Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ences: - http://www.securitytracker.com/id/1030058 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10521 - http://www.securityfocus.com/bid/66767
CVE ID: CVE-2014-2713 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T10:21:35.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, allows remote attackers to cause a denial of service (PFE restart) via a crafted IP packet to certain (1) Trio or (2) Cassis-based Packet Forwarding Engine (PFE) modules. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10621 - http://www.securityfocus.com/bi
ntainer: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10621 - http://www.securityfocus.com/bid/66764
CVE ID: CVE-2014-2714 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T10:21:36.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66760 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10622 - http://secunia.co
://www.securityfocus.com/bid/66760 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10622 - http://secunia.com/advisories/57835 - http://securitytracker.com/id?1030060
CVE ID: CVE-2014-2715 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T10:21:36.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the (1) module or (2) message parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67069 - http://secunia.com/advisories/58306 - http://www.securityfocus.com/archive/1/531935/100/0/threaded
CVE ID: CVE-2014-2716 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T10:21:36.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers to obtain plaintext messages via an XOR operation on two ciphertexts. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129585/Ekahau-Real-Time-Location-System-RC4-Cipher-Stream-Reuse-Weak-Key-Derivation.html - http://www.securityfocus.com/bid/71674 - http://www.modzero.ch/advisori
4-Cipher-Stream-Reuse-Weak-Key-Derivation.html - http://www.securityfocus.com/bid/71674 - http://www.modzero.ch/advisories/MZ-14-01-Ekahau-RTLS.txt - http://www.securityfocus.com/archive/1/534241/100/0/threaded
CVE ID: CVE-2014-2717 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T10:21:36.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01
CVE ID: CVE-2014-2718 State: PUBLISHED Published: 2014-11-04T22:00:00 Last Updated: 2024-08-06T10:21:36.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware (1) update information or (2) downloaded updates, which allows man-in-the-middle (MITM) attackers to execute arbitrary code via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98316 - http://packet
://seclists.org/fulldisclosure/2014/Oct/122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98316 - http://packetstormsecurity.com/files/128904/ASUS-Router-Man-In-The-Middle.html - https://support.t-mobile.com/docs/DOC-21994 - http://dnlongen.blogspot.com/2014/10/CVE-2014-2718-Asus-RT-MITM.html - http://www.securityfocus.com/bid/70791
CVE ID: CVE-2014-2719 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T10:21:36.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code. Additional Analyst Notes: - CVE Program Container: References: - http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html - http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 - http://seclists.org/fulldisclosure/2014/Apr/225 - https://support.t
port.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 - http://seclists.org/fulldisclosure/2014/Apr/225 - https://support.t-mobile.com/docs/DOC-21994
CVE ID: CVE-2014-2720 State: PUBLISHED Published: 2014-05-27T10:00:00 Last Updated: 2024-08-06T10:21:36.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as demonstrated by unintended code execution prompted by a .jpg extension in the Central Directory and a .exe extension in the local file header. Additional Analyst Notes: - CVE Program Container: References: - http://www.xchg.info/?p=418
CVE ID: CVE-2014-2721 State: PUBLISHED Published: 2020-03-19T15:48:46 Last Updated: 2024-08-06T10:21:36.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/advisory/FG-IR-14-010
CVE ID: CVE-2014-2722 State: PUBLISHED Published: 2020-03-19T15:33:32 Last Updated: 2024-08-06T10:21:36.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/advisory/FG-IR-14-010
CVE ID: CVE-2014-2723 State: PUBLISHED Published: 2020-03-19T15:52:45 Last Updated: 2024-08-06T10:21:36.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/advisory/FG-IR-14-010
CVE ID: CVE-2014-2727 State: PUBLISHED Published: 2020-02-19T13:39:13 Last Updated: 2024-08-06T10:21:36.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustwave.com/software/mailmarshal_smtp/MailMarshalSEG-ReleaseNotes-7.2.0.6272.htm
CVE ID: CVE-2014-2729 State: PUBLISHED Published: 2014-04-25T10:00:00 Last Updated: 2024-08-06T10:21:36.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126187/Ektron-CMS-8.7-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/531852/100/0/threaded - http://www.securityfocus
-8.7-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/531852/100/0/threaded - http://www.securityfocus.com/archive/1/531853/100/0/threaded
CVE ID: CVE-2014-2730 State: PUBLISHED Published: 2014-04-05T14:00:00 Last Updated: 2024-08-06T10:21:36.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document containing a large number of nested entity references, as demonstrated by a crafted text/plain e-mail message to Outlook, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
tlook, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531722/100/0/threaded
CVE ID: CVE-2014-2731 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T10:21:36.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01
CVE ID: CVE-2014-2732 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T10:21:36.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf - http://www.securityfocus.com/bid/66965 - http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01
CVE ID: CVE-2014-2733 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T10:21:36.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01
