Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ensuse.org/opensuse-updates/2014-10/msg00023.html - http://secunia.com/advisories/61654 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 - http://secunia.com/advisories/62312 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1312.html - http://www-01.ibm.com/support/docview.wss?uid=swg21685604 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/61703 - http://www.ubuntu.com/usn/USN-2364-1 - http://secunia.com/advisories/61065 - http://marc.info/?l=bugtraq&m=141383196021590&w=2 - http://marc.info/?l=bugtraq&m=1413830
secunia.com/advisories/61065 - http://marc.info/?l=bugtraq&m=141383196021590&w=2 - http://marc.info/?l=bugtraq&m=141383081521087&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686445 - http://www-01.ibm.com/support/docview.wss?uid=swg21686131 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://secunia.com/advisories/61641 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 - http://www-01.ibm.com/support/docview.wss?uid=swg21685914 - http://seclists.org/fulldisclosure/2014/Oct/
=ssg1S1004898 - http://www-01.ibm.com/support/docview.wss?uid=swg21685914 - http://seclists.org/fulldisclosure/2014/Oct/0 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075 - https://support.apple.com/HT205267 - http://marc.info/?l=bugtraq&m=142721162228379&w=2 - http://secunia.com/advisories/60024 - http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html - http://secunia.com/advisories/61622 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash - http://openwall.com/lists/oss-security/2014/09/28/10 - http://secunia.com/a
scoSecurityAdvisory/cisco-sa-20140926-bash - http://openwall.com/lists/oss-security/2014/09/28/10 - http://secunia.com/advisories/62343 - http://secunia.com/advisories/61565 - https://www.suse.com/support/shellshock/ - http://support.apple.com/HT204244 - http://marc.info/?l=bugtraq&m=141450491804793&w=2 - http://secunia.com/advisories/61313 - http://marc.info/?l=bugtraq&m=142289270617409&w=2 - http://marc.info/?l=bugtraq&m=142358026505815&w=2 - http://secunia.com/advisories/61873 - http://openwall.com/lists/oss-security/2014/09/26/2 - http://secunia.com/advisories/61485 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html - http://secunia.com/advisories/61618 - https:
ttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html - http://secunia.com/advisories/61618 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 - http://marc.info/?l=bugtraq&m=141577297623641&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 - http://marc.info/?l=bugtraq&m=141383244821813&w=2 - http://secunia.com/advisories/61312 - http://secunia.com/advisories/60193 - http://www.vmware.com/security/advisories/VMSA-2014-0010.html - http://secunia.com/advisories/61479 - http://secunia.com/advisories/60063 - http://secunia.com/advisories/60034 - http://secunia.com/advisories/59907 - http://secunia.com/advisories/58200 - ht
3 - http://secunia.com/advisories/60034 - http://secunia.com/advisories/59907 - http://secunia.com/advisories/58200 - http://marc.info/?l=bugtraq&m=141577241923505&w=2 - http://secunia.com/advisories/61643 - http://www.novell.com/support/kb/doc.php?id=7015721 - http://www-01.ibm.com/support/docview.wss?uid=swg21687079 - http://secunia.com/advisories/61503 - http://www-01.ibm.com/support/docview.wss?uid=swg21686246 - http://rhn.redhat.com/errata/RHSA-2014-1354.html - http://marc.info/?l=bugtraq&m=142289270617409&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 - http://www.qnap.com/i/en/support/con_show.php?cid=61 - http://marc.info/?l=bugtraq&m=141694386919794&w=2 - http://se
5 - http://www.qnap.com/i/en/support/con_show.php?cid=61 - http://marc.info/?l=bugtraq&m=141694386919794&w=2 - http://secunia.com/advisories/61552 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 - https://support.citrix.com/article/CTX200223 - http://www-01.ibm.com/support/docview.wss?uid=swg21686447 - http://marc.info/?l=bugtraq&m=141330468527613&w=2 - http://secunia.com/advisories/61855 - http://secunia.com/advisories/60044 - http://secunia.com/advisories/61291 - http://marc.info/?l=bugtraq&m=141345648114150&w=2 - http://secunia.com/advisories/61287 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://www-01.ibm.com/s
marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://marc.info/?l=bugtraq&m=141383304022067&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1311.html - http://secunia.com/advisories/61128 - https://support.citrix.com/article/CTX200217 - http://secunia.com/advisories/60055 - http://secunia.com/advisories/61550 - http://secunia.com/advisories/61633 - http://www-01.ibm.com/support/docview.wss?uid=swg21686494 - https://kb.bluecoat.com/index?page=content&id=SA82 - http://lists.opensuse.org/opensuse-security-announce
=swg21686494 - https://kb.bluecoat.com/index?page=content&id=SA82 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html - http://secunia.com/advisories/61328 - http://www-01.ibm.com/support/docview.wss?uid=swg21685733 - http://secunia.com/advisories/61129 - http://secunia.com/advisories/61603 - http://secunia.com/advisories/61857 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879
CVE ID: CVE-2014-7188 State: PUBLISHED Published: 2014-10-02T14:00:00 Last Updated: 2024-08-06T12:40:19.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service (host crash) or read data from the hypervisor or other guests via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html - http://support.citrix.com/a
.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html - http://support.citrix.com/article/CTX201794 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://support.citrix.com/article/CTX200218 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140199.html - http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf - http://www.securitytracker.com/id/1030936 - http://xenbits.xen.org/xsa/advisory-108.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html - http://secunia.com/advisories/61664 - http://www.debian.org/security/2014/dsa-3041 - http://secunia.
