Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7102 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:18.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Car Insurance Quote Comparison (aka com.seopa.quotezone) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/766153 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7103 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:18.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Oskarshamnsliv (aka appinventor.ai_stadslivsguiden.Oskarshamnsliv) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/643481 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7104 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:18.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gymnoOVP (iOVP) (aka com.johtru.gymnoOVP) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/722769 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7105 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7106 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:18.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Orakel-Ball (aka com.wOrakelball) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/713353 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7107 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:18.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Human Factor (aka com.magzter.thehumanfactor) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/974625 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7108 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stop Headaches and Migraines (aka com.StopHeadachesandMigraines) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/352729
CVE ID: CVE-2014-7109 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:19.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nesvarnik (aka cz.dtest.nesvarnik) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/483497 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7110 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7111 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android Excellence (aka an.exc.ap) application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/601857 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7112 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7113 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NASA Universe Wallpapers Xeus (aka com.xeusNASA) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/690913 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7114 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7115 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Letters to God - soc. network (aka com.wPismakBoguLetterstoGod) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/794929 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7116 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NRA Journal (aka com.magazinecloner.nationalrifleassociationjournal) application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/181129 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7117 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forest Area FCU Mobile (aka com.metova.cuae.fafcu) application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/932473
CVE ID: CVE-2014-7118 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Itography Item Hunt (aka com.itography.application) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/141793 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7119 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GNAM 2013 (aka com.beepeers.gndam) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - http://www.kb.cert.org/vuls/id/803377 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7120 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Model Laboratory (aka com.magazinecloner.modellaboratory) application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/775657 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7121 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dhanam (aka com.magzter.dhanam) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/558121
CVE ID: CVE-2014-7122 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lansing State Journal Print (aka com.lansingjournal.android.prod) application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/605377 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7123 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Brevir Harian V2 (aka com.brevir.harian.v) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/709481 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7124 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP Alarm (aka com.cosesy.gadget.alarm) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - http://www.kb.cert.org/vuls/id/442841 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7125 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Motor (aka com.magzter.motorhwpublishing) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/599481 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7126 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7127 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Football Espana magazine (aka com.triactivemedia.footballespana) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/946553 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7128 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Toyota OC (aka com.tapatalk.toyotaownersclubcomforums) application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/723297 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7129 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Argus Leader Print Edition (aka com.argusleader.android.prod) application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/634505 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7130 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7131 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Digital Content NewFronts 2014 (aka com.coreapps.android.followme.newfronts2014) application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/424097 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharin
CVE ID: CVE-2014-7132 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jambatan PBB Semporna (aka com.wJAMBATANPBBSEMPORNA) application 13523.82613 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/151825 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7133 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7134 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PROF. USMAN ALI AWHEELA (aka com.wPROFUAAWHEELA) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/432193 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7135 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:40:18.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ayuntamiento de Coana (aka com.wInfoCoa) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/732273 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7136 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T12:40:18.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7136/ - http://seclists.org/fulldisclosure/2014/Dec/47 - http://packetstormsecurity.com/f
s/security-advisories/cve-2014-7136/ - http://seclists.org/fulldisclosure/2014/Dec/47 - http://packetstormsecurity.com/files/129474/K7-Computing-Multiple-Products-K7FWFilt.sys-Privilege-Escalation.html
CVE ID: CVE-2014-7137 State: PUBLISHED Published: 2014-11-21T15:00:00 Last Updated: 2024-08-06T12:40:19.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parameter in an addcontact action, (2) ligne parameter in a swapstatut action, or (3) project_ref parameter to projet/tasks/contact.php; (4) lineid parameter in a deletecontact action, (5) ligne parameter in a swapstatut action, or (6) ref parameter to projet/contact.php; (7) id parameter to compta/bank/fiche.php, (8) contact/info.php, (9) holiday/index.php, (10) produ
o projet/contact.php; (7) id parameter to compta/bank/fiche.php, (8) contact/info.php, (9) holiday/index.php, (10) product/stock/fiche.php, (11) product/stock/info.php, or (12) in an edit action to product/stock/fiche.php; (13) productid parameter in an addline action to product/stock/massstockmove.php; (14) project_ref parameter to projet/tasks/note.php; (15) ref parameter to element.php, (16) ganttview.php, (17) note.php, or (18) tasks.php in projet/; (19) sall or (20) sref parameter to comm/mailing/liste.php; (21) search_bon, (22) search_ligne, (23) search_societe, or (24) search_code parameter to compta/prelevement/liste.php; (25) search_label parameter to compta/sociales/index.php; (26)
4) search_code parameter to compta/prelevement/liste.php; (25) search_label parameter to compta/sociales/index.php; (26) search_project parameter to projet/tasks/index.php; (27) search_societe parameter to compta/prelevement/demandes.php; (28) search_statut parameter to user/index.php; (29) socid parameter to compta/recap-compta.php, (30) societe/commerciaux.php, or (31) societe/rib.php; (32) sortorder, (33) sref, (34) sall, or (35) sortfield parameter to product/stock/liste.php; (36) statut parameter to adherents/liste.php or (37) compta/dons/liste.php; (38) tobuy or (39) tosell parameter to product/liste.php; (40) tobuy, (41) tosell, (42) search_categ, or (43) sref parameter to product/rea
tosell parameter to product/liste.php; (40) tobuy, (41) tosell, (42) search_categ, or (43) sref parameter to product/reassort.php; (44) type parameter to product/index.php; or the (a) sortorder or (b) sortfield parameter to (45) compta/paiement/cheque/liste.php, (46) compta/prelevement/bons.php, (47) compta/prelevement/rejets.php, (48) product/stats/commande.php, (49) product/stats/commande_fournisseur.php, (50) product/stats/contrat.php, (51) product/stats/facture.php, (52) product/stats/facture_fournisseur.php, (53) product/stats/propal.php, or (54) product/stock/replenishorders.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71189 - h
horders.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71189 - http://packetstormsecurity.com/files/129175/Dolibarr-ERP-And-CRM-3.5.3-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/56 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7137/ - http://www.securityfocus.com/archive/1/534020/100/0/threaded
CVE ID: CVE-2014-7138 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T12:40:19.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gce_feed_ids parameter in a gce_ajax action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70370 - https://www.htbridge.com/advisory/HTB23235 - https://github.com/pderksen/WP-Google-Calendar-Events/commit/a701ceeb410bdda9d96c9d3d12104630df5d5b43 - https://exchange.xforce.ibmcl
b.com/pderksen/WP-Google-Calendar-Events/commit/a701ceeb410bdda9d96c9d3d12104630df5d5b43 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96867 - http://www.securityfocus.com/archive/1/533640/100/0/threaded - http://packetstormsecurity.com/files/128626/WordPress-Google-Calendar-Events-2.0.1-Cross-Site-Scripting.html - https://wordpress.org/plugins/google-calendar-events/changelog