Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4877 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T11:27:36.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/wget.git/commit/?id=b4440d96cf8173d68ecaa07c36b8f4316ee794d0 - http://security.gentoo.org/glsa/glsa-201411-05.xml -
cgit/wget.git/commit/?id=b4440d96cf8173d68ecaa07c36b8f4316ee794d0 - http://security.gentoo.org/glsa/glsa-201411-05.xml - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - http://lists.gnu.org/archive/html/bug-wget/2014-10/msg00150.html - http://www.ubuntu.com/usn/USN-2393-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:121 - http://rhn.redhat.com/errata/RHSA-2014-1955.html - http://www.debian.org/security/2014/dsa-3062 - http://git.savannah.gnu.org/cgit/wget.git/commit/?id=18b0979357ed7dc4e11d4f2b1d7e0f5932d82aa7 - http://www.kb.cert.org/vuls/id/685996 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html - http:
tp://www.kb.cert.org/vuls/id/685996 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html - http://rhn.redhat.com/errata/RHSA-2014-1764.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00009.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00026.html - https://bugzilla.redhat.com/show_bug.cgi?id=1139181 - https://community.rapid7.com/community/metasploit/blog/2014/10/28/r7-2014-15-gnu-wget-ftp-symlink-arbitrary-filesystem-access - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/707
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/70751 - https://kc.mcafee.com/corporate/index?page=content&id=SB10106 - http://advisories.mageia.org/MGASA-2014-0431.html - https://github.com/rapid7/metasploit-framework/pull/4088
CVE ID: CVE-2014-4880 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T11:27:36.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35356 - http://packetstormsecurity.com/files/129187/Hikvision-DVR-RTSP-Request-Remote-Code-Execution.html
CVE ID: CVE-2014-4881 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T11:27:36.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PartyTrack library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/230145
CVE ID: CVE-2014-4882 State: PUBLISHED Published: 2015-06-23T16:00:00 Last Updated: 2024-08-06T11:27:36.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aptexx Resident Anywhere does not require authentication, which allows remote attackers to obtain sensitive information or modify data via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/595884
CVE ID: CVE-2014-4883 State: PUBLISHED Published: 2014-11-28T02:00:00 Last Updated: 2024-08-06T11:27:37.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/210620 - http://git.savannah.gnu.org/cgit/lwip.git/commit/?id=9fb46e120655ac481b2af8f865d5ae56c39b831a
CVE ID: CVE-2014-4884 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Conrad Hotel (aka com.wConradHotel) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/904489 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4885 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CPWORLD Close Protection World (aka com.tapatalk.closeprotectionworldcom) application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/918657 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4887 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Joint Radio Blues (aka com.nobexinc.wls_69685189.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/472321
CVE ID: CVE-2014-4888 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:37.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BattleFriends at Sea GOLD (aka com.tequilamobile.warshipslivegold) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/806633 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4889 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diabetic Diet Guide (aka com.wDiabeticDietGuide) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/771257 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4890 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nano Digest (aka com.magzter.nanodigest) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/722857
CVE ID: CVE-2014-4891 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CT iHub (aka com.concursive.ctihub) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/587953 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4892 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uControl Smart Home Automation (aka de.ucontrol) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/200753
CVE ID: CVE-2014-4894 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MyMetro (aka com.myrippleapps.mymetro) application 2.4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/540257 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4895 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Herpin Time Radio (aka com.herpin.time.radio) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/117329
CVE ID: CVE-2014-4896 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Parque Imperial (aka com.a792139893520606f84b2188a.a23428594a) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449353 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4897 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Touriosity Travelmag (aka com.magzter.touriositytravelmag) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/480153 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4898 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Harivijay (aka com.upasanhar.marathi.harivijay) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/439409 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4899 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Indian Cement Review (aka com.magzter.indiancementreview) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/876241 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4900 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The migme (aka com.projectgoth) application 4.03.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/428673
