Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6185 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T12:10:12.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98521 - http://www-01.ibm.com/support/docview.wss?uid=swg21695715 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05713
CVE ID: CVE-2014-6186 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98549 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/docview.wss?uid=sw
uid=swg1IV26309 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6187 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:12.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98553 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.securityfocus.com/bid/7190
m/vulnerabilities/98553 - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.securityfocus.com/bid/71906 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6188 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T12:10:13.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21693384 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/985
3384 - http://www.ibm.com/support/docview.wss?uid=swg21693379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98553 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727 - http://www.ibm.com/support/docview.wss?uid=swg21693381 - http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE ID: CVE-2014-6189 State: PUBLISHED Published: 2017-08-22T15:00:00 Last Updated: 2024-08-06T12:10:13.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Models-Hotfix-FP0008 and 5.3 before 5.3.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697248 - http://www.securityfocus.com/bid/73940
CVE ID: CVE-2014-6190 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T12:10:12.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for the URL of a log document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700480
CVE ID: CVE-2014-6191 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T12:10:12.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73946 - http://www-01.ibm.com/support/docview.wss?uid=swg21698430
CVE ID: CVE-2014-6192 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T12:10:12.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21700252
CVE ID: CVE-2014-6193 State: PUBLISHED Published: 2014-12-19T02:00:00 Last Updated: 2024-08-06T12:10:12.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI28699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98567 - http://www-01.ibm.com/support/docview.wss?uid=swg21692107
CVE ID: CVE-2014-6194 State: PUBLISHED Published: 2015-02-17T01:00:00 Last Updated: 2024-08-06T12:10:12.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to read arbitrary files via a .. (dot dot) in a pathname. Additional Analyst Notes: - CVE Program Container: References: - https
arbitrary files via a .. (dot dot) in a pathname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98605 - http://www-01.ibm.com/support/docview.wss?uid=swg21694035
CVE ID: CVE-2014-6195 State: PUBLISHED Published: 2015-02-14T02:00:00 Last Updated: 2024-08-06T12:10:13.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, and before 6.2.5.4 on Linux Z and Solaris; 6.3 before 6.3.2.1 on AIX, before 6.3.2.2 on Windows, and before 6.3.2.3 on Linux; 6.4 before 6.4.2.1; and 7.1 before 7.1.1 in IBM TSM for Mail, when the Data Protection for Lotus Domino
3.2.3 on Linux; 6.4 before 6.4.2.1; and 7.1 before 7.1.1 in IBM TSM for Mail, when the Data Protection for Lotus Domino component is used, allow local users to bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98607 - http://www-01.ibm.com/support/docview.wss?uid=swg21695183 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04249
CVE ID: CVE-2014-6196 State: PUBLISHED Published: 2014-11-26T02:00:00 Last Updated: 2024-08-06T12:10:12.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF), allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere Portal configuration, leading to improper construction of a response page by an application. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82674 - http://ww
lyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82674 - http://www-01.ibm.com/support/docview.wss?uid=swg21690018 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98608 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82672 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82676 - http://secunia.com/advisories/59546 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO82673
CVE ID: CVE-2014-6197 State: PUBLISHED Published: 2015-01-17T11:00:00 Last Updated: 2024-08-06T12:10:12.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21693542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98609
CVE ID: CVE-2014-6198 State: PUBLISHED Published: 2015-06-28T10:00:00 Last Updated: 2024-08-06T12:10:12.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21958090 - http://www.securitytracker.com/id/1032634
CVE ID: CVE-2014-6199 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T12:10:12.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98650 - http://www-01.ibm.com/support/docview.wss?uid=swg21693131 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05121 - http://secunia.com/advisories/62082
CVE ID: CVE-2014-6209 State: PUBLISHED Published: 2014-12-12T16:00:00 Last Updated: 2024-08-06T12:10:12.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying an identity column within a crafted ALTER TABLE statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04786 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05646 - http://www.securitytracker.com/id/1034571 - http://secunia.com/adviso
w-01.ibm.com/support/docview.wss?uid=swg1IT05646 - http://www.securitytracker.com/id/1034571 - http://secunia.com/advisories/62092 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05644 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05647 - http://www-01.ibm.com/support/docview.wss?uid=swg21690787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98684 - http://www.securityfocus.com/bid/71729 - http://www-01.ibm.com/support/docview.wss?uid=swg21693197 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05645
CVE ID: CVE-2014-6210 State: PUBLISHED Published: 2014-12-12T16:00:00 Last Updated: 2024-08-06T12:10:12.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652 - http://secunia.com/advisories/62092 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651 - http://www.securityfocus.com/bid/71730 - http://www.
