Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4967 State: PUBLISHED Published: 2020-02-18T14:49:40 Last Updated: 2024-08-06T11:34:36.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-004.html - https://github.com/ansible/ansible/commit/62a1295a3e08
ferences: - http://www.ocert.org/advisories/ocert-2014-004.html - https://github.com/ansible/ansible/commit/62a1295a3e08cb6c3e9f1b2a1e6e5dcaeab32527
CVE ID: CVE-2014-4968 State: PUBLISHED Published: 2020-02-12T00:19:24 Last Updated: 2024-08-06T11:34:36.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34088/
CVE ID: CVE-2014-4971 State: PUBLISHED Published: 2014-07-26T15:00:00 Last Updated: 2024-08-06T11:34:36.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031025 - https://docs.microsoft.com/en-us/securit
VE Program Container: References: - http://www.securitytracker.com/id/1031025 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062 - http://www.securityfocus.com/bid/68764 - http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx - https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt - http://www.securityfocus.com/archive/1/532844/100/0/threaded - http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html - http://www.exploit-db.com/exploits/34112 - http://www.exploit-db.com/exploits/34131 - https://www.korelogic.com/Resources/Advisories/KL-001
db.com/exploits/34112 - http://www.exploit-db.com/exploits/34131 - https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt - http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html - http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html - http://www.exploit-db.com/exploits/34982 - http://seclists.org/fulldisclosure/2014/Jul/97 - http://www.securityfocus.com/archive/1/532843/100/0/threaded - http://www.osvdb.org/109387 - http://secunia.com/advisories/60974 - http://seclists.org/fulldisclosure/2014/Jul/96
CVE ID: CVE-2014-4972 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T11:34:37.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravity_forms. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8232 - https://g0blin.co.uk/cve-2014-4972/
CVE ID: CVE-2014-4973 State: PUBLISHED Published: 2014-09-23T15:00:00 Last Updated: 2024-08-06T11:34:36.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/ - http://seclists.org/fulldisclosure/2014/Aug/52
CVE ID: CVE-2014-4974 State: PUBLISHED Published: 2014-11-04T16:00:00 Last Updated: 2024-08-06T11:34:36.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/ - http://seclists.org/fulldisclosure/2014/Oct/118 - http://packetstormsecurity.com/fi
security-advisories/cve-2014-4974/ - http://seclists.org/fulldisclosure/2014/Oct/118 - http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html - http://www.securityfocus.com/bid/70770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98312
CVE ID: CVE-2014-4975 State: PUBLISHED Published: 2014-11-15T20:00:00 Last Updated: 2024-08-06T11:34:36.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/09/13 - http://rhn.redhat.com/errata/RHSA-2014-1912.html - http://www.securityfocus.com/bid/68474 - http://www.oracle.com/technet
ttp://rhn.redhat.com/errata/RHSA-2014-1912.html - http://www.securityfocus.com/bid/68474 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2014-1913.html - https://bugzilla.redhat.com/show_bug.cgi?id=1118158 - http://www.debian.org/security/2015/dsa-3157 - http://advisories.mageia.org/MGASA-2014-0472.html - http://www.ubuntu.com/usn/USN-2397-1 - https://bugs.ruby-lang.org/issues/10019 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778 - http://rhn.redhat.com/errata/RHSA-2014-1914.html - https://exchange.xforce.ibmcloud.com/vulnerabi
ision&revision=46778 - http://rhn.redhat.com/errata/RHSA-2014-1914.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94706
CVE ID: CVE-2014-4976 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T11:34:37.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94438 - http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html - http://www.securityfocus.com/bid/68495 - https://gist.git
onicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html - http://www.securityfocus.com/bid/68495 - https://gist.github.com/brandonprry/36b4b8df1cde279a9305 - https://gist.github.com/brandonprry/76741d9a0d4f518fe297
CVE ID: CVE-2014-4977 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T11:34:36.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit function, (3) methodDetail parameter in the methodDetail function, or (4) xcNetworkDetail parameter in the xcNetworkDetail function in d4d/exporters.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploi
