Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9220 State: PUBLISHED Published: 2014-12-03T01:00:00 Last Updated: 2024-08-06T13:40:24.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-02/msg00039.html - http://openwall.com/lists/oss-security/2014/11/30/2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147753.html - http://www.openvas.org/OVSA20141128.html - https://www.alienv
.org/pipermail/package-announce/2015-January/147753.html - http://www.openvas.org/OVSA20141128.html - https://www.alienvault.com/forums/discussion/4415/
CVE ID: CVE-2014-9221 State: PUBLISHED Published: 2015-01-07T19:00:00 Last Updated: 2024-08-06T13:40:24.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62095 - http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html - http://www.ubuntu.com/usn/USN-2450-1 - http://www.debian.org/security/2015/dsa-3118 - http://secunia.com/adviso
9.html - http://www.ubuntu.com/usn/USN-2450-1 - http://www.debian.org/security/2015/dsa-3118 - http://secunia.com/advisories/62071 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html - http://secunia.com/advisories/62663 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html - http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html - http://secunia.com/advisories/62083 - http://www.securityfocus.com/bid/71894
CVE ID: CVE-2014-9222 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:40:24.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://mis.fortunecook.ie/ - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm - http://www.securityfocus.com/bid/105173 - https://www.allegrosoft.com/allegro-software-urges
-advisories/hw-407666.htm - http://www.securityfocus.com/bid/105173 - https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html - http://seclists.org/fulldisclosure/2014/Dec/87 - http://www.kb.cert.org/vuls/id/561444
CVE ID: CVE-2014-9223 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:40:24.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization. Additional Analyst Notes: - CVE Program Container: References: - http://mis.fortunecook.ie/ - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm - https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmwa
/security-advisories/hw-407666.htm - https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html
CVE ID: CVE-2014-9224 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T13:40:24.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=secu
iner: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/archive/1/534527/100/0/threaded - http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html - http://seclists.org/fulldisclosure/2015/Jan/91 - http://www.securityfocus.com/bid/72093
CVE ID: CVE-2014-9225 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T13:40:24.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/archive/1
/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/archive/1/534527/100/0/threaded - http://www.securityfocus.com/bid/72094 - http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html - http://seclists.org/fulldisclosure/2015/Jan/91
CVE ID: CVE-2014-9226 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T13:40:23.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/bid/72095 - http://www.securityfocus.com/archiv
=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/bid/72095 - http://www.securityfocus.com/archive/1/534527/100/0/threaded - http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html - http://seclists.org/fulldisclosure/2015/Jan/91
CVE ID: CVE-2014-9227 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T13:40:25.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150617_00 - http://www.securitytracker.com/id/1032616 - http://www.securityfocus.com/bid/75203
CVE ID: CVE-2014-9228 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T13:40:24.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service (blocked system shutdown) by triggering an unspecified deadlock condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150617_00 - http://www.securitytracker.com/id/1032616 - http://www.securityfocus.com/bid/75202
CVE ID: CVE-2014-9229 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T13:40:24.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150617_00 - http://www.securityfocus.com/bid/75204 - http://www.securitytracker.com/id
id=security_advisory&year=&suid=20150617_00 - http://www.securityfocus.com/bid/75204 - http://www.securitytracker.com/id/1032616
CVE ID: CVE-2014-9230 State: PUBLISHED Published: 2015-06-28T19:00:00 Last Updated: 2024-08-06T13:40:24.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75288 - http://www.securitytracker.com/id/1032710 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00
CVE ID: CVE-2014-9231 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-9232 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-9233 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-9234 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-17T00:06:44.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/42 - http://websecurity.com.ua/7250/ - http://packetstormsecurity.com/files/129138/D-Link-DCS-2103-Directory-Traversal.html
CVE ID: CVE-2014-9235 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-17T00:37:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) _action parameter to group.php or (2) user.php or the (3) location_id parameter to photos.php in php/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/45
CVE ID: CVE-2014-9236 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-17T04:04:18.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) photographer_id or (2) _crumb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/45
