dd8c31f7d82b9c0013c7
CVE ID: CVE-2014-3742 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T10:50:17.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://github.com/spumko/hapi/issues/1427 - https://nodesecurity.io/advisories/hapi_File_descriptor_leak_DoS_vulnerability
CVE ID: CVE-2014-3743 State: PUBLISHED Published: 2020-01-06T19:41:04 Last Updated: 2024-08-06T10:50:18.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url's. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/marked_multiple_content_injection_vulnerabilities - http://www.openwall.com/lists/oss-security/2014/05/13/1 - http://www.openwall.com/lists/oss-security/2014/05/15/2 - https://bugzilla.redhat.co
m/lists/oss-security/2014/05/13/1 - http://www.openwall.com/lists/oss-security/2014/05/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3743
CVE ID: CVE-2014-3744 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T10:50:18.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://github.com/isaacs/st - http://www.securityfocus.com/bid/67389 - https://nodesecurity.io/advisories/st_directory_traversal
CVE ID: CVE-2014-3749 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T10:50:18.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67442 - http://www.securityfocus.com/archive/1/532155/100/0/threaded - http://seclists.org/fulldisclosure/2014/May/73
CVE ID: CVE-2014-3750 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T10:57:16.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://sceptive.com/p/bilyoner-mobile-apps-prone-to-various-ssltls-attacks
CVE ID: CVE-2014-3752 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T10:57:16.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html - http://seclists.org/fulldisclosure/2014/Jun/125 - http://www.securityfocus.com/archive/1/532559/100/0/threaded - https://www.portcullis-security.com/security-research-and-d
tp://www.securityfocus.com/archive/1/532559/100/0/threaded - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/
CVE ID: CVE-2014-3753 State: PUBLISHED Published: 2020-01-09T13:33:35 Last Updated: 2024-08-06T10:57:16.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: AgileBits 1Password through 1.0.9.340 allows security feature bypass Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18986
CVE ID: CVE-2014-3755 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T10:57:16.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://mumble.info/security/Mumble-SA-2014-005.txt - https://qt.gitorious.org/qt/mumble-developers-qt/commit/2147fa767980fe27a14f018b1528dbf880b96814 - http://www.openwall.com/lists/oss-security/2014/05/15/4 - http://www.open
mit/2147fa767980fe27a14f018b1528dbf880b96814 - http://www.openwall.com/lists/oss-security/2014/05/15/4 - http://www.openwall.com/lists/oss-security/2014/05/15/1 - http://www.securityfocus.com/bid/67400
CVE ID: CVE-2014-3756 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T10:57:16.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the (1) user or (2) channel name in a Qt dialog, (3) subject common name or (4) email address to the Certificate Wizard, or (5) server name in a tooltip. Additional Analyst Notes: - CVE Program Container: References: - http://mumble.info/security/Mumble-SA-2014-006.txt - http://w
onal Analyst Notes: - CVE Program Container: References: - http://mumble.info/security/Mumble-SA-2014-006.txt - http://www.securityfocus.com/bid/67401 - http://www.openwall.com/lists/oss-security/2014/05/15/4 - http://www.openwall.com/lists/oss-security/2014/05/15/1
CVE ID: CVE-2014-3757 State: PUBLISHED Published: 2014-05-15T14:00:00 Last Updated: 2024-08-06T10:57:16.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL commands via the sorter_value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67000 - http://seclists.org/fulldisclosure/2014/Apr/249