Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2811 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2822, CVE-2014-2823, and CVE-2014-4057. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - https://exchange.xforce.ibmcloud.
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94973 - http://secunia.com/advisories/60670 - http://www.securityfocus.com/bid/69106
CVE ID: CVE-2014-2812 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-2813 State: PUBLISHED Published: 2014-07-08T22:00:00 Last Updated: 2024-08-06T10:28:46.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2786 and CVE-2014-2792. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037 - http://www.securityfocus.com/bid/68390 - http://secunia.com/advisories/59775 - http://www.security
etins/2014/ms14-037 - http://www.securityfocus.com/bid/68390 - http://secunia.com/advisories/59775 - http://www.securitytracker.com/id/1030532
CVE ID: CVE-2014-2814 State: PUBLISHED Published: 2014-07-08T22:00:00 Last Updated: 2024-08-06T10:28:45.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka "Service Bus Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59780 - http://www.securityfocus.com/bid/68393 - http://www.securitytracker.com/id/1030538 - https://support.microsoft.com/kb/2972621 - https://docs.microsoft.com/en-us/security-
w.securitytracker.com/id/1030538 - https://support.microsoft.com/kb/2972621 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-042
CVE ID: CVE-2014-2815 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030717 - http://secunia.com/advisories/60672 - http://blogs.technet.com/b/srd/archive/2014/08/12/assessing-risk-for-the-august-2014-security-updates.aspx - https://docs.microsoft.com/en-us/security-updates/secur
08/12/assessing-risk-for-the-august-2014-security-updates.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-048 - http://www.securityfocus.com/bid/69098 - http://packetstormsecurity.com/files/164419/Microsoft-Office-OneNote-2007-Remote-Code-Execution.html
CVE ID: CVE-2014-2816 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69099 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-050 - http://secunia.com/advisories/60675 - http://www
.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-050 - http://secunia.com/advisories/60675 - http://www.securitytracker.com/id/1030720
CVE ID: CVE-2014-2817 State: PUBLISHED Published: 2014-08-12T21:00:00.000Z Last Updated: 2025-10-22T00:05:36.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/69092 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE ID: CVE-2014-2818 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94975 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69115 - http://secunia.com/advisor
s/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69115 - http://secunia.com/advisories/60670
CVE ID: CVE-2014-2819 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:45.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69095 - http://www.securitytracker.com/id/1030715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94976 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE ID: CVE-2014-2820 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2774, CVE-2014-2826, CVE-2014-2827, and CVE-2014-4063. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - https://exchange.xforce
id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94977 - http://www.securityfocus.com/bid/69116 - http://secunia.com/advisories/60670
CVE ID: CVE-2014-2821 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:45.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94978 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69117 - http://secunia.com/ad
/en-us/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69117 - http://secunia.com/advisories/60670
CVE ID: CVE-2014-2822 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:46.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2823, and CVE-2014-4057. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94979 - https://docs.microsoft.com/en-us/security-updates/securi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94979 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69118 - http://secunia.com/advisories/60670
CVE ID: CVE-2014-2823 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:44.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, and CVE-2014-4057. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94980 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securi
erabilities/94980 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - http://www.securityfocus.com/bid/69119
CVE ID: CVE-2014-2824 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:46.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69120 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
curitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94981
CVE ID: CVE-2014-2825 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:46.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-4050, CVE-2014-4055, and CVE-2014-4067. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94982 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/s
orce.ibmcloud.com/vulnerabilities/94982 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://www.securityfocus.com/bid/69121 - http://secunia.com/advisories/60670
CVE ID: CVE-2014-2826 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:45.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2827, and CVE-2014-4063. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94983 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-upda
