Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nnah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75 - http://www.securityfocus.com/bid/76727 - http://savannah.nongnu.org/bugs/index.php?41590 - https://code.google.com/p/chromium/issues/detail?id=459050 - http://www.debian.org/security/2015/dsa-3370 - https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124 - http://www.securitytracker.com/id/1033536
CVE ID: CVE-2014-9746 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T13:55:04.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwal
ied other impact via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/11/4 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e8516535756f92dbf90940ac44bd45e1 - http://www.openwall.com/lists/oss-security/2015/09/25/4 - https://savannah.nongnu.org/bugs/?41309 - http://www.debian.org/security/2015/dsa-3370
CVE ID: CVE-2014-9747 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T13:55:04.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/11/4 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/src/type42/t42parse.c?id=8b281f83e8516535756f92dbf90940ac44bd45e1 - http://www.openwall.com/lists/oss-se
etype2.git/tree/src/type42/t42parse.c?id=8b281f83e8516535756f92dbf90940ac44bd45e1 - http://www.openwall.com/lists/oss-security/2015/09/25/4 - https://savannah.nongnu.org/bugs/?41309 - http://www.debian.org/security/2015/dsa-3370
CVE ID: CVE-2014-9748 State: PUBLISHED Published: 2020-02-11T16:54:57 Last Updated: 2024-08-06T13:55:04.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/libuv/KyNnGEXR0OA/NWb605ev2LUJ - https://github.com/libuv/libuv/issues/515 - https://github.com/libuv/libuv/pull/516 - h
libuv/KyNnGEXR0OA/NWb605ev2LUJ - https://github.com/libuv/libuv/issues/515 - https://github.com/libuv/libuv/pull/516 - https://github.com/nodejs/node/pull/2723 - https://groups.google.com/forum/#%21topic/libuv/WO2cl9zasN8
CVE ID: CVE-2014-9749 State: PUBLISHED Published: 2015-11-06T21:00:00 Last Updated: 2024-08-06T13:55:04.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/01/1 - http://bugs.squid-cache.org/show_bug.cgi?id=4066 - http://www.openwall.com/lists/oss-security/2015/10/11/4 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00052.html - http://www.openwall.com/lists/
ecurity/2015/10/11/4 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00052.html - http://www.openwall.com/lists/oss-security/2015/10/12/2
CVE ID: CVE-2014-9750 State: PUBLISHED Published: 2015-10-04T20:00:00 Last Updated: 2024-08-06T13:55:04.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/852879 - http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne - http://www.securityfocus.com/bid
http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne - http://www.securityfocus.com/bid/72583 - https://bugzilla.redhat.com/show_bug.cgi?id=1184573 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2015/dsa-3388 - http://rhn.redhat.com/errata/RHSA-2015-1459.html - http://bugs.ntp.org/show_bug.cgi?id=2671 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_us
CVE ID: CVE-2014-9751 State: PUBLISHED Published: 2015-10-04T20:00:00 Last Updated: 2024-08-06T13:55:04.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/852879 - http://support.ntp.org/bi
Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/852879 - http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://bugs.ntp.org/show_bug.cgi?id=2672 - http://www.debian.org/security/2015/dsa-3388 - http://www.securityfocus.com/bid/72584 - http://rhn.redhat.com/errata/RHSA-2015-1459.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_us - https://bugzilla.redhat.com/show_bug.cgi?id=1184572
CVE ID: CVE-2014-9752 State: PUBLISHED Published: 2015-11-16T19:00:00 Last Updated: 2024-08-06T13:55:04.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536834/100/0/threaded - http://update.atutor.ca/patch/2_2/2_2-6/patch.xml - http://karmainsecurity.com/KIS-2015-0
hive/1/536834/100/0/threaded - http://update.atutor.ca/patch/2_2/2_2-6/patch.xml - http://karmainsecurity.com/KIS-2015-05 - http://seclists.org/fulldisclosure/2015/Nov/10 - http://packetstormsecurity.com/files/134215/ATutor-2.2-File-Upload.html
CVE ID: CVE-2014-9753 State: PUBLISHED Published: 2020-02-11T17:51:14 Last Updated: 2024-08-06T13:55:04.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2015-06 - http://www.securityfocus.com/archive/1/archive/1/536835/100/0/threaded - http://seclists.org/fulldisclosure/2015/Nov/11 - http://update.atutor.ca/patch/2_2/2_2-6/patch.xml - https://github.com/atutor/ATutor/commit/950a0299954e69b8742cc1f1a632f564435d4d7d