in d4d/exporters.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39836/ - http://seclists.org/fulldisclosure/2014/Jul/44 - http://packetstormsecurity.com/files/137098/Dell-SonicWALL-Scrutinizer-11.01-methodDetail-SQL-Injection.html - http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94439 - http://www.securityfocus.com/bid/68495 - https://gist.github.com/brandonprry/36b4b8df1cde279a9305 - https://gist.github.com/brandonprry/76741d9a0d4f518fe297
CVE ID: CVE-2014-4978 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T11:34:37.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-graph. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/16/15 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754899 - https://bugzilla.redhat.com/show_bug.cgi?id=1120093 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.html - https://g
om/show_bug.cgi?id=1120093 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.html - https://github.com/rawstudio/rawstudio/commit/9c2cd3c93c05d009a91d84eedbb85873b0cb505d - http://www.securityfocus.com/bid/68671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94633
CVE ID: CVE-2014-4979 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2024-08-06T11:34:36.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in an mvhd atom. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-14-264/ - https://support.apple.com/kb/HT6493 - http://www.securityfocus.com/bid/68852 - http://www.securitytracker.com/id/1030638 - http://support.apple.com/kb/HT6443
CVE ID: CVE-2014-4980 State: PUBLISHED Published: 2014-07-23T14:00:00 Last Updated: 2024-08-06T11:34:36.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.tenable.com/security/tns-2014-05 - http://www.securityfocus.com/archive/1/532839/100/0/threaded - http://www.halock.com/blog/cve-2014-4980-parameter-tampering-nessus-web-ui/ - http://www.securityfocus.com/bid/68782 - http://www.securitytracker.com/id/1030614 - http://packetstormse
ssus-web-ui/ - http://www.securityfocus.com/bid/68782 - http://www.securitytracker.com/id/1030614 - http://packetstormsecurity.com/files/127532/Tenable-Nessus-5.2.7-Parameter-Tampering-Authentication-Bypass.html - http://www.osvdb.org/109376
CVE ID: CVE-2014-4981 State: PUBLISHED Published: 2020-02-17T21:21:42 Last Updated: 2024-08-06T11:34:36.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68844 - http://packetstormsecurity.com/files/127593/LPAR2RRD-3.5-4.53-Command-Injection.html - http://ocert.org/advisories/ocert-2014-005.html - http://www.openwall.com/lists/oss-security/2014/07/23/6 - http://www.lpar2rrd.com/note453-01.htm - https://exchange.xforce.ibmcloud.com/vulne
om/lists/oss-security/2014/07/23/6 - http://www.lpar2rrd.com/note453-01.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/94784
CVE ID: CVE-2014-4982 State: PUBLISHED Published: 2020-01-10T12:56:12 Last Updated: 2024-08-06T11:34:37.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127593/LPAR2RRD-3.5-4.53-Command-Injection.html - http://www.openwall.com/lists/oss-security/2014/07/23/6 - http://www.securityfocus.com/bid/68850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94785
CVE ID: CVE-2014-4984 State: PUBLISHED Published: 2020-01-10T12:18:40 Last Updated: 2024-08-06T11:34:37.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Déjà Vu Crescendo Sales CRM has remote SQL Injection Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127769/Crescendo-Sales-CRM-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95176 - https://www.securityfocus.com/bid/69085/info
CVE ID: CVE-2014-4986 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T11:34:37.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (2) column name that is improperly handled during construction of an AJAX confirmation message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html - https://security.gentoo.org/glsa/201505-03 - h
ces: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html - https://security.gentoo.org/glsa/201505-03 - http://www.securityfocus.com/bid/68803 - http://www.phpmyadmin.net/home_page/security/PMASA-2014-6.php - http://secunia.com/advisories/60397 - https://github.com/phpmyadmin/phpmyadmin/commit/29a1f56495a7d1d98da31a614f23c0819a606a4d
CVE ID: CVE-2014-4987 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T11:34:37.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html - https://security.gentoo.org/glsa/201505-03 - http://www.phpmyadmin.net/home_page/security/PMASA-2014-7.php - http://secunia.com/advisories/60397 - http://www.securityfocus.com/bid/68804 - htt
home_page/security/PMASA-2014-7.php - http://secunia.com/advisories/60397 - http://www.securityfocus.com/bid/68804 - https://github.com/phpmyadmin/phpmyadmin/commit/395265e9937beb21134626c01a21f44b28e712e5