CVE ID: CVE-2014-4901 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bond Trading (aka com.appmakr.app613309) application 197705 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/560497
CVE ID: CVE-2014-4903 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kakao Bingo Garden (aka com.mocoga.bingogarden) application 1.0.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/793257 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4904 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crossmo Calendar (aka com.crossmo.calendar) application 1.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/430345 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4905 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clean Internet Browser (aka com.cleantab.browsesecure) application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/750753 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4906 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T11:27:36.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Brisbane & Queensland Alert (aka com.queensland.alert) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/825289 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-4907 State: PUBLISHED Published: 2014-07-11T10:00:00 Last Updated: 2024-08-06T11:27:37.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59535 - http://secunia.com/advisories/59603 - https://bugs.op5.com/view.php?id=8761 - http://sourceforge.net/p/pnp4nagios/code/ci/f846a6c9d007ca2bee05359af747619151195fc9 - http://www.op
/view.php?id=8761 - http://sourceforge.net/p/pnp4nagios/code/ci/f846a6c9d007ca2bee05359af747619151195fc9 - http://www.op5.com/blog/news/op5-monitor-6-3-1-release-notes - http://www.securityfocus.com/bid/68350 - http://openwall.com/lists/oss-security/2014/07/11/3 - http://docs.pnp4nagios.org/pnp-0.6/dwnld
CVE ID: CVE-2014-4908 State: PUBLISHED Published: 2014-07-11T10:00:00 Last Updated: 2024-08-06T11:27:37.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching (1) share/pnp/application/views/kohana_error_page.php or (2) share/pnp/application/views/template.php, leading to improper handling within an http-equiv="refresh" META element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lingej/pnp4nagios/commit/cb925073edeeb97eb4ce61a86cdafccc9b87f9bb - http://secunia.com/advisories/
- https://github.com/lingej/pnp4nagios/commit/cb925073edeeb97eb4ce61a86cdafccc9b87f9bb - http://secunia.com/advisories/58973 - https://github.com/lingej/pnp4nagios/commit/e4a19768a5c5e5b1276caf3dd5bb721a540ec014 - http://openwall.com/lists/oss-security/2014/07/11/3 - http://www.securityfocus.com/bid/68352
CVE ID: CVE-2014-4909 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T11:27:36.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html - https://trac.transmissionbt.com/wiki/Changes#version-2.84 - http://www.openwall.com/lists/oss-security/2014/07/10/4 - http:
ps://trac.transmissionbt.com/wiki/Changes#version-2.84 - http://www.openwall.com/lists/oss-security/2014/07/10/4 - http://www.securityfocus.com/bid/68487 - https://bugs.gentoo.org/show_bug.cgi?id=516822 - http://www.openwall.com/lists/oss-security/2014/07/11/5 - http://secunia.com/advisories/60108 - http://secunia.com/advisories/60527 - http://secunia.com/advisories/59897 - http://www.debian.org/security/2014/dsa-2988 - http://inertiawar.com/submission.go - http://www.ubuntu.com/usn/USN-2279-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1118290 - https://twitter.com/benhawkes/statuses/484378151959539712 - http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html - http://www.osvdb.o
wkes/statuses/484378151959539712 - http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html - http://www.osvdb.org/108997
CVE ID: CVE-2014-4910 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:27:36.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/108851 - http://seclists.org/oss-sec/2014/q3/39 - http://lists.x.org/archives/xorg-commit/2014-July/036840.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94746 - http://seclists.org/oss-sec/2014/q3/138
CVE ID: CVE-2014-4911 State: PUBLISHED Published: 2014-07-22T14:00:00 Last Updated: 2024-08-06T11:27:37.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit. Additional Analyst Notes: - CVE Program Container: References: - https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-02 - http://www.debian.org/security/2014/dsa-2981 - http://secunia.com/advisories/60215
CVE ID: CVE-2014-4912 State: PUBLISHED Published: 2018-03-22T04:00:00 Last Updated: 2024-08-06T11:27:36.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/33983/
CVE ID: CVE-2014-4913 State: PUBLISHED Published: 2019-12-15T21:24:36 Last Updated: 2024-08-06T11:34:36.052Z Vendors: zendframework Products: zendframework Problem Types: Potential XSS vector in multiple view helpers Description: ZF2014-03 has a potential cross site scripting vector in multiple view helpers Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-4913 - https://access.redhat.com/security/cve/cve-2014-4913 - http://www.openwall.com/lists/oss-security/2014/07/11/4 - http://www.securityfocus.com/bid/66971 - https://framework.zend.com/security/advisory/ZF2014-03