CVE ID: CVE-2014-9237 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-16T16:33:52.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129129/Proticaret-E-Commerce-Script-3.0-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/43
CVE ID: CVE-2014-9238 State: PUBLISHED Published: 2014-12-03T21:00:00 Last Updated: 2024-08-06T13:40:24.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash) character. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/42 - http://websecurity.com.ua/7250/ - http://packetstormsecurity.com/files/129138/D-Link-DCS-2103-Directory-Traversal.html - http://www.securityfocus.com/bid/71484
CVE ID: CVE-2014-9239 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-16T17:38:45.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute arbitrary SQL commands via the id[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://community.invisionpower.com/blogs/entry/9705-ipboard-33x-34x-security-update/ - http://seclists.org/fulldisclosure/2014/Nov/20 - http://community.invisionpower.com/blogs/entry/9704-active-secu
date/ - http://seclists.org/fulldisclosure/2014/Nov/20 - http://community.invisionpower.com/blogs/entry/9704-active-security-exploit/
CVE ID: CVE-2014-9240 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-17T03:03:49.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the question_id parameter in a do_register action. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/ - http://packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2014-9241 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-16T23:42:18.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to report.php, (2) signature parameter in a do_editsig action to usercp.php, or (3) title parameter in the style-templates module in an edit_template action or (4) file parameter in the config-languages module in an edit action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2014/11
action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/ - http://packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2014-9242 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-16T18:43:53.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the page_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html - http://seclists.org/fulldisclosure/2014/Nov/44
CVE ID: CVE-2014-9243 State: PUBLISHED Published: 2014-12-03T21:00:00Z Last Updated: 2024-09-17T00:56:02.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to wb/admin/admintools/tool.php or (2) section_id parameter to edit_module_files.php, (3) news/add_post.php, (4) news/modify_group.php, (5) news/modify_post.php, or (6) news/modify_settings.php in wb/modules/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-
Container: References: - http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html - http://seclists.org/fulldisclosure/2014/Nov/44
CVE ID: CVE-2014-9244 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-9245 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9246 State: REJECTED Published: 2014-12-15T17:27:00 Last Updated: 2014-12-13T02:57:01 Description: No description available.
CVE ID: CVE-2014-9247 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user account, (2) e-mail address, and (3) role information by visiting the ZenUsers (aka User Manager) page, aka ZEN-15389. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9248 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain access via a brute-force attack, aka ZEN-15406. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9249 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9250 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9251 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9252 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:40:24.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive information by reading database entries, aka ZEN-15416. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-9253 State: PUBLISHED Published: 2014-12-17T18:00:00 Last Updated: 2024-08-06T13:40:24.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php. Additional Analyst Notes: - CVE Program Container: References: - http://security.szurek.pl/dokuwiki-20140929a-xss.html - http://www.securitytracker.com/id/1031369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99291 - https://www.dokuwiki.org/changes - h
acker.com/id/1031369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99291 - https://www.dokuwiki.org/changes - https://github.com/splitbrain/dokuwiki/commit/778ddf6f2cd9ed38b9db2d73e823b8c21243a960 - http://seclists.org/oss-sec/2014/q4/1050 - http://advisories.mageia.org/MGASA-2014-0540.html - http://www.securityfocus.com/bid/71671
CVE ID: CVE-2014-9254 State: PUBLISHED Published: 2014-12-31T21:00:00 Last Updated: 2024-08-06T13:40:24.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks via the code parameter in an unsubscribe action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61794 - http://www.minibb.com/forums/news-9/blind-sql-injection-fix-6430.html - http://security.szurek.pl/minibb-31-blind-sql-injection.html
CVE ID: CVE-2014-9258 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:40:24.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147271.html - http://www.exploit-db.com/exploits/35528 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147313.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 - http://secur
ckage-announce/2015-January/147313.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 - http://security.szurek.pl/glpi-085-blind-sql-injection.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147296.html - http://secunia.com/advisories/61367 - http://advisories.mageia.org/MGASA-2015-0017.html - http://www.glpi-project.org/spip.php?page=annonce&id_breve=334&lang=en - http://osvdb.org/show/osvdb/115957