Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3876 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T10:57:18.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html - http://fex.rus.uni-stuttgart.de/fex.html - https://www.lsexperts.de/advisories/lse-2014-05-22.tx
s-Site-Scripting.html - http://fex.rus.uni-stuttgart.de/fex.html - https://www.lsexperts.de/advisories/lse-2014-05-22.txt
CVE ID: CVE-2014-3877 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T10:57:17.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html - http://fex.rus.uni-stuttgart.de/fex.html - https://www.lsexperts.de/advisories/lse-2014-05-22.txt
CVE ID: CVE-2014-3878 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T10:57:17.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in an add new contact action in the Contacts section or unspecified vectors in (2) an Add Group task in the Contacts section, (3) an add new event action in the Calendar section, or (4) the Task section. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclos
r (4) the Task section. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/19 - http://packetstormsecurity.com/files/126948/IPSwitch-IMail-12.4-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/67830 - http://www.securitytracker.com/id/1030335 - http://www.exploit-db.com/exploits/33633
CVE ID: CVE-2014-3879 State: PUBLISHED Published: 2020-02-18T16:57:15 Last Updated: 2024-08-06T10:57:17.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a policy that does not exist, which causes the loaded policy chain to no be discarded and allows context-dependent attackers to bypass authentication via a login (1) without a password or (2) with an incorrect password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67808 - http://www.openpam.org/browser/openpam/trunk/HISTORY - http://www.freebsd.org/security/adv
securityfocus.com/bid/67808 - http://www.openpam.org/browser/openpam/trunk/HISTORY - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:13.pam.asc - http://www.securitytracker.com/id/1030330
CVE ID: CVE-2014-3880 State: PUBLISHED Published: 2014-06-10T14:00:00 Last Updated: 2024-08-06T10:57:18.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2952 - http://secu
itional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2952 - http://secunia.com/advisories/59034 - http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc
CVE ID: CVE-2014-3881 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T10:57:18.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80006084/995199/index.html - http://jvn.jp/en/jp/JVN36259412/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000064
CVE ID: CVE-2014-3882 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T10:57:17.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://12net.jp/news/n20140623_01.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000062 - http://wordpress.org/plugins/login-rebuilder/changelog/ - http://jvn.jp/en/jp/JVN05329568/index.html
CVE ID: CVE-2014-3883 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:57:17.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action. Additional Analyst Notes: - CVE Program Container: References: - https://www.ipa.go.jp/security/ciadr/vul/20140620-jvn.html - http://jvn.jp/en/jp/JVN48805624/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000057
CVE ID: CVE-2014-3884 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T10:57:17.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000058 - http://jvn.jp/en/jp/JVN92737498/index.html
CVE ID: CVE-2014-3885 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T10:57:17.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000059 - http://jvn.jp/en/jp/JVN49974594/index.html
CVE ID: CVE-2014-3886 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T10:57:17.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN02213197/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000060
CVE ID: CVE-2014-3887 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T10:57:18.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioplaza.jp/shop/contents/rdiskmanual.aspx - https://jvn.jp/en/jp/JVN74608669/index.html
CVE ID: CVE-2014-3888 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T10:57:17.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf - http://www.exploit-db.com/exploits/34009 - http://ics-ce
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf - http://www.exploit-db.com/exploits/34009 - http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01 - http://osvdb.org/show/osvdb/108756 - http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html
CVE ID: CVE-2014-3889 State: PUBLISHED Published: 2014-07-02T14:00:00 Last Updated: 2024-08-06T10:57:18.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000065 - http://jvn.jp/en/jp/JVN85571806/index.html
CVE ID: CVE-2014-3890 State: PUBLISHED Published: 2014-07-02T14:00:00 Last Updated: 2024-08-06T10:57:17.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via a crafted IP packet, a different vulnerability than CVE-2014-3889. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN35998716/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000066
CVE ID: CVE-2014-3891 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:57:17.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN35376006/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000071 - http://www.rimarts.co.jp/index-j.html
CVE ID: CVE-2014-3892 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T10:57:17.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nexa Meridian before 2014 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000080 - http://www.securityfocus.com/bid/68724 - http://jvn.jp/en/jp/JVN36028879/index.html
CVE ID: CVE-2014-3893 State: REJECTED Published: 2020-02-05T18:20:13 Last Updated: 2020-02-05T18:20:13 Description: No description available.
CVE ID: CVE-2014-3894 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T10:57:18.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000079 - http://jvn.jp/en/jp/JVN41028866/index.html
CVE ID: CVE-2014-3895 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:57:18.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02 and earlier allow remote attackers to bypass authentication, and consequently obtain sensitive credential and configuration data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.j
iguration data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000087 - http://jvn.jp/en/jp/JVN94592501/index.html - http://www.iodata.jp/support/information/2014/qwatch/
CVE ID: CVE-2014-3896 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:57:17.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allow remote attackers to hijack the authentication of arbitrary users for requests that modify or delete data, as demonstrated by modifying data affecting authorization. Additional Analyst Notes: - CVE Program Container: References: - http://www.acmailer.jp/info/de.cgi?id=52 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000089 - http://jvn.jp/en/jp/JVN42511610/index.html
CVE ID: CVE-2014-3897 State: PUBLISHED Published: 2014-07-29T20:00:00 Last Updated: 2024-08-06T10:57:18.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000088 - http://www.din.or.jp/~hideyuki/home/cgi/mailer.html - http://jvn.jp/en/jp/JVN85748534/index.html
CVE ID: CVE-2014-3898 State: PUBLISHED Published: 2014-08-14T01:00:00 Last Updated: 2024-08-06T10:57:17.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000091 - http://jp.fujitsu.com/platform/server/primequest/products/2000/catalog/manual/support/note_140729_svom.html - http://jvn.jp/en/jp/JVN22534185/index.html - http://secunia.com/advisories/59210 - http://jp.fujitsu.com/platform/ser
- http://jvn.jp/en/jp/JVN22534185/index.html - http://secunia.com/advisories/59210 - http://jp.fujitsu.com/platform/server/primergy/note/page20.html
CVE ID: CVE-2014-3899 State: PUBLISHED Published: 2014-08-12T01:00:00 Last Updated: 2024-08-06T10:57:17.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN32726697/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000085
CVE ID: CVE-2014-3900 State: PUBLISHED Published: 2014-08-17T18:00:00 Last Updated: 2024-08-06T10:57:17.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/picture_modify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the associate[] field, a different vulnerability than CVE-2014-4649. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/bugs/view.php?id=3089 - http://jvn.jp/en/jp/JVN09717399/index.html - http://piwigo.org/dev/changeset/28678 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000093
CVE ID: CVE-2014-3901 State: PUBLISHED Published: 2014-08-12T23:00:00 Last Updated: 2024-08-06T10:57:17.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN07957080/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000097
CVE ID: CVE-2014-3902 State: PUBLISHED Published: 2014-08-15T10:00:00 Last Updated: 2024-08-06T10:57:17.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27702217/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000098 - https://www.cyberagent.co.jp/info/detail/id=9185 - https://play.google.com/store/apps/details?id=jp.ameba
CVE ID: CVE-2014-3903 State: PUBLISHED Published: 2014-08-19T10:00:00 Last Updated: 2024-08-06T10:57:17.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via crafted Exif data. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7534 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000100 - http://jvn.jp/en/jp/JVN27531188/index.html - http://jayj.dk/security/JVN27531188.html
CVE ID: CVE-2014-3904 State: PUBLISHED Published: 2014-08-17T18:00:00 Last Updated: 2024-08-06T10:57:18.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN48039501/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000095
CVE ID: CVE-2014-3905 State: PUBLISHED Published: 2014-08-17T18:00:00 Last Updated: 2024-08-06T10:57:17.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000096 - http://jvn.jp/en/jp/JVN04455183/index.html
CVE ID: CVE-2014-3906 State: PUBLISHED Published: 2014-08-19T10:00:00 Last Updated: 2024-08-06T10:57:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000099 - http://jvn.jp/en/jp/JVN20812625/index.html
CVE ID: CVE-2014-3907 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T10:57:18.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/wysija-newsletters/changelog/ - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000101 - http://jvn.jp/en/jp/JVN94409737/index.html
CVE ID: CVE-2014-3908 State: PUBLISHED Published: 2014-08-30T10:00:00 Last Updated: 2024-08-06T10:57:17.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000102 - http://jvn.jp/en/jp/JVN17637243/index.html
CVE ID: CVE-2014-3909 State: PUBLISHED Published: 2014-09-05T17:00:00 Last Updated: 2024-08-06T10:57:18.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN49672671/index.html - https://service.falconsc.com/service/product/patch/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000084
CVE ID: CVE-2014-3910 State: PUBLISHED Published: 2014-09-05T17:00:00 Last Updated: 2024-08-06T10:57:18.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50367052/995292/index.html - http://jvn.jp/en/jp/JVN50367052/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000103
CVE ID: CVE-2014-3911 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T10:57:18.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-170/ - http://www.zerodayinitiative.com/advisories/ZDI-14-172/ - http://www.zerodayinitiative.com/advisories/ZDI
/ZDI-14-170/ - http://www.zerodayinitiative.com/advisories/ZDI-14-172/ - http://www.zerodayinitiative.com/advisories/ZDI-14-168/ - http://www.zerodayinitiative.com/advisories/ZDI-14-167/ - http://www.securityfocus.com/bid/67822 - http://update.websamsung.net/Tools/iPOLiS%20Device%20Manager/iPOLiS%20Device%20Manager_v1.8.7_setup_Full.zip - http://www.zerodayinitiative.com/advisories/ZDI-14-171/
CVE ID: CVE-2014-3912 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T10:57:17.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-169 - http://www.securityfocus.com/bid/67823
CVE ID: CVE-2014-3913 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T10:57:17.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127152/Ericom-AccessNow-Server-Buffer-Overflow.html - http://www.securityfocus.com/bid/67777 - http://www.zerodayinitiative.com/advisories/ZDI-14-160 - http://www.ericom.com/security-ERM-2014-610.asp - http://www.exploit-db.com/exploits/33817