Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7800 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T13:03:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/284089
CVE ID: CVE-2014-7801 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7802 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T13:03:27.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/
oogle.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/851953
CVE ID: CVE-2014-7803 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T13:03:27.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/634945
CVE ID: CVE-2014-7804 State: PUBLISHED Published: 2014-10-21T10:00:00 Last Updated: 2024-08-06T13:03:26.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/896129 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7805 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7806 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7807 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:03:27.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX200285 - http://www.securityfocus.com/archive/1/534176/100/0/threaded
CVE ID: CVE-2014-7808 State: PUBLISHED Published: 2017-09-15T20:00:00 Last Updated: 2024-08-06T13:03:27.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/wicket-users/201502.mbox/%3CCAMomwMpLPDYezc=iFofm1R1Uq37vUFJ8VC-_ex5SU8-HAKBoRw%40mail.gmail.com%3E - https://www.smrrd.de/cve-2014-7808-apache-wicket-csrf-2014.html
CVE ID: CVE-2014-7809 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:03:27.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to bypass the CSRF protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://packetstormsecurity.com/files/129421/Apache-Struts-2.3.20-Security-Fixes.html - http://struts.apache.org/docs/s2-023.html - http://www.securityfocus.com/bid/71548 - http://www.securitytracker.com/id/1031309 - http://www.oracle.co
/s2-023.html - http://www.securityfocus.com/bid/71548 - http://www.securitytracker.com/id/1031309 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.securityfocus.com/archive/1/534175/100/0/threaded
CVE ID: CVE-2014-7810 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T13:03:26.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0492.html - https://h20566.www2.hpe.com/
: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0492.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://www.ubuntu.com/usn/USN-2654-1 - http://rhn.redhat.com/errata/RHSA-2015-1622.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://svn.apache.org/viewvc?view=revision&revision=1644018 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/vie
18 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1645642 - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://rhn.redhat.com/errata/RHSA-2016-2046.html - http://tomcat.apache.org/security-8.html - http://www.debian.org/security/2015/dsa-3428 - http://tomcat.apache.org/security-6.html - http://www.securityfocus.com/bid/74665 - http://www.securitytracker.com/id/1032330 - http://www.ubuntu.com/usn/USN-2655-1 - http://rhn.redhat.com/errata/RHSA-2015-1621.html - http://www.debian.org/security/2016/dsa-3447 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http
ebian.org/security/2016/dsa-3447 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe5
cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-7811 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:03:27.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0033.html - http://secunia.com/advisories/62183 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
CVE ID: CVE-2014-7812 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:03:26.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0033.html - http://secunia.com/advisories/62183 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
CVE ID: CVE-2014-7813 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-06T13:03:26.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors involving calls to the .to_sym rails function and lack of garbage collection of inserted symbols. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1157872
CVE ID: CVE-2014-7814 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T13:03:26.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62255 - http://rhn.redhat.com/errata/RHSA-2015-0028.html
CVE ID: CVE-2014-7815 State: PUBLISHED Published: 2014-11-14T15:00:00 Last Updated: 2024-08-06T13:03:27.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61484 - http://rhn.redhat.com/errata/RHSA-2015-0624.html - http://secunia.com/advisories/62144 - https://bugzilla.redhat.com/show_bug.cgi?id=1157641 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html - http://secunia.com/advisories/62143 - http://rhn.redhat.com/err
e.org/opensuse-security-announce/2015-10/msg00019.html - http://secunia.com/advisories/62143 - http://rhn.redhat.com/errata/RHSA-2015-0349.html - http://www.debian.org/security/2014/dsa-3067 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829 - http://support.citrix.com/article/CTX200892 - http://www.ubuntu.com/usn/USN-2409-1 - http://www.debian.org/security/2014/dsa-3066
CVE ID: CVE-2014-7816 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T13:03:27.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.Beta3, when running on Windows, allows remote attackers to read arbitrary files via a .. (dot dot) in a resource URI. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1157478 - http://www.securityfocus.com/bid/71328 - https://issues.jboss.org/browse/UNDERTOW-338 - https://issues.jboss.org/browse/WFLY-4020 - http://seclists.org/oss-sec/2014/q4/830
CVE ID: CVE-2014-7817 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:03:26.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))". Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/730 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://linux.oracle.com/errata/ELSA-2015-0016.html - http://www.ubuntu.com/usn/USN-2432-1 - https://sourceware.org/ml/libc-alpha/201