tober/140418.html - http://secunia.com/advisories/61664 - http://www.debian.org/security/2014/dsa-3041 - http://secunia.com/advisories/61858 - http://secunia.com/advisories/61890 - http://security.gentoo.org/glsa/glsa-201412-42.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/96785 - http://www.securityfocus.com/bid/70198
CVE ID: CVE-2014-7189 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:40:19.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96693 - http://www.securityfocus.com/bid/70156 - http://www.openwall.com/lists/oss-security/2014/09/26/28 - https://groups.google.com/forum/#%21msg/golang-nuts/eeOHNw_shwU/OHALUmroA5kJ
CVE ID: CVE-2014-7190 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T12:40:19.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request to admin/system_shutdown.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70163 - http://seclists.org/fulldisclosure/2014/Sep/109 - http://packetstormsecurity.com/files/128455/Openfiler-2.99.1-Denial-Of-Service.html
CVE ID: CVE-2014-7191 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T12:40:19.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60026 - http://secunia.com/advisories/62170 - https://github.com/visionmedia/node-querystring/issues/104 - https://github.com/raymondfeng/node-querystring/commit/43a604b7847e56bba49d0ce3e222fe89569354d8 - https://
/issues/104 - https://github.com/raymondfeng/node-querystring/commit/43a604b7847e56bba49d0ce3e222fe89569354d8 - https://access.redhat.com/errata/RHSA-2016:1380 - https://nodesecurity.io/advisories/qs_dos_memory_exhaustion - http://www-01.ibm.com/support/docview.wss?uid=swg21687928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96729 - http://www-01.ibm.com/support/docview.wss?uid=swg21685987 - http://www-01.ibm.com/support/docview.wss?uid=swg21687263
CVE ID: CVE-2014-7192 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T12:40:19.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/substack/node-syntax-error/commit/9aa4e66eb90ec595d2dba55e6f9c2dd9a668b309 - https://nodesecurity.io/advisories/syntax-error-potential-script-injection - https://exchange.xforce.ibmcloud.com/vulnerabilities/967
ecurity.io/advisories/syntax-error-potential-script-injection - https://exchange.xforce.ibmcloud.com/vulnerabilities/96728 - http://www-01.ibm.com/support/docview.wss?uid=swg21690815
CVE ID: CVE-2014-7193 State: PUBLISHED Published: 2014-12-25T11:00:00 Last Updated: 2024-08-06T12:40:19.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web site that is visited by an application consumer. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/crumb_cors_token_disclosure - https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e36
ps://nodesecurity.io/advisories/crumb_cors_token_disclosure - https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c
CVE ID: CVE-2014-7194 State: PUBLISHED Published: 2014-11-21T02:00:00 Last Updated: 2024-08-06T12:40:19.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, Slingshot before 1.9.3, and Vault before 1.1.1 allow remote attackers to obtain sensitive information or modify data by leveraging agent access. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/assets/blt7454ec3ae638d8c4/mft-advisory-20141029-008.txt - http://www.tibco.com/mk/advisory.jsp
CVE ID: CVE-2014-7195 State: PUBLISHED Published: 2014-11-21T02:00:00 Last Updated: 2024-08-06T12:40:19.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/assets/blta5b5c969aff51474/2014-009-spotfire-advisory.txt - http://www.tibco.com/mk/advisory.jsp
CVE ID: CVE-2014-7196 State: REJECTED Published: 2015-02-15T20:00:00 Last Updated: 2015-02-15T18:57:00 Description: No description available.
CVE ID: CVE-2014-7198 State: PUBLISHED Published: 2019-03-31T23:38:46 Last Updated: 2024-08-06T12:40:19.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/security/advisories/2014-SV3-csrf/ - http://lists.openmicroscopy.org.uk/pipermail/ome-users/2014-November/004871.html
CVE ID: CVE-2014-7199 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T12:40:19.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.wikimedia.org/r/#/c/162777/ - http://www.debian.org/security/2014/dsa-3036 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-September/000161.html - http://www.openwall.com/lists/oss-security/2014/09/27/2 - http://secunia.com/advisor
nounce/2014-September/000161.html - http://www.openwall.com/lists/oss-security/2014/09/27/2 - http://secunia.com/advisories/61666 - https://bugzilla.wikimedia.org/show_bug.cgi?id=69008
CVE ID: CVE-2014-7200 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T12:40:19.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the tx_dmmjobcontrol_pi1[search][keyword] parameter to jobs/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.html - https://www.mogwaisecurity.de/advisories/MSA-2014-02.txt - http://typo3.org/
0-Cross-Site-Scripting-SQL-Injection.html - https://www.mogwaisecurity.de/advisories/MSA-2014-02.txt - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-012 - http://www.securityfocus.com/bid/70155 - http://seclists.org/fulldisclosure/2014/Sep/89
CVE ID: CVE-2014-7201 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T12:40:19.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the search function in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via the (1) education, (2) region, or (3) sector fields, as demonstrated by the tx_dmmjobcontrol_pi1[search][sector][] parameter to jobs/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injec
tainer: References: - http://packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.html - https://www.mogwaisecurity.de/advisories/MSA-2014-02.txt - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-012 - http://www.securityfocus.com/bid/70155 - http://seclists.org/fulldisclosure/2014/Sep/89
CVE ID: CVE-2014-7202 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:40:19.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/776 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96241 - https://github.com/zeromq/libzmq/pull/1188 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html - http://www.securityfoc
.com/zeromq/libzmq/pull/1188 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html - http://www.securityfocus.com/bid/70157 - https://github.com/zeromq/libzmq/issues/1190 - http://seclists.org/oss-sec/2014/q3/754 - http://secunia.com/advisories/62262
CVE ID: CVE-2014-7203 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:40:19.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/776 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html - https://github.com/zeromq/libzmq/pull/1189 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html - http://www.securityfocus.com/bid/70157 - https://exchange.xforce.ibmclo
use.org/opensuse-updates/2014-11/msg00101.html - http://www.securityfocus.com/bid/70157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96242 - http://seclists.org/oss-sec/2014/q3/754 - https://github.com/zeromq/libzmq/issues/1191 - http://secunia.com/advisories/62262
CVE ID: CVE-2014-7204 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:40:19.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2014-0415.html - http://www.ubuntu.com/usn/USN-2371-1 - http://www.debian.org/security/2014/dsa-3042 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742605 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:178 - http://www.openwall.com/lists/oss-security
ug=742605 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:178 - http://www.openwall.com/lists/oss-security/2014/09/29/40 - http://sourceforge.net/p/ctags/code/791/
CVE ID: CVE-2014-7205 State: PUBLISHED Published: 2014-10-08T17:00:00 Last Updated: 2024-08-06T12:40:19.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/bassmaster_js_injection - http://www.openwall.com/lists/oss-security/2014/09/30/10 - http://www.securityfocus.com/bid/70180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96730 - ht
2014/09/30/10 - http://www.securityfocus.com/bid/70180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96730 - https://www.exploit-db.com/exploits/40689/ - https://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4
CVE ID: CVE-2014-7206 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T12:40:19.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61333 - http://www.debian.org/security/2014/dsa-3048 - http://secunia.com/advisories/61768 - http://secunia.com/advisories/61158 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763780 - http://www.securityfocus.com/bid/70310 - http://www.ubuntu.com/usn/USN-2370-1 - https://exchange.xforce.ibmcloud
63780 - http://www.securityfocus.com/bid/70310 - http://www.ubuntu.com/usn/USN-2370-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96951
CVE ID: CVE-2014-7207 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T12:40:19.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2418-1 - http://www.ubuntu.com/usn/USN-2417-1 - http://www.debian.org/security/2014/dsa-3060 - http://www.openwall.com/lis
18-1 - http://www.ubuntu.com/usn/USN-2417-1 - http://www.debian.org/security/2014/dsa-3060 - http://www.openwall.com/lists/oss-security/2014/11/02/1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766195 - http://www.securityfocus.com/bid/70867
CVE ID: CVE-2014-7208 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T12:40:19.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/77 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
CVE ID: CVE-2014-7209 State: PUBLISHED Published: 2015-01-06T15:00:00 Last Updated: 2024-08-06T12:40:19.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71797 - http://secunia.com/advisories/61892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99570 - http://secunia.com/advisories/62079 - http://www.debian.org/security/2014/dsa-3114 - http://www.openwall.com/lists/oss-security/2014/12/31/8
CVE ID: CVE-2014-7210 State: PUBLISHED Published: 2025-06-26T20:52:47.356Z Last Updated: 2025-06-27T18:43:10.094Z Vendors: Debian Products: pdns Description: pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2016/05/msg00046.html - https://salsa.debian.org/debian/pdns/-/commit/f0de6b3583039bb63344fbd5eb246939264d7b05
CVE ID: CVE-2014-7211 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.