Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3629 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T10:50:18.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98575 - http://www.securityfocus.com/archive/1/533943/100/0/threaded - http://www.securityfocus.com/bid/71004 - http://packetstormsecurity.com/files/129034/Apache-Qpid-0.30-Induced-HTTP-Requests.html - http://secunia.com/advisories/62235
CVE ID: CVE-2014-3630 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T10:50:17.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - https://infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf - http
presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf - https://groups.google.com/forum/#%21msg/play-framework/7uNX_ImTW08/AogWSjsTAyQJ - https://groups.google.com/forum/#%21topic/play-framework/WdbFvemsFDQ - https://playframework.com/security/vulnerability/CVE-2014-3630-XmlExternalEntity
CVE ID: CVE-2014-3631 State: PUBLISHED Published: 2014-09-28T10:00:00 Last Updated: 2024-08-06T10:50:17.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/36268 - https://bugzilla.redhat.com/sh
Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/36268 - https://bugzilla.redhat.com/show_bug.cgi?id=1140325 - http://www.securityfocus.com/bid/70095 - http://osvdb.org/show/osvdb/111298 - http://www.ubuntu.com/usn/USN-2378-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95389b08d93d5c06ec63ab49bd732b0069b7c35e - http://www.ubuntu.com/usn/USN-2379-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3 - https://github.com/torvalds/linux/commit/95389b08d93d5c06ec63ab49bd732b0069b7c35e
CVE ID: CVE-2014-3632 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T10:50:18.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1339.html
CVE ID: CVE-2014-3633 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T10:50:17.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=3e74
895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=3e745e8f775dfe6f64f18b5c2fe4791b35d3546b - http://rhn.redhat.com/errata/RHSA-2014-1352.html - http://www.debian.org/security/2014/dsa-3038 - http://www.ubuntu.com/usn/USN-2366-1 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00014.html - http://secunia.com/advisories/60291 - http://security.libvirt.org/2014/0004.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00017.html
CVE ID: CVE-2014-3634 State: PUBLISHED Published: 2014-11-02T00:00:00 Last Updated: 2024-08-06T10:50:18.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html - http://rhn.redhat.com/errata/RHSA-2014-1671.html - http://advisories.mageia.org/MGASA-2014-0411.html - http://lists.opens
ttp://rhn.redhat.com/errata/RHSA-2014-1671.html - http://advisories.mageia.org/MGASA-2014-0411.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html - http://rhn.redhat.com/errata/RHSA-2014-1654.html - http://secunia.com/advisories/61720 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:130 - http://www.openwall.com/lists/oss-security/2014/09/30/15 - http://secunia.com/advisories/61494 - http://rhn.redhat.com/errata/RHSA-2014-1397.html - http://www.openwall.com/lists/oss-security/2014/10/03/1 - http://linux.oracle.com/errata/ELSA-2014-1654 - http://www.rsyslog.com/remote-syslog-pri-vuln
ss-security/2014/10/03/1 - http://linux.oracle.com/errata/ELSA-2014-1654 - http://www.rsyslog.com/remote-syslog-pri-vulnerability/ - http://www.ubuntu.com/usn/USN-2381-1 - http://www.debian.org/security/2014/dsa-3040 - http://secunia.com/advisories/61930 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-3635 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T10:50:18.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse.org/op
nalyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - https://bugs.freedesktop.org/show_bug.cgi?id=83622 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-security/2014/09/16/9 - http://www.securitytracker.com/id/1030864 - http://advisories.mageia.org/MGASA-2014-0395.html - http://www.debian.org/security/2014/dsa-3026 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-3636 State: PUBLISHED Published: 2014-10-25T20:00:00 Last Updated: 2024-10-17T18:03:39.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse
E Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-security/2014/09/16/9 - http://www.securitytracker.com/id/1030864 - https://bugs.freedesktop.org/show_bug.cgi?id=82820 - http://advisories.mageia.org/MGASA-2014-0395.html - http://www.debian.org/security/2014/dsa-3026 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-3637 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T10:50:18.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2352-1 - https://bugs.freedesktop.org/show_bug.cgi?id=80559 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://secunia.com/advisories/61378 - http://www.ope
http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-security/2014/09/16/9 - http://www.securitytracker.com/id/1030864 - http://advisories.mageia.org/MGASA-2014-0395.html - http://www.debian.org/security/2014/dsa-3026 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176 - http://www.openwall.com/lists/oss-security/2019/06/24/13 - http://www.openwall.com/lists/oss-security/2019/06/24/14
CVE ID: CVE-2014-3638 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T10:50:17.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-secu
e-security-announce/2014-09/msg00026.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-security/2014/09/16/9 - http://www.securitytracker.com/id/1030864 - http://secunia.com/advisories/61431 - https://bugs.freedesktop.org/show_bug.cgi?id=81053 - http://advisories.mageia.org/MGASA-2014-0395.html - http://www.debian.org/security/2014/dsa-3026 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-3639 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T10:50:18.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2352-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html - http://secu
updates/2014-09/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html - http://secunia.com/advisories/61378 - http://www.openwall.com/lists/oss-security/2014/09/16/9 - http://www.securitytracker.com/id/1030864 - https://bugs.freedesktop.org/show_bug.cgi?id=80919 - http://secunia.com/advisories/61431 - http://advisories.mageia.org/MGASA-2014-0395.html - http://www.debian.org/security/2014/dsa-3026 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-3640 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T10:50:18.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3045 - https://bugzilla.redhat.com/show_bug.cgi?id=1144818 - http://rhn.redhat.com/errata/RHSA-2015-0624.html - http://rhn.redhat.com/errata/RHSA-2015-0349.html - http://
=1144818 - http://rhn.redhat.com/errata/RHSA-2015-0624.html - http://rhn.redhat.com/errata/RHSA-2015-0349.html - http://www.debian.org/security/2014/dsa-3044 - http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.html - http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.html - http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04707.html - http://www.ubuntu.com/usn/USN-2409-1
CVE ID: CVE-2014-3641 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T10:50:17.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1788.html - http://seclists.org/oss-sec/2014/q4/78 - http://www.securityfocus.com/bid/70221 - http://www.ubuntu.com/usn/USN-2405-1 - https://bugs.launchpad.net/cinder/+bug/1350504 - http://rhn.redhat.c
/bid/70221 - http://www.ubuntu.com/usn/USN-2405-1 - https://bugs.launchpad.net/cinder/+bug/1350504 - http://rhn.redhat.com/errata/RHSA-2014-1787.html
CVE ID: CVE-2014-3642 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T10:50:18.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an "insecure send method." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1092894 - http://rhn.redhat.com/errata/RHSA-2014-1317.html
CVE ID: CVE-2014-3643 State: PUBLISHED Published: 2019-12-15T21:12:24 Last Updated: 2024-08-06T10:50:18.249Z Vendors: jersey Products: jersey Problem Types: XXE via parameter entities Description: jersey: XXE via parameter entities not disabled by the jersey SAX parser Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/cve-2014-3643 - https://www.oracle.com/security-alerts/cpujul2022.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
CVE ID: CVE-2014-3644 State: REJECTED Published: 2022-07-07T16:01:26 Last Updated: 2022-07-07T16:01:26 Description: No description available.
