Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7851 State: PUBLISHED Published: 2017-10-16T15:00:00 Last Updated: 2024-08-06T13:03:27.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1161730 - https://bugzilla.redhat.com/show_bug.cgi?id=1165311
CVE ID: CVE-2014-7852 State: PUBLISHED Published: 2014-12-11T15:00:00 Last Updated: 2024-08-06T13:03:27.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031363 - http://rhn.redhat.com/errata/RHSA-2014-1973.html
CVE ID: CVE-2014-7853 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T13:03:27.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100891 - http://rhn.redhat.com/errata/RHSA-2015-0920.html
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100891 - http://rhn.redhat.com/errata/RHSA-2015-0920.html - http://rhn.redhat.com/errata/RHSA-2015-0215.html - http://rhn.redhat.com/errata/RHSA-2015-0217.html - http://rhn.redhat.com/errata/RHSA-2015-0218.html - http://rhn.redhat.com/errata/RHSA-2015-0216.html - http://www.securitytracker.com/id/1031741
CVE ID: CVE-2014-7854 State: REJECTED Published: 2022-07-07T16:03:50 Last Updated: 2022-07-07T16:03:50 Description: No description available.
CVE ID: CVE-2014-7855 State: REJECTED Published: 2020-11-05T22:15:08 Last Updated: 2020-11-05T22:15:08 Description: No description available.
CVE ID: CVE-2014-7856 State: REJECTED Published: 2020-11-05T22:15:47 Last Updated: 2020-11-05T22:15:47 Description: No description available.
CVE ID: CVE-2014-7857 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T13:03:27.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html - http://www.se
Container: References: - http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html - http://www.securityfocus.com/archive/1/535626/100/200/threaded - http://seclists.org/fulldisclosure/2015/May/125 - http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf - http://www.securityfocus.com/bid/74880
CVE ID: CVE-2014-7858 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T13:03:27.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html - http://www.securityfocus.com/archive/1/535626/100/200/threaded - http://www.securityfocus.com/bid/74886 - http://seclists.org/fulldisclosure/2015/May/125 - http://www.search-lab.hu/media/D-Link_Sec
ecurityfocus.com/bid/74886 - http://seclists.org/fulldisclosure/2015/May/125 - http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE ID: CVE-2014-7859 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T13:03:27.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html - http://www.securityfocus.com/bid/74878 - http://www.securityfocus.com/archive/1/535626
ink-Bypass-Buffer-Overflow.html - http://www.securityfocus.com/bid/74878 - http://www.securityfocus.com/archive/1/535626/100/200/threaded - http://seclists.org/fulldisclosure/2015/May/125 - http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE ID: CVE-2014-7860 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T13:03:27.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos and publish them to an arbitrary Facebook profile via a target album_id and access_token. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html - http://www.securityfocus.com/bid/74884 - http://www.securityfocus.com/archive/1/535626/100/200/t
-Buffer-Overflow.html - http://www.securityfocus.com/bid/74884 - http://www.securityfocus.com/archive/1/535626/100/200/threaded - http://seclists.org/fulldisclosure/2015/May/125 - http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf
CVE ID: CVE-2014-7861 State: PUBLISHED Published: 2014-10-05T10:00:00 Last Updated: 2024-08-06T13:03:27.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, which allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70249 - http://zerodayinitiative.com/advisories/ZDI-14-346/
CVE ID: CVE-2014-7862 State: PUBLISHED Published: 2018-01-04T17:00:00 Last Updated: 2024-08-06T13:03:27.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html - https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt - http://www.securityfocus.com/bid/71849 - http://www.securityfocus.com/archive/1/534356/100/0/threaded - htt
_admin.txt - http://www.securityfocus.com/bid/71849 - http://www.securityfocus.com/archive/1/534356/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/99595 - https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html - https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin - http://seclists.org/fulldisclosure/2015/Jan/2
CVE ID: CVE-2014-7863 State: PUBLISHED Published: 2020-02-08T16:57:37 Last Updated: 2024-08-06T13:03:27.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to (1) read arbitrary files via the fileName parameter in a copyfile operation or (2) obtain sensitive information via a directory listing in a listdirectory operation to servlet/FailOverHelperServlet. Additional Analyst Notes: - CVE Program Container:
isting in a listdirectory operation to servlet/FailOverHelperServlet. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt - http://www.securityfocus.com/archive/1/archive/1/534575/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/114 - https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerabilities-in-failoverhelperservlet - https://exchange.xforce.ibmcloud.com/vulnerabilities/100554
CVE ID: CVE-2014-7864 State: PUBLISHED Published: 2015-02-04T16:00:00 Last Updated: 2024-08-06T13:03:27.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
HelperServlet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100555 - http://seclists.org/fulldisclosure/2015/Jan/114 - http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html - https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerabilities-in-failoverhelperservlet - http://www.securityfocus.com/archive/1/534575/100/0/threaded - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt
CVE ID: CVE-2014-7865 State: REJECTED Published: 2015-01-18T02:00:00 Last Updated: 2015-01-18T01:57:01 Description: No description available.