CVE ID: CVE-2014-2734 State: PUBLISHED Published: 2014-04-24T23:00:00 Last Updated: 2024-08-06T10:21:36.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonst
stration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html - http://www.osvdb.org/106006 - https://news.ycombinator.com/item?id=7601973 - http://www.securityfocus.com/bid/66956 - http://seclists.org/fulldisclosure/2014/May/13 - https://gist.github.com/10446549 - https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/ - https://gist.github.com/emboss/91696b5
://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/ - https://gist.github.com/emboss/91696b56cd227c8a0c13 - https://github.com/adrienthebo/cve-2014-2734/ - http://seclists.org/fulldisclosure/2014/Apr/231
CVE ID: CVE-2014-2735 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T10:21:36.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531847/100/0/threaded - http://winscp.net/eng/docs/history - http://winscp.net/tracker/show_bug.cgi?id=1152
CVE ID: CVE-2014-2736 State: PUBLISHED Published: 2014-04-24T14:00:00 Last Updated: 2024-08-06T10:21:36.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) session ID (PHPSESSID) to index.php or remote authenticated users to execute arbitrary SQL commands via the (2) user parameter to connectors/security/message.php or (3) id parameter to manager/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66990 - http://secunia.com/advisories/58036 - http://archives.neohapsis.com/archives/bugt
tp://www.securityfocus.com/bid/66990 - http://secunia.com/advisories/58036 - http://archives.neohapsis.com/archives/bugtraq/2014-04/0124.html - http://forums.modx.com/thread/90173/modx-revolution-2-2-13-and-prior-blind-sql-injection
CVE ID: CVE-2014-2737 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T10:21:36.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the u parameter, related to the getFileName function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66988 - http://www.securityfocus.com/archive/1/531886/100/0/threaded
CVE ID: CVE-2014-2739 State: PUBLISHED Published: 2014-04-14T23:00:00 Last Updated: 2024-08-06T10:21:36.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is properly resolved within a different module, which allows remote attackers to cause a denial of service (incorrect pointer dereference and system crash) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/04/10/9 - https://github.com/torvalds/linux/commit/b28
er: References: - http://www.openwall.com/lists/oss-security/2014/04/10/9 - https://github.com/torvalds/linux/commit/b2853fd6c2d0f383dbdf7427e263eb576a633867 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b2853fd6c2d0f383dbdf7427e263eb576a633867 - https://bugzilla.redhat.com/show_bug.cgi?id=1085415 - http://www.securityfocus.com/bid/66716
CVE ID: CVE-2014-2741 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://www.kb.cert.org/vuls/id/495476 - http://fisheye.igniterealtime.org/c
ption-with-highly-compressed-xmpp-stanzas/ - http://www.kb.cert.org/vuls/id/495476 - http://fisheye.igniterealtime.org/changelog/openfiregit?cs=3aec383e07ee893b77396fe946766bbd3758af77 - http://openwall.com/lists/oss-security/2014/04/09/1 - http://community.igniterealtime.org/thread/52317 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2742 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://openwall.com/lists/oss-security/2014/04/09/1 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2743 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://code.lightwitch.org/metronome/rev/49f47277a411 - http://openwall.com/lists/
ith-highly-compressed-xmpp-stanzas/ - http://code.lightwitch.org/metronome/rev/49f47277a411 - http://openwall.com/lists/oss-security/2014/04/09/1 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2744 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cause a denial of service (resource consumption) via compressed XML elements in an XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://www.debian.org/security/20
urity-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://www.debian.org/security/2014/dsa-2895 - http://secunia.com/advisories/57710 - http://code.lightwitch.org/metronome/rev/49f47277a411 - http://blog.prosody.im/prosody-0-9-4-released/ - http://hg.prosody.im/0.9/rev/b3b1c9da38fb - http://openwall.com/lists/oss-security/2014/04/09/1 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2745 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack, related to core/portmanager.lua and util/xmppstream.lua. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://hg.prosody.im/0.9/rev/a97591d2e1ad - http://www.debian.org/se
-consumption-with-highly-compressed-xmpp-stanzas/ - http://hg.prosody.im/0.9/rev/a97591d2e1ad - http://www.debian.org/security/2014/dsa-2895 - http://secunia.com/advisories/57710 - http://hg.prosody.im/0.9/rev/1107d66d2ab2 - http://blog.prosody.im/prosody-0-9-4-released/ - http://openwall.com/lists/oss-security/2014/04/09/1 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2746 State: PUBLISHED Published: 2014-04-11T01:00:00 Last Updated: 2024-08-06T10:21:36.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/ - http://www.tigase.org/content/uncontrolled-resource-consumption-highly-compressed-xmpp-messages - https:
xmpp-stanzas/ - http://www.tigase.org/content/uncontrolled-resource-consumption-highly-compressed-xmpp-messages - https://projects.tigase.org/issues/1780 - http://openwall.com/lists/oss-security/2014/04/09/1 - https://projects.tigase.org/projects/tigase-server/repository/revisions/7f5af2f8c5b97bbf9def66fbb9dd47746a7ac292 - http://openwall.com/lists/oss-security/2014/04/07/7
CVE ID: CVE-2014-2748 State: PUBLISHED Published: 2014-04-10T15:00:00 Last Updated: 2024-08-06T10:21:36.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2014-002 - http://secunia.com/advisories/57741 - https://service.sap.com/sap/support/notes/1926485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92334 - http://www.
s://service.sap.com/sap/support/notes/1926485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92334 - http://www.onapsis.com/research-advisories.php