CVE ID: CVE-2014-4991 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) lib/dataset/database/mysql.rb and (2) lib/dataset/database/postgresql.rb in the codders-dataset gem 1.3.2.1 for Ruby place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.securityfocus.com/bid/68733 - http://www.openwall.com/lists/oss-security/2014/07/07/8 - http://www.vapid.dhs.org/advisories/codders-dataset-1.3.2.1
- http://www.openwall.com/lists/oss-security/2014/07/07/8 - http://www.vapid.dhs.org/advisories/codders-dataset-1.3.2.1.html
CVE ID: CVE-2014-4992 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:36.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/cap-strap/helpers.rb in the cap-strap gem 0.1.5 for Ruby places credentials on the useradd command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/07/9 - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/cap-strap-0.1.5.html
CVE ID: CVE-2014-4993 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and (2) lib/backup/cli/utility.rb in the backup_checksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/backup-agoddard-3.0.28.html - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html - http://w
penwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html - http://www.openwall.com/lists/oss-security/2014/07/07/12 - http://www.openwall.com/lists/oss-security/2014/07/07/11
CVE ID: CVE-2014-4994 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.openwall.com/lists/oss-security/2014/07/07/13 - http://www.vapid.dhs.org/advisories/gyazo-1.0.0.html
CVE ID: CVE-2014-4995 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to obtain sensitive information by reading the MySQL root password from a temporary file before it is removed. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94745 - http://www.openwall.com/lists/oss-security/2014/07/07/14 - http://www.vapid.dhs.org/advisories/VladTheEnterprising-0.2.html - http://w
nwall.com/lists/oss-security/2014/07/07/14 - http://www.vapid.dhs.org/advisories/VladTheEnterprising-0.2.html - http://www.securityfocus.com/bid/68729
CVE ID: CVE-2014-4996 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:36.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to write to arbitrary files via a symlink attack on /tmp/my.cnf.#{target_host}. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68731 - http://www.openwall.com/lists/oss-security/2014/07/17/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94744 - http://www.openwall.com/lists/oss-security/2014/07/07/14 - http://www.vapid.dhs.org/advisories/VladTheEnterprising-0.2.html
CVE ID: CVE-2014-4997 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:36.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.openwall.com/lists/oss-security/2014/07/07/16 - http://www.vapid.dhs.org/advisories/point-cli-0.0.1.html - http://www.securityfocus.com/bid/68735
CVE ID: CVE-2014-4998 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: test/tc_database.rb in the lean-ruport gem 0.3.8 for Ruby places the mysql user password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/07/18 - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/lean-ruport-0.3.8.html
CVE ID: CVE-2014-4999 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: vendor/plugins/dataset/lib/dataset/database/mysql.rb in the kajam gem 1.0.3.rc2 for Ruby places the mysql user password on the (1) mysqldump command line in the capture function and (2) mysql command line in the restore function, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/kajam-1.0.3.rc2.html - http://www.openwall.com/lists/oss-secur
curity/2014/07/17/5 - http://www.vapid.dhs.org/advisories/kajam-1.0.3.rc2.html - http://www.openwall.com/lists/oss-security/2014/07/07/19
CVE ID: CVE-2014-54321 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.
CVE ID: CVE-2014-59156 State: REJECTED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-17T03:42:44.159Z Description: No description available.
CVE ID: CVE-2014-5000 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/lawn-login-0.0.7.html - http://www.openwall.com/lists/oss-security/2014/07/07/20
CVE ID: CVE-2014-5001 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ksymfony1.rb in the kcapifony gem 2.1.6 for Ruby places database user passwords on the (1) mysqldump, (2) pg_dump, (3) mysql, and (4) psql command lines, which allows local users to obtain sensitive information by listing the processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/07/21 - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/kcapifony-2.1.6.html