CVE ID: CVE-2014-7866 State: PUBLISHED Published: 2014-12-10T18:00:00 Last Updated: 2024-08-06T13:03:27.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1) fileName parameter to the MigrateLEEData servlet or (2) zipFileName parameter in a downloadFileFromProbe operation to the MigrateCentralData servlet. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/21
ervlet. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/21 - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt - http://www.securityfocus.com/archive/1/533946/100/0/threaded - https://support.zoho.com/portal/manageengine/helpcenter/articles/fix-for-remote-code-execution-via-file-upload-vulnerability - http://packetstormsecurity.com/files/129037/ManageEngine-OpManager-Social-IT-Plus-IT360-File-Upload-SQL-Injection.html
CVE ID: CVE-2014-7867 State: PUBLISHED Published: 2014-12-04T17:00:00 Last Updated: 2024-08-06T13:03:27.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allows remote attackers or remote authenticated users to execute arbitrary SQL commands via the probeName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zoho.com/portal/manageengine/helpcenter/articles/sql-injection-vulnerability-fix
CVE ID: CVE-2014-7868 State: PUBLISHED Published: 2014-12-04T17:00:00 Last Updated: 2024-08-06T13:03:27.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the APMBVHandler servlet or (2) query parameter in a compare operation to the DataComparisonServlet servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71002 - http://seclists.org/fulldisclosure/2014/No
CVE Program Container: References: - http://www.securityfocus.com/bid/71002 - http://seclists.org/fulldisclosure/2014/Nov/21 - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt - http://www.securityfocus.com/archive/1/533946/100/0/threaded - https://support.zoho.com/portal/manageengine/helpcenter/articles/sql-injection-vulnerability-fix - http://packetstormsecurity.com/files/129037/ManageEngine-OpManager-Social-IT-Plus-IT360-File-Upload-SQL-Injection.html
CVE ID: CVE-2014-7869 State: PUBLISHED Published: 2014-10-06T14:00:00Z Last Updated: 2024-09-17T00:46:45.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2253103 - https://www.drupal.org/node/2254853 - http://www.securityfocus.com/bid/67173 - http://secunia.com/advisories/58307
CVE ID: CVE-2014-7870 State: PUBLISHED Published: 2014-10-06T14:00:00Z Last Updated: 2024-09-17T00:51:04.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to admin/config/search/custom_search/results. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2231531 - https://www.drupal.org/node/2231665 - http://seclists.org/fulldisclosure/2014/Apr/41 - https://www.drup
g/node/2231531 - https://www.drupal.org/node/2231665 - http://seclists.org/fulldisclosure/2014/Apr/41 - https://www.drupal.org/node/2231533
CVE ID: CVE-2014-7871 State: PUBLISHED Published: 2014-11-21T15:00:00 Last Updated: 2024-08-06T13:03:27.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html - http://www.securityfocus.com/bid/70982 - http://www.securityfocus.com/archive/1/533936/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/98563
CVE ID: CVE-2014-7872 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T13:03:27.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37065/ - http://www.osvdb.org/122355 - http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html
CVE ID: CVE-2014-7874 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T13:03:27.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97024 - http://www.securitytracker.com/id/1031050 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr
- http://www.securitytracker.com/id/1031050 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04476799 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04476799
CVE ID: CVE-2014-7875 State: PUBLISHED Published: 2014-11-04T18:00:00 Last Updated: 2024-08-06T13:03:27.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with firmware before 53.236.2 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04483249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98422 - http://www.securityfocus.com/bid/70863 - http://www.securitytracker.com/id
e.xforce.ibmcloud.com/vulnerabilities/98422 - http://www.securityfocus.com/bid/70863 - http://www.securitytracker.com/id/1031153 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04483249 - http://secunia.com/advisories/62005
CVE ID: CVE-2014-7876 State: PUBLISHED Published: 2015-03-31T10:00:00 Last Updated: 2024-08-06T13:03:27.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031972 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisp
al/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432
CVE ID: CVE-2014-7877 State: PUBLISHED Published: 2014-10-30T10:00:00 Last Updated: 2024-08-06T13:03:27.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031139 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04491186 - http://www.securityfocus.com/bid/70808 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04491186 - http://secunia.com/advisories/61196 - https://exchange.xforce.ibmcloud.co
/public/kb/docDisplay?docId=emr_na-c04491186 - http://secunia.com/advisories/61196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98382
CVE ID: CVE-2014-7878 State: PUBLISHED Published: 2014-11-14T00:00:00 Last Updated: 2024-08-06T13:03:27.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived from the Seed Node image, uses the same security keys across different customers' installations, which allows remote attackers to execute arbitrary code by leveraging these keys for a connection. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04500238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98636 - h
l/site/hpsc/public/kb/docDisplay?docId=emr_na-c04500238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98636 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04500238
CVE ID: CVE-2014-7879 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:03:27.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778
CVE ID: CVE-2014-7880 State: PUBLISHED Published: 2014-12-17T16:00:00 Last Updated: 2024-08-06T13:03:27.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031387 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04530570 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04530570
CVE ID: CVE-2014-7881 State: PUBLISHED Published: 2015-01-15T22:00:00 Last Updated: 2024-08-06T13:03:27.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04537915 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04537915 - http://secunia.com/advisories/62162
CVE ID: CVE-2014-7882 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T13:03:27.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72459 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04539443 - http://www.securitytracker.com/id/1031619 - http://secunia.com/advisories/62654 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04539443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100642
CVE ID: CVE-2014-7883 State: PUBLISHED Published: 2015-02-15T20:00:00 Last Updated: 2024-08-06T13:03:27.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/867593 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906 - http://www.securitytracker.com/id/1031688 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906