Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://www.securityfocus.com/bid/67833
CVE ID: CVE-2014-1803 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, and CVE-2014-2757. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://w
itytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://www.securityfocus.com/bid/67834
CVE ID: CVE-2014-1804 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1781, CVE-2014-1792, and CVE-2014-2770. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://www.securityfocus.com/bid/67835
CVE ID: CVE-2014-1805 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - https://docs.micr
onal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://www.securityfocus.com/bid/67836
CVE ID: CVE-2014-1806 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-026 - http://www.securityfocus.com/bid/67286
CVE ID: CVE-2014-1807 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly implement file associations, which allows local users to gain privileges via a crafted application, as exploited in the wild in May 2014, aka "Windows Shell File Association Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/e
ssociation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-027 - http://www.securityfocus.com/bid/67276
CVE ID: CVE-2014-1808 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023
CVE ID: CVE-2014-1809 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024
CVE ID: CVE-2014-1810 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1811 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (non-paged pool memory consumption and system hang) via malformed data in the Options field of a TCP header, aka "TCP Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/201
st Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-031 - http://secunia.com/advisories/58525 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx - http://www.securityfocus.com/bid/67888
CVE ID: CVE-2014-1812 State: PUBLISHED Published: 2014-05-14T10:00:00.000Z Last Updated: 2025-10-22T00:05:37.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability." Additional Analyst Notes:
ld in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025 - http://blogs.technet.com/b/srd/archive/2014/05/13/ms14-025-an-update-for-group-policy-preferences.aspx
CVE ID: CVE-2014-1813 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022 - http://www.securitytracker.com/id/1030227
CVE ID: CVE-2014-1814 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T09:50:11.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Installer in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that invokes the repair feature for a different application, aka "Windows Installer Repair Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030719 - https://docs.microsoft.com/en-us/secu
- CVE Program Container: References: - http://www.securitytracker.com/id/1030719 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-049 - http://www.securityfocus.com/bid/69112 - http://secunia.com/advisories/60674
CVE ID: CVE-2014-1815 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as exploited in the wild in May 2014, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0310. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-029
CVE ID: CVE-2014-1816 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-033 - http://www.securityfocus.com/bid/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-033 - http://www.securityfocus.com/bid/67895 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx - http://secunia.com/advisories/58538
CVE ID: CVE-2014-1817 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP1 and SP2, Live Meeting 2007 Console, Lync 2010 and 2013, Lync 2010 Attendee, and Lync Basic 2013 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EMF+ record in a font file, aka "Unicode Scrip
trary code or cause a denial of service (memory corruption) via a crafted EMF+ record in a font file, aka "Unicode Scripts Processor Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-036 - http://secunia.com/advisories/58583 - http://www.securityfocus.com/bid/67897 - http://www.securitytracker.com/id/1030376 - http://www.securitytracker.com/id/1030377 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx - http://www.securitytracker.com/id/1030378
CVE ID: CVE-2014-1818 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP1 and SP2, Live Meeting 2007 Console, Lync 2010 and 2013, Lync 2010 Attendee, and Lync Basic 2013 allows remote attackers to execute arbitrary code via a crafted EMF+ record in an image file, aka "GDI+ Image Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.
, aka "GDI+ Image Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-036 - http://secunia.com/advisories/58583 - http://www.securityfocus.com/bid/67904 - http://www.securitytracker.com/id/1030376 - http://www.securitytracker.com/id/1030377 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx - http://www.securitytracker.com/id/1030378
CVE ID: CVE-2014-1819 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T09:50:11.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly control access to objects associated with font files, which allows local users to gain privileges via a crafted file, aka "Font Double-Fetch Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60673 - http://www.securityfocu
onal Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60673 - http://www.securityfocus.com/bid/69143 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-045
CVE ID: CVE-2014-1820 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T09:50:11.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60676 - http://www.securitytracker.com/id/1030716 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-044 - http://www.securityfocus.com/bid/690
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-044 - http://www.securityfocus.com/bid/69071
CVE ID: CVE-2014-1821 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1822 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1823 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030381 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-032 - http://www.securityfocus.com/bid/67893 - http://secunia.com/advi
n-us/security-updates/securitybulletins/2014/ms14-032 - http://www.securityfocus.com/bid/67893 - http://secunia.com/advisories/58537 - http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx
CVE ID: CVE-2014-1824 State: PUBLISHED Published: 2014-07-08T22:00:00 Last Updated: 2024-08-06T09:50:11.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (aka .JNT) file, aka "Windows Journal Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68396 - https://support.microsoft.com/kb/2971850 - https://docs.microsoft.com/en-us/security-updates/s
rityfocus.com/bid/68396 - https://support.microsoft.com/kb/2971850 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-038 - http://secunia.com/advisories/59776
CVE ID: CVE-2014-1825 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1826 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T09:50:11.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/559
CVE ID: CVE-2014-1827 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T09:50:11.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/559
CVE ID: CVE-2014-1828 State: PUBLISHED Published: 2014-03-26T10:00:00 Last Updated: 2024-08-06T09:50:11.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption) by uploading a large file. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/559
CVE ID: CVE-2014-1829 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T09:50:11.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:133 - http://www.ubuntu.com/usn/USN-2382-1 - https://github.com/kennethreitz/requests/issues/1885 - http://www.debian.org/security/2015/dsa-3146 - http://advisories.mageia.org/MGASA-2014-0409.ht
tz/requests/issues/1885 - http://www.debian.org/security/2015/dsa-3146 - http://advisories.mageia.org/MGASA-2014-0409.html
CVE ID: CVE-2014-1830 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T09:50:11.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:133 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00095.html - https://github.com/kennethreitz/requests/issues/1885 - http://www.debian.org/security/2015/dsa-3146 - http://a
95.html - https://github.com/kennethreitz/requests/issues/1885 - http://www.debian.org/security/2015/dsa-3146 - http://advisories.mageia.org/MGASA-2014-0409.html
CVE ID: CVE-2014-1831 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T09:50:11.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958 - https://github.com/phusion/passenger/commit/34b1087870c2 - http://openwall.com/lists/oss-security/2014/01/30/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1058992 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/
//bugzilla.redhat.com/show_bug.cgi?id=1058992 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html - http://openwall.com/lists/oss-security/2014/01/28/8
CVE ID: CVE-2014-1832 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T09:50:11.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/01/29/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958 - http://openwall.com/lists/oss-security/2014/01/30/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1058992 - http
36958 - http://openwall.com/lists/oss-security/2014/01/30/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1058992 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html - https://github.com/phusion/passenger/commit/94428057c602da3d6d34ef75c78091066ecac5c0
CVE ID: CVE-2014-1833 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T09:50:11.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/31/11 - https://bugzilla.redhat.com/show_bug.cgi?id=1059947 - http://www.securityfocus.com/bid/65260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90842 - http://www.openwall.com/lists/oss-security/2014/01/31/7 - http://bugs.debian.org/cgi
bmcloud.com/vulnerabilities/90842 - http://www.openwall.com/lists/oss-security/2014/01/31/7 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737160 - http://www.ubuntu.com/usn/USN-2649-1 - http://osvdb.org/102748
CVE ID: CVE-2014-1834 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-06T09:50:11.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/31/10
CVE ID: CVE-2014-1835 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-06T09:50:11.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/31/10 - http://xforce.iss.net/xforce/xfdb/90858