62092 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651 - http://www.securityfocus.com/bid/71730 - http://www.securitytracker.com/id/1034572 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138 - http://www-01.ibm.com/support/docview.wss?uid=swg21693197 - http://www-01.ibm.com/support/docview.wss?uid=swg21690891 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98685
CVE ID: CVE-2014-6211 State: PUBLISHED Published: 2015-05-20T01:00:00 Last Updated: 2024-08-06T12:10:12.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032248 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52983 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52117 - http://www
-01.ibm.com/support/docview.wss?uid=swg1JR52983 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52117 - http://www-01.ibm.com/support/docview.wss?uid=swg21883875
CVE ID: CVE-2014-6212 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T12:10:12.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2.x before 10.0.2.5; and Emptoris Program Management (aka PGM) and Strategic Supply Management (aka SSMP) 10.0.0.x before 10.0.0.3 iFix6, 10.0.1.x before 10.0.1.4 iFix1, and 10.0.2.x before 10.0.2.5 allows remote authenticated users to
efore 10.0.0.3 iFix6, 10.0.1.x before 10.0.1.4 iFix1, and 10.0.2.x before 10.0.2.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98689 - http://www-01.ibm.com/support/docview.wss?uid=swg21693069
CVE ID: CVE-2014-6214 State: PUBLISHED Published: 2015-03-13T01:00:00 Last Updated: 2024-08-06T12:10:12.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21697213 - http://www.securitytracker.com/id/1031880 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI34987
CVE ID: CVE-2014-6215 State: PUBLISHED Published: 2014-12-11T23:00:00 Last Updated: 2024-08-06T12:10:12.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98802 - http://www-01.ibm.com/support/docview.wss?uid=swg21691458 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI2443
2 - http://www-01.ibm.com/support/docview.wss?uid=swg21691458 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI24434
CVE ID: CVE-2014-6221 State: PUBLISHED Published: 2015-04-06T00:00:00 Last Updated: 2024-08-06T12:10:12.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698893 - http://www.securityfocus.com/bid/73915 - http://www.securitytracker.com/id/1032026
CVE ID: CVE-2014-6222 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T12:10:12.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902933 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 - http://www-
01.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923
CVE ID: CVE-2014-6228 State: PUBLISHED Published: 2014-12-28T15:00:00 Last Updated: 2024-08-06T12:10:12.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted arguments to the chunk_split function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/1f91e076a585118495b976a413c1df40f6fd3d41
CVE ID: CVE-2014-6229 State: PUBLISHED Published: 2014-12-28T15:00:00 Last Updated: 2024-08-06T12:10:12.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\0' for termination, which allows remote attackers to obtain sensitive information by leveraging read access beyond the end of the string, and makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging truncation of a string containing an internal '\0' character. Additional Analyst Notes: - CVE Program Container: References: - htt
of a string containing an internal '\0' character. Additional Analyst Notes: - CVE Program Container: References: - http://hhvm.com/blog/6239/hhvm-3-3-0 - https://github.com/facebook/hhvm/commit/7135ec229882370a00411aa50030eada6034cc1b
CVE ID: CVE-2014-6230 State: PUBLISHED Published: 2014-10-25T00:00:00 Last Updated: 2024-08-06T12:10:13.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-ban/changelog/ - https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations/ - http://seclists.org/fulldisclosure/2014/Sep/60
CVE ID: CVE-2014-6231 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69562 - http://secunia.com/advisories/60888 - http://typo3.org/extensions/repository/view/cwt_feedit - https://exchange.xforce.ibmcloud.com/vulnerabilities/95700 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
CVE ID: CVE-2014-6232 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP (eu_ldap) extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/eu_ldap - http://secunia.com/advisories/60886 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - http://www.securityfocus.com/bid/69565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95701
CVE ID: CVE-2014-6233 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95703 - http://secunia.com/advisories/60876 - http://www.securityfocus.com/bid/69561 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - http://typo3.org/extensions/repository/view/flatmgr
CVE ID: CVE-2014-6234 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69566 - http://typo3.org/extensions/repository/view/jh_opengraphprotocol - http://secunia.com/advisories/60874 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - https://exchange.
es/60874 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95704