.oracle.com/errata/ELSA-2015-0016.html - http://www.ubuntu.com/usn/USN-2432-1 - https://sourceware.org/ml/libc-alpha/2014-11/msg00519.html - http://rhn.redhat.com/errata/RHSA-2014-2023.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=a39208bd7fb76c1b01c127b4c61f9bfd915bfe7c - http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html - https://security.gentoo.org/glsa/201602-02 - http://www.securityfocus.com/bid/71216 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://secunia.com/advisories/62100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98852 - http://secunia.com/advisories/62146 - https://sourceware.org/bugzi
/exchange.xforce.ibmcloud.com/vulnerabilities/98852 - http://secunia.com/advisories/62146 - https://sourceware.org/bugzilla/show_bug.cgi?id=17625 - http://linux.oracle.com/errata/ELSA-2015-0092.html - http://www.debian.org/security/2015/dsa-3142
CVE ID: CVE-2014-7818 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T13:03:27.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via a /..%2F sequence. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2014-7829 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00112
eferences: - https://puppet.com/security/cve/cve-2014-7829 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00112.html - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/dCp7duBiQgo/v_R_8PFs5IwJ
CVE ID: CVE-2014-7819 State: PUBLISHED Published: 2014-11-08T11:00:00 Last Updated: 2024-08-06T13:03:27.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) dou
tackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-11/msg00105.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00111.html - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/doAVp0YaTqY/aHFngBqNBoAJ - http://lists.opensuse.org/opensuse-updates/2014-11/msg00103.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00110.html - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wQBeGXqGs3E/JqUMB6fhh3gJ
CVE ID: CVE-2014-7820 State: REJECTED Published: 2020-11-05T22:14:17 Last Updated: 2020-11-05T22:14:17 Description: No description available.
CVE ID: CVE-2014-7821 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:03:27.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1938.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98818 - http://rhn.redhat.com/errata/RHSA-2015-0044.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.html - http://www.oracle.com/tec
0044.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.openstack.org/pipermail/openstack-announce/2014-November/000303.html - http://rhn.redhat.com/errata/RHSA-2014-1942.html - http://secunia.com/advisories/62586 - https://bugs.launchpad.net/neutron/+bug/1378450
CVE ID: CVE-2014-7822 State: PUBLISHED Published: 2015-03-16T10:00:00 Last Updated: 2024-08-06T13:03:27.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1163792 - http://www.ubuntu.com/usn/US
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1163792 - http://www.ubuntu.com/usn/USN-2544-1 - http://www.debian.org/security/2015/dsa-3170 - https://www.exploit-db.com/exploits/36743/ - http://www.ubuntu.com/usn/USN-2542-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://rhn.redhat.com/errata/RHSA-2015-0164.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.securityfocus.com/bid/72347 - http://www.ubuntu.com/usn/USN-2541-1 - https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad46
47 - http://www.ubuntu.com/usn/USN-2541-1 - https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958 - http://rhn.redhat.com/errata/RHSA-2015-0694.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.osvdb.org/117810 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958 - http://www.ubuntu.com/usn/USN-2543-1 - http://rhn.redhat.com/errata/RHSA-2015-0102.html - http://rhn.redhat.com/errata/RHSA-2015
ww.ubuntu.com/usn/USN-2543-1 - http://rhn.redhat.com/errata/RHSA-2015-0102.html - http://rhn.redhat.com/errata/RHSA-2015-0674.html
CVE ID: CVE-2014-7823 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:03:27.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62058 - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://secunia.com/advisories/62303 - http://www.ubuntu.com/usn/USN-2404-1 - http://lists.opensuse.org/opensuse-updates/2014-
//secunia.com/advisories/62303 - http://www.ubuntu.com/usn/USN-2404-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00083.html - http://secunia.com/advisories/60010 - http://security.libvirt.org/2014/0007.html
CVE ID: CVE-2014-7824 State: PUBLISHED Published: 2014-11-18T15:00:00 Last Updated: 2024-08-06T13:03:27.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/10/2 - http://secunia.com/advisories/62603 - http://advisories.mageia.org/MGASA-2014-0457.html - h
/oss-security/2014/11/10/2 - http://secunia.com/advisories/62603 - http://advisories.mageia.org/MGASA-2014-0457.html - https://bugs.freedesktop.org/show_bug.cgi?id=85105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98576 - http://www.securityfocus.com/bid/71012 - http://www.ubuntu.com/usn/USN-2425-1 - http://www.debian.org/security/2014/dsa-3099 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-7825 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:03:27.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/06/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98557 - http://rhn.redhat.com/errata/RHSA-2015-0864.html
11/06/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98557 - http://rhn.redhat.com/errata/RHSA-2015-0864.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - https://bugzilla.redhat.com/show_bug.cgi?id=1161565 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9 - http://www.securityfocus.com/bid/70972 - http://rhn.redhat.com/errata/RHSA-2014-1943.html - https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9
CVE ID: CVE-2014-7826 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:03:27.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/06/11 - http://rhn.redhat.com/errata/RHSA-2015-0864.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://lists.opensuse.org/