Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https
ts.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f83
7f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread
r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-0232 State: PUBLISHED Published: 2014-08-22T14:00:00 Last Updated: 2024-08-06T09:05:39.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/405 - http://secunia.com/advisories/60807 - http://ofbiz.apache.org/download.html#vulnerabilities - h
rg/oss-sec/2014/q3/405 - http://secunia.com/advisories/60807 - http://ofbiz.apache.org/download.html#vulnerabilities - http://www.securitytracker.com/id/1030739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95356 - http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/533163/100/0/threaded - http://www.securityfocus.com/bid/69286 - http://svn.apache.org/viewvc?view=revision&revision=r1608698
CVE ID: CVE-2014-0233 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T09:05:39.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0530.html - http://rhn.redhat.com/errata/RHSA-2014-0529.html - https://bugzilla.redhat.com/show_bug.cgi?id=1096955
CVE ID: CVE-2014-0234 State: PUBLISHED Published: 2020-02-12T00:09:56 Last Updated: 2024-08-06T09:05:39.263Z Vendors: n/a Products: Red Hat OpenShift Enterprise Problem Types: Password Description: The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/openshift-extras/blob/master/README.md - http://openwall.com/lists/
ontainer: References: - https://github.com/openshift/openshift-extras/blob/master/README.md - http://openwall.com/lists/oss-security/2014/06/05/19 - https://bugzilla.redhat.com/show_bug.cgi?id=1097008 - https://rhn.redhat.com/errata/RHSA-2014-0487.html - http://www.securityfocus.com/bid/67657
CVE ID: CVE-2014-0235 State: REJECTED Published: 2014-04-08T21:00:00 Last Updated: 2014-07-03T13:57:01 Description: No description available.
CVE ID: CVE-2014-0236 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T09:05:39.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c. Additional Analyst Notes: - CVE Program Container: References: - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=67329 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f3f22ff5c697aef854ffc1918bce708b37481b0f
CVE ID: CVE-2014-0237 State: PUBLISHED Published: 2014-06-01T01:00:00 Last Updated: 2024-08-06T09:05:39.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59329 - https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d - http://secunia.com/advisories/59418 - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/67759 -
d - http://secunia.com/advisories/59418 - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/67759 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://secunia.com/advisories/59061 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/60998 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/
hives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://bugs.php.net/bug.php?id=67328
CVE ID: CVE-2014-0238 State: PUBLISHED Published: 2014-06-01T01:00:00 Last Updated: 2024-08-06T09:05:39.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59329 - http://secunia.com/advisories/59418 - https://support.apple.com/HT204659 - https://bugs.php.net/bug.php?id=67327 - http://www-01.ibm.com/support/docview.ws
- https://support.apple.com/HT204659 - https://bugs.php.net/bug.php?id=67327 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0 - http://www.debian.org/security/2014/dsa-3021 - http://www.securityfocus.com/bid/67765 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://secunia.com/advisories/59061 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/60998 - http://lists.apple.com/archives/security-announce/2015/Apr/msg0000
angeLog-5.php - http://secunia.com/advisories/60998 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html
CVE ID: CVE-2014-0239 State: PUBLISHED Published: 2014-05-28T01:00:00 Last Updated: 2024-08-06T09:05:39.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/security/CVE-2014-0239 - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://www.securi
tp://www.samba.org/samba/security/CVE-2014-0239 - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://www.securityfocus.com/bid/67691 - http://secunia.com/advisories/59579 - http://www.securitytracker.com/id/1030309
CVE ID: CVE-2014-0240 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T09:05:39.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59551 - http://www.securityfocus.com/bid/67532 - http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html - http://www.openwall.com/lists/oss-security/2014/05/
//modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html - http://www.openwall.com/lists/oss-security/2014/05/21/1 - http://rhn.redhat.com/errata/RHSA-2014-0789.html - http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html - http://secunia.com/advisories/60094
CVE ID: CVE-2014-0241 State: PUBLISHED Published: 2019-12-13T12:58:21 Last Updated: 2024-08-06T09:05:39.448Z Vendors: rubygem-hammer_cli_foreman Products: rubygem-hammer_cli_foreman Problem Types: /etc/hammer/cli.modules.d/foreman.yml is world-readable Description: rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0241 - https://access.redhat.com/security/cve/cve-2014-0241
CVE ID: CVE-2014-0242 State: PUBLISHED Published: 2019-12-09T19:33:29 Last Updated: 2024-08-06T09:05:39.434Z Vendors: mod_wsgi Products: mod_wsgi Problem Types: General Race Condition Description: mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/21/1 - http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html - http://modwsgi.readthedocs.org/en/latest/rele
//blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html - http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.4.html - http://www.securityfocus.com/bid/67534
CVE ID: CVE-2014-0243 State: PUBLISHED Published: 2018-07-19T17:00:00 Last Updated: 2024-08-06T09:05:39.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/58536 - http://www.openwall.com/lists/oss-security/2014/05/28/1 - http://www.securityfocus.com/bid/67674 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134166.html - http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=0426323df1641596c4f01ef5a
ounce/2014-June/134166.html - http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=0426323df1641596c4f01ef5a716a3b65276f01c - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134160.html - https://bugzilla.redhat.com/show_bug.cgi?id=1101669 - http://seclists.org/fulldisclosure/2014/May/145 - http://packetstormsecurity.com/files/126857/Check_MK-Arbitrary-File-Disclosure.html - https://www.securityfocus.com/archive/1/532224/100/0/threaded - http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=a2ef8d00c53ec9cbd05c4ae2f09b50761130e7ce
CVE ID: CVE-2014-0244 State: PUBLISHED Published: 2014-06-23T14:00:00 Last Updated: 2024-08-06T09:05:39.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:136 - http://rhn.redhat.com/errata/RHSA-2014-0866.html - http://www.samba.org/samba/security/CVE-2014-
s?name=MDVSA-2014:136 - http://rhn.redhat.com/errata/RHSA-2014-0866.html - http://www.samba.org/samba/security/CVE-2014-0244 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.securityfocus.com/bid/68148 - http://secunia.com/advisories/61218 - http://secunia.com/advisories/59834 - http://linux.oracle.com/errata/ELSA-2014-0866.html - http://secunia.com/advisories/59848 - http://www.securityfocus.com/archive/1/532757/100/0/threaded - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://secunia.com/advisories/59407 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://secunia.com/advisories/59433 - http://
lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://secunia.com/advisories/59433 - http://secunia.com/advisories/59919 - http://advisories.mageia.org/MGASA-2014-0279.html - http://secunia.com/advisories/59378 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 - http://secunia.com/advisories/59579 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - https://bugzilla.redhat.com/show_bug.cgi?id=1097815 - http://www.securitytracker.com/id/1030455
CVE ID: CVE-2014-0245 State: PUBLISHED Published: 2020-01-02T19:42:50 Last Updated: 2024-08-06T09:05:39.384Z Vendors: Red Hat Products: JBoss Portal Problem Types: Information disclosure via unsafe concurrency handling in interceptor Description: It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss
y is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss Portal 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0245 - https://access.redhat.com/security/cve/cve-2014-0245 - https://access.redhat.com/errata/RHSA-2015:1009
CVE ID: CVE-2014-0246 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T09:05:39.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67634 - https://bugzilla.redhat.com/show_bug.cgi?id=1101393 - http://www.openwall.com/lists/oss-security/2014/05/27/1
CVE ID: CVE-2014-0247 State: PUBLISHED Published: 2014-07-03T17:00:00 Last Updated: 2024-08-06T09:05:39.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html - http://www.ubuntu.com/usn/USN-2253-1 - http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0247.html - https://www.libre
ubuntu.com/usn/USN-2253-1 - http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0247.html - https://www.libreoffice.org/about-us/security/advisories/cve-2014-0247/ - http://www.securityfocus.com/bid/68151 - http://secunia.com/advisories/57383 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00006.html - https://gerrit.libreoffice.org/gitweb?p=core.git%3Ba=blobdiff%3Bf=sfx2/source/doc/docmacromode.cxx%3Bh=4d4ae52b4339582a039744d03671c1db0633d6c3%3Bhp=2108d1920f8148ff60fd4a57684f295d6d733e7b%3Bhb=1b0402f87c9b17fef2141130bfaa1798ece6ba0d%3Bhpb=4d2113250fa7ed62fe2c53ed0f76e3de5875cb81 - http://rhn.redhat.com/errata/RHSA-2015-0377.html - http://secunia.com/advisories/59330 - htt
2fe2c53ed0f76e3de5875cb81 - http://rhn.redhat.com/errata/RHSA-2015-0377.html - http://secunia.com/advisories/59330 - https://bugs.mageia.org/show_bug.cgi?id=13580
CVE ID: CVE-2014-0248 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T09:05:39.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59554 - http://secunia.com/advisories/59555 - http://secunia.com/advisories/59346 - http://rhn.redhat.com/errata/RHSA-2015-1888.html - http://
.com/advisories/59555 - http://secunia.com/advisories/59346 - http://rhn.redhat.com/errata/RHSA-2015-1888.html - http://rhn.redhat.com/errata/RHSA-2014-0793.html - http://www.securitytracker.com/id/1030457 - http://rhn.redhat.com/errata/RHSA-2014-0785.html - http://rhn.redhat.com/errata/RHSA-2014-0791.html - http://rhn.redhat.com/errata/RHSA-2014-0792.html - http://rhn.redhat.com/errata/RHSA-2014-0794.html
CVE ID: CVE-2014-0249 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T09:05:39.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedorahosted.org/pipermail/sssd-devel/2014-May/019495.html - https://bugzilla.redhat.com/show_bug.cgi?id=1101751
CVE ID: CVE-2014-0250 State: PUBLISHED Published: 2014-11-16T17:00:00 Last Updated: 2024-08-06T09:05:39.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html - https://github.com/FreeRDP/FreeRDP/issues/1871 - https://github.com/FreeRDP/FreeRDP/pull/1874 - https://bugzilla.redhat.com/show_bug
ub.com/FreeRDP/FreeRDP/issues/1871 - https://github.com/FreeRDP/FreeRDP/pull/1874 - https://bugzilla.redhat.com/show_bug.cgi?id=998934 - http://security.gentoo.org/glsa/glsa-201412-18.xml - http://seclists.org/oss-sec/2014/q2/365 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:171 - http://advisories.mageia.org/MGASA-2014-0287.html - http://www.securityfocus.com/bid/67670
CVE ID: CVE-2014-0251 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:05:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint P
2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022 - http://www.securitytracker.com/id/1030227
CVE ID: CVE-2014-0252 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0253 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:13:09.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service (ASP.NET daemon hang) via crafted HTTP requests that trigger persistent resource consumption for a (1) stale or (2) closed connection, as exploited in the wild in February 2014, aka "POST Request DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029745 - http://osvdb.org/103162
alyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029745 - http://osvdb.org/103162 - http://www.securityfocus.com/bid/65415 - http://secunia.com/advisories/56793 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-009