d.com/vulnerabilities/94983 - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - http://www.securityfocus.com/bid/69122
CVE ID: CVE-2014-2827 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T10:28:46.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2826, and CVE-2014-4063. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advi
id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - http://www.securityfocus.com/bid/69124
CVE ID: CVE-2014-2828 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T10:28:45.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1688.html - http://www.openwall.com/lists/oss-security/2014/04/10/20 - https://bugs.launchpad.net/keystone/+bug/1300274
CVE ID: CVE-2014-2829 State: PUBLISHED Published: 2014-04-11T01:00:00Z Last Updated: 2024-09-17T01:55:52.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - https://github.com/esl/MongooseIM/commit/586d96cc12ef218243a3466354b4d208b5472a6c
CVE ID: CVE-2014-2830 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T10:28:45.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://lists.samba.org/archive/samba-technical/2014-July/101132.html - https://bugs.mageia.org/show_bug.cgi?id=13386 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:114 - https://bugzilla.redhat.com/show_bug.cgi?id=1086224 - https://bugzilla.novell.com/show_bug.cgi?id=870
e=MDVSA-2015:114 - https://bugzilla.redhat.com/show_bug.cgi?id=1086224 - https://bugzilla.novell.com/show_bug.cgi?id=870168 - http://advisories.mageia.org/MGASA-2014-0242.html - http://seclists.org/oss-sec/2014/q2/96 - https://security.gentoo.org/glsa/201612-08
CVE ID: CVE-2014-2838 State: PUBLISHED Published: 2015-01-12T15:00:00 Last Updated: 2024-08-06T10:28:45.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct (1) SQL injection attacks via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php or (2) cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/ -
Container: References: - https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92156 - http://secunia.com/advisories/57667 - http://seclists.org/fulldisclosure/2014/Mar/399
CVE ID: CVE-2014-2839 State: PUBLISHED Published: 2015-01-12T15:00:00 Last Updated: 2024-08-06T10:28:46.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92156 - http://seclists.org/fulldisclosure/2014/Mar/399
CVE ID: CVE-2014-2842 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T10:28:46.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/480428 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10624 - http://www.securityfocus.com/bid/66802 - http://secunia.com/advisories/57910 - http://www.securitytracker.com/id/1030564
CVE ID: CVE-2014-2843 State: PUBLISHED Published: 2020-01-31T17:51:07 Last Updated: 2024-08-06T10:28:46.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp - http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp - http://www.christian-schneider.net/advisories/CVE-2014-2843.txt
CVE ID: CVE-2014-2844 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T10:28:45.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58038 - http://www.f-secure.com/en/web/labs_global/fsc-2014-2 - http://seclists.org/fulldisclosure/2014/Apr/223
CVE ID: CVE-2014-2845 State: PUBLISHED Published: 2017-11-15T18:00:00 Last Updated: 2024-08-06T10:28:46.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - https://cyberduck.io/changelog/ - http://www.securityfocus.com/archive/1/532039/100/0/threaded - http://secunia.com/advisories/58426
CVE ID: CVE-2014-2846 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T10:28:46.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash dot slash) in the lang Cookie parameter, as demonstrated by a request to login/doLogin. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/257 - http://www.securityfocus.com/archive/1/531910/100/0/threaded - http://wiki.arkei
lists.org/fulldisclosure/2014/Apr/257 - http://www.securityfocus.com/archive/1/531910/100/0/threaded - http://wiki.arkeia.com/index.php/Path_Traversal_Remote_Code_Execution
CVE ID: CVE-2014-2847 State: PUBLISHED Published: 2014-04-11T15:00:00Z Last Updated: 2024-09-16T23:06:11.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32660 - http://www.securityfocus.com/bid/66590 - http://www.osvdb.org/105364
CVE ID: CVE-2014-2848 State: PUBLISHED Published: 2014-04-11T15:00:00Z Last Updated: 2024-09-17T02:53:13.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation/ - http://www.securitytracker.com/id/1029946 - https://discussions.nessus.org/thread/7195 - http://sec
vilege-escalation/ - http://www.securitytracker.com/id/1029946 - https://discussions.nessus.org/thread/7195 - http://secunia.com/advisories/57403
CVE ID: CVE-2014-2849 State: PUBLISHED Published: 2014-04-11T15:00:00Z Last Updated: 2024-09-16T17:34:14.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66734 - http://www.sophos.com/en-us/support/knowledgebase/120230.aspx - http://www.zerodayinitiative.com/advisories/ZDI-14-069/ - http://www.exploit-db.com/exploits/32789 - http://secunia.com/advisories/57706
CVE ID: CVE-2014-2850 State: PUBLISHED Published: 2014-04-11T15:00:00Z Last Updated: 2024-09-16T23:21:40.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66734 - http://www.sophos.com/en-us/support/knowledgebase/120230.aspx - http://www.zerodayinitiative.com/advisories/ZDI-14-069/ - http://www.exploit-db.com/exploits/32789 - http://secunia.com/advisories/57706