Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8823 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users to read data from arbitrary kernel-memory locations by leveraging root access and providing a crafted first argument. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=21 - http://www.securitytracker.com/id/1031650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100514 - http://support.apple.com/HT2042
tytracker.com/id/1031650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100514 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8824 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100516 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8825 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, which allows local users to gain privileges or spoof directory-service responses via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100517
CVE ID: CVE-2014-8826 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130147/OS-X-Gatekeeper-Bypass.html - http://www.exploit-db.com/exploits/35934 - http://www.securitytracker.com/id/1031650 - http://www.securityfocus.com/archive/1/534567/100/0/threaded - http://support.apple.com/HT204244 - http://www.securityfoc
ttp://www.securityfocus.com/archive/1/534567/100/0/threaded - http://support.apple.com/HT204244 - http://www.securityfocus.com/bid/72341 - http://www.osvdb.org/117659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100519 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://seclists.org/fulldisclosure/2015/Jan/109 - https://www.ampliasecurity.com/advisories/os-x-gatekeeper-bypass-vulnerability.html
CVE ID: CVE-2014-8827 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100521 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8828 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100522
CVE ID: CVE-2014-8829 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100523 - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8830 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted accessor element in a Collada file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100524 - https://support.apple.com/HT204659 - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htm
id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8831 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: security_taskgate in Apple OS X before 10.10.2 allows attackers to read group-ACL-restricted keychain items of arbitrary apps via a crafted app with a signature from a (1) self-signed certificate or (2) Developer ID certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100526 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8832 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100528 - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8833 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users' protected files via a Spotlight query. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100529 - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8834 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a printing preference file, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100531 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8835 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135701/OS-X-Sysmond-XPC-Type-Confusion-Privilege-Escalation.html - http://www.securitytracker.com/id/1031650 - http://www.exploit-db.com/exploi
-Type-Confusion-Privilege-Escalation.html - http://www.securitytracker.com/id/1031650 - http://www.exploit-db.com/exploits/35742/ - http://support.apple.com/HT204244 - https://code.google.com/p/google-security-research/issues/detail?id=121 - http://www.securityfocus.com/bid/71992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100530 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8836 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (arbitrary-size bzero of kernel memory) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100490 - http://support.apple.com/HT204244 - http://www.securitytracker.com/id/1031626 - http://lists.apple.com/archives/security-announ
support.apple.com/HT204244 - http://www.securitytracker.com/id/1031626 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8837 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100491 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8838 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the Gatekeeper protection mechanism by leveraging access to a revoked Developer ID certificate for signing a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com
204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100525
CVE ID: CVE-2014-8839 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.theregister.co.uk/2015/01/10/spotlight_caught_spreading_your_delicates/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/100527 - http://securitytracker.com/id/1031521
g_your_delicates/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/100527 - http://securitytracker.com/id/1031521 - http://support.apple.com/HT204244 - http://heise.de/newsticker/meldung/Datenschutzpanne-in-Mac-OS-X-Yosemite-2514198.html - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8840 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari sandbox protection mechanism by leveraging redirection of an SSL URL to the iTunes Store. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/HT204245 - http://zerodayinitiative.com/advisories/ZDI-15-010/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/100533 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html - http://www.securitytracker.com/id/1031652
CVE ID: CVE-2014-8841 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:58.044Z Description: No description available.
CVE ID: CVE-2014-8842 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:58.417Z Description: No description available.
CVE ID: CVE-2014-8843 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8844 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8845 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8846 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8847 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8848 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8849 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8850 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8851 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8852 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8853 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8854 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8855 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8856 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8857 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8858 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8859 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8860 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8861 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8862 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8863 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8864 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8865 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8866 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T13:26:02.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://secunia.com/advisories/62672 - http://support.citrix.com/article/CTX201794 - http://support.citrix.com/article/CTX200288 - http://xenbits.xen
s/62672 - http://support.citrix.com/article/CTX201794 - http://support.citrix.com/article/CTX200288 - http://xenbits.xen.org/xsa/advisory-111.html - http://www.debian.org/security/2015/dsa-3140 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html - http://www.securityfocus.com/bid/71332 - http://secunia.com/advisories/59937
CVE ID: CVE-2014-8867 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T13:26:02.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0783.html - https://security.gentoo.org/glsa/201504-04 - http://secunia.com/advisories/62672 - http://support.citrix.com/article/CTX201794 - http://suppor
o.org/glsa/201504-04 - http://secunia.com/advisories/62672 - http://support.citrix.com/article/CTX201794 - http://support.citrix.com/article/CTX200288 - http://www.debian.org/security/2015/dsa-3140 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html - http://xenbits.xenproject.org/xsa/advisory-112.html - http://secunia.com/advisories/59949 - http://www.securityfocus.com/bid/71331
CVE ID: CVE-2014-8868 State: PUBLISHED Published: 2014-12-07T21:00:00 Last Updated: 2024-08-06T13:26:02.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator username and password, and possibly other sensitive information, via a request to /4. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2014-011 - http://seclists.org/fulldisclosure/2014/Dec/2 - http://www.securityfocus.com/archive/1/534128/100/0/threaded
CVE ID: CVE-2014-8869 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:26:02.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) app_android_id or (2) app_kindle_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.tapatalk.com/threads/tapatalk-for-woltlab-plugin-release-announcement-and-changelog.19540 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-0
r-woltlab-plugin-release-announcement-and-changelog.19540 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-015/-cross-site-scripting-in-tapatalk-plugin-for-woltlab-burning-board-4-0 - http://www.securityfocus.com/archive/1/534449/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/31 - http://www.securityfocus.com/bid/71997
CVE ID: CVE-2014-8870 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:26:02.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the board_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/32 - http://www.securityfocus.com/bid/71998 - http://www.securityfocus.com/archive/1/534450/100/0/threaded
CVE ID: CVE-2014-8871 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:33:11.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534722/100/1600/threaded - http://seclists.org/fulldisclosure/2015/Feb/63 - http://www.securityfocus.com/bid/72681 - http://packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosu
curityfocus.com/bid/72681 - http://packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosure-Traversal.html
CVE ID: CVE-2014-8872 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-06T13:33:11.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130040/AVM-FRITZ-Box-Firmware-Signature-Bypass.html - http://seclists.org/fulldisclosure/2015/Jan/86 - http://www.securityfocus.com/archive/1/534522/100/0/threaded
CVE ID: CVE-2014-8873 State: PUBLISHED Published: 2015-11-09T16:00:00 Last Updated: 2024-08-06T13:33:11.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3235 - http://www.securityfocus.com/bid/76019 - http://www.openwall.com/lists/oss-security/2015/07/18/2 - http://www.debian.org/security/2015/dsa-3316