CVE ID: CVE-2014-3645 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:17.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1144835 - http://www.ubuntu.com/usn/USN-2418-1 - http://www.ubuntu.com/usn/USN-2417-1 - http://www.debian.org/security/2014/dsa-3060 - https://github.com/torvalds/linux/commit/bfd0a56b90005f8c
sn/USN-2417-1 - http://www.debian.org/security/2014/dsa-3060 - https://github.com/torvalds/linux/commit/bfd0a56b90005f8c8a004baf407ad90045c2b11e - http://rhn.redhat.com/errata/RHSA-2015-0284.html - http://www.openwall.com/lists/oss-security/2014/10/24/9 - http://rhn.redhat.com/errata/RHSA-2015-0126.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfd0a56b90005f8c8a004baf407ad90045c2b11e
CVE ID: CVE-2014-3646 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:18.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2418-1 - http://www.ubuntu.com/usn/USN-2417-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1144825 - http://www.debian.org/security/2014/dsa-3060 - http://git.kernel.org/?p=linux/kernel/git/torvalds/li
ug.cgi?id=1144825 - http://www.debian.org/security/2014/dsa-3060 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a642fc305053cc1c6e47e4f4df327895747ab485 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://github.com/torvalds/linux/commit/a642fc305053cc1c6e47e4f4df327895747ab485 - http://www.ubuntu.com/usn/USN-2394-1 - http://rhn.redhat.com/errata/RHSA-2015-0284.html - http://www.openwall.com/lists/oss-security/2014/10/24/9 - http://rhn.redhat.com/errata/RHSA-2015-0126.html
CVE ID: CVE-2014-3647 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:18.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70748 - http://www.ubuntu.com/usn/USN-2418-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d1442d85cc30ea75f7d399474ca738e0bc96f715 - http://www.ubuntu.com/usn/USN-2417-1 - http:/
ds/linux-2.6.git%3Ba=commit%3Bh=d1442d85cc30ea75f7d399474ca738e0bc96f715 - http://www.ubuntu.com/usn/USN-2417-1 - http://www.debian.org/security/2014/dsa-3060 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=234f3ce485d54017f15cf5e0699cff4100121601 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2394-1 - http://www.openwall.com/lists/oss-security/2014/10/24/9 - https://github.com/torvalds/linux/commit/d1442d85cc30ea75f7d399474ca738e0bc96f7
ll.com/lists/oss-security/2014/10/24/9 - https://github.com/torvalds/linux/commit/d1442d85cc30ea75f7d399474ca738e0bc96f715 - https://bugzilla.redhat.com/show_bug.cgi?id=1144897 - https://github.com/torvalds/linux/commit/234f3ce485d54017f15cf5e0699cff4100121601
CVE ID: CVE-2014-3648 State: PUBLISHED Published: 2022-07-01T13:16:16 Last Updated: 2024-08-06T10:50:18.312Z Vendors: n/a Products: Jboss Aerogear Problem Types: CWE-400 Description: The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can't be reached or can slow the server down by purposefully wasting it's time with slow endpoints. Similarly, one can provide whatever HTTP end point they want. This turns the server into a DDOS vector or an anonymizer for the posting
an provide whatever HTTP end point they want. This turns the server into a DDOS vector or an anonymizer for the posting of malware and so on. Additional Analyst Notes: - CVE Program Container: References: - https://issues.redhat.com/browse/AEROGEAR-6091
CVE ID: CVE-2014-3649 State: PUBLISHED Published: 2019-11-04T14:02:24 Last Updated: 2024-08-06T10:50:17.942Z Vendors: JBoss Products: AeroGear Problem Types: reflected XSS via password field of the login page Description: JBoss AeroGear has reflected XSS via the password field Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3649 - https://access.redhat.com/security/cve/cve-2014-3649
CVE ID: CVE-2014-3650 State: PUBLISHED Published: 2022-07-01T13:17:25 Last Updated: 2024-08-06T10:50:18.238Z Vendors: n/a Products: Jboss Aerogear Problem Types: CWE-79 Description: Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1144212 - https://issues.redhat.com/browse/AEROGEAR-5978
CVE ID: CVE-2014-3651 State: PUBLISHED Published: 2017-12-29T15:00:00 Last Updated: 2024-08-06T10:50:18.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size parameter to auth/qrcode, related to QR code generation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1144278 - https://issues.jboss.org/browse/KEYCLOAK-699
CVE ID: CVE-2014-3652 State: PUBLISHED Published: 2019-12-15T21:16:12 Last Updated: 2024-08-06T10:50:18.310Z Vendors: JBoss KeyCloak Products: JBoss KeyCloak Problem Types: Open redirect vulnerability Description: JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3652 - https://access.redhat.com/security/cve/cve-2014-3652
CVE ID: CVE-2014-3653 State: PUBLISHED Published: 2015-07-06T14:55:00 Last Updated: 2024-08-06T10:50:17.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template. Additional Analyst Notes: - CVE Program Container: References: - http://theforeman.org/security.html#2014-3653 - https://bugzilla.redhat.com/show_bug.cgi?id=1145398 - http://www.securityfocus.com/bid/70046 - http://projects.theforeman.org/issues/7483
CVE ID: CVE-2014-3654 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T10:50:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60976 - http://secunia.com/advisories/62027 - http://lists.opensuse.org/opensuse-security-ann