CVE ID: CVE-2014-9754 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T13:55:04.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity (through the checking of the endpoint's SSL key) before initiating the exchange, which allows an attacker to perform a Man in the Middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537441/100/0/threaded - http://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.html -
ed - http://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.html - http://seclists.org/fulldisclosure/2016/Feb/8
CVE ID: CVE-2014-9755 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T13:55:04.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity (through the checking of the endpoint's SSL key) before initiating the exchange, which allows remote attackers to perform a replay attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537441/100/0/threaded - http://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.html - http:/
ttp://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.html - http://seclists.org/fulldisclosure/2016/Feb/8
CVE ID: CVE-2014-9756 State: PUBLISHED Published: 2015-11-19T20:00:00 Last Updated: 2024-08-06T13:55:04.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html - https://github.com/erikd/libsndfile/issues/92 - http://www.openwall.com/lists/oss-security/2014/12/24/3 - http://www.openwall.com/lists/oss-security/2015/11/03/9 - http://www.ubuntu.com/usn/USN-2832-
ss-security/2014/12/24/3 - http://www.openwall.com/lists/oss-security/2015/11/03/9 - http://www.ubuntu.com/usn/USN-2832-1 - https://github.com/erikd/libsndfile/commit/725c7dbb95bfaf8b4bb7b04820e3a00cceea9ce6 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html
CVE ID: CVE-2014-9757 State: PUBLISHED Published: 2016-02-08T19:00:00 Last Updated: 2024-08-06T13:55:04.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via serialized data in an XMPP message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537347/100/0/threaded - https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html - https://jira.atlassian.com/browse/BAM-17099 - http://packetstormsecurity.com/files/135352/Bamboo-De
-20-794376535.html - https://jira.atlassian.com/browse/BAM-17099 - http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html
CVE ID: CVE-2014-9758 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T13:55:04.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/05/4 - http://appcheck-ng.com/unpatched-vulnerabilites-in-magento-e-commerce-platform/
CVE ID: CVE-2014-9759 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T13:55:04.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/03/2 - https://mantisbt.org/bugs/view.php?id=20277 - http://www.openwall.com/lists/oss-security/2016/01/02/1 - http://www.securitytracker.com/id/1035518 - http://sourceforge.net/p/mantisbt/mai
.com/lists/oss-security/2016/01/02/1 - http://www.securitytracker.com/id/1035518 - http://sourceforge.net/p/mantisbt/mailman/message/32948048/
CVE ID: CVE-2014-9760 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T13:55:04.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97104 - http://www.openwall.com/lists/oss-security/2016/01/15/11 - https://github.com/gosa-project/gosa-core/commit/e35b990464a2c2cf64d6833a217ed944876e7732
CVE ID: CVE-2014-9761 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T13:55:04.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errat
.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://rhn.redhat.com/errata/RHSA-2017-0680.html - http://www.ubuntu.com/usn/USN-2985-2 - http://www.openwall.com/lists/oss-security/2016/01/20/1 - https://security.gentoo.org/glsa/201702-11 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.ht
suse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html - http://www.openwall.com/lists/oss-security/2016/01/19/11 - http://www.securityfocus.com/bid/83306 - http://www.ubuntu.com/usn/USN-2985-1 - https://sourceware.org/bugzilla/show_bug.cgi?id=16962 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-C
9/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2014-9762 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T13:55:04.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a GIF image without a colormap. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/tree/ChangeLog - https://security.gentoo.org/glsa/201611-12 - http://www.debian.org/security/2016/dsa-3537 - https://git.enlightenment.org/legacy/imