Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6350 State: PUBLISHED Published: 2014-11-11T22:00:00 Last Updated: 2024-08-06T12:10:13.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-6349. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031185 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-065 - http://www.securityfocus.com/bid/70940
CVE ID: CVE-2014-6351 State: PUBLISHED Published: 2014-11-11T22:00:00 Last Updated: 2024-08-06T12:10:13.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031185 - http://www.securityfocus.com/bid/70323 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-065
CVE ID: CVE-2014-6352 State: PUBLISHED Published: 2014-10-22T14:00:00.000Z Last Updated: 2025-10-22T00:05:34.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97714 - http://twitter.com/ohjeongwook/statuses/524795124270653440
https://exchange.xforce.ibmcloud.com/vulnerabilities/97714 - http://twitter.com/ohjeongwook/statuses/524795124270653440 - http://secunia.com/advisories/61803 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-064 - http://www.securitytracker.com/id/1031097 - http://blogs.technet.com/b/srd/archive/2014/11/11/assessing-risk-for-the-november-2014-security-updates.aspx - http://www.securityfocus.com/bid/70690 - https://technet.microsoft.com/library/security/3010060
CVE ID: CVE-2014-6353 State: PUBLISHED Published: 2014-11-11T22:00:00 Last Updated: 2024-08-06T12:10:13.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031185 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-065 - http://www.securityfocus.com/bid/70333
CVE ID: CVE-2014-6354 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T12:10:13.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-032 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE ID: CVE-2014-6355 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Component in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly process JPEG images, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Graphics Component Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-
nerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-085
CVE ID: CVE-2014-6356 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Invalid Index Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-081
CVE ID: CVE-2014-6357 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Use After Free Word Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.mi
d Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-081
CVE ID: CVE-2014-6358 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6359 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6360 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global Free Remote Code Execution in Excel Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-083
CVE ID: CVE-2014-6361 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-083
CVE ID: CVE-2014-6362 State: PUBLISHED Published: 2015-02-11T02:00:00 Last Updated: 2024-08-06T12:10:13.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031721 - http://www.securityfocus.com/bid/72467 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013
CVE ID: CVE-2014-6363 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080 - https://www.exploit-db.com/exploits/40721/ - https://www.verisign.com/en_US/security-services/se
lletins/2014/ms14-080 - https://www.exploit-db.com/exploits/40721/ - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1075 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-084
CVE ID: CVE-2014-6364 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082
CVE ID: CVE-2014-6365 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6328. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6366 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6367 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6368 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6369 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080 - http://www.securityfocus.com/bid/71452
CVE ID: CVE-2014-6370 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6371 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6372 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6373 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6374 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6375 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6376 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T12:10:13.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-6327 and CVE-2014-6329. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-6377 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T12:17:22.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet to the (1) interface or (2) loopback IP address, which triggers a processor exception in ip_RxData_8. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651 - http://www.securitytracker.com/id/1031006 - http://www.securityfocus.com/bid/
nfoCenter/index?page=content&id=JSA10651 - http://www.securitytracker.com/id/1031006 - http://www.securityfocus.com/bid/70368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96907
CVE ID: CVE-2014-6378 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T12:17:22.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R5, 13.2X50 before D20, 13.2X51 before D26 and D30, 13.2X52 before D15, 13.3 before R3, and 14.1 before R1 allows remote attackers to cause a denial of service (router protocol daemon crash) via a crafted RSVP PATH message. Additional Analyst Notes: - CVE Program Container: References: -
protocol daemon crash) via a crafted RSVP PATH message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031008 - http://www.securityfocus.com/bid/70363 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96906
CVE ID: CVE-2014-6379 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T12:17:22.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and D30, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when a RADIUS accounting server is configured as [system accounting destination radius], creates an entry in /var/etc/pam_radius.conf, which might allow remote attackers to
tem accounting destination radius], creates an entry in /var/etc/pam_radius.conf, which might allow remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96905 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10654 - http://www.securityfocus.com/bid/70365 - http://www.securitytracker.com/id/1031010
CVE ID: CVE-2014-6380 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T12:17:22.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X52 before D15, 13.3 before R1, when using an em interface to connect to a certain internal network, allows remote attackers to cause a denial of service (em driver bock and FPC reset or "go offline") via a series of crafted (1) CLNP fra
tackers to cause a denial of service (em driver bock and FPC reset or "go offline") via a series of crafted (1) CLNP fragmented packets, when clns-routing or ESIS is configured, or (2) IPv4 or (3) IPv6 fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10655 - http://www.securityfocus.com/bid/70369 - http://www.securitytracker.com/id/1031011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96904
CVE ID: CVE-2014-6381 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T12:17:23.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service (device disconnect) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71612 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662 - http://www.securitytracker.com/id/1031360
CVE ID: CVE-2014-6382 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T12:17:23.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge (BBE) router, allows remote attackers to cause a denial of service (jpppd crash and restart) by sending a crafted PAP Authenticate-Request after the PPPoE Discovery and LCP phase are complete. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72070 - https://kb.juniper.net/InfoCenter/index?page=co
rogram Container: References: - http://www.securityfocus.com/bid/72070 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10665
CVE ID: CVE-2014-6383 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T12:17:23.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10666 - http://www.securitytracker.com/id/1031549 - http://www.securityfocus.com/bid/72071
CVE ID: CVE-2014-6384 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T12:17:23.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the TACACS+ configuration, which allows local users to bypass the security policy and execute commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031547 - h
vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031547 - http://www.securityfocus.com/bid/72077 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10667
CVE ID: CVE-2014-6385 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T12:17:22.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH). Additional Analyst Notes: - CVE Program Container: References: - http://www.security
n IPsec Authentication Header (AH). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72072 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10668
CVE ID: CVE-2014-6386 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T12:17:23.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial of service (assertion failure and rpd restart) via a crafted BGP FlowSpec prefix. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10670 - http://www.securityfoc
ogram Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10670 - http://www.securityfocus.com/bid/72067 - http://www.securitytracker.com/id/1031548
CVE ID: CVE-2014-6387 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T12:17:23.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will a null byte, which triggers an unauthenticated bind. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/09/12/14 - http://www.openwall.com/lists/oss-security/2014/09/12/11 - http://www.mantisbt.org/bugs/view.php?id=17640 - http://www.openwall.com/lists/oss-security/2014/09/13/1
CVE ID: CVE-2014-6388 State: REJECTED Published: 2014-10-13T18:00:00 Last Updated: 2014-10-13T18:57:00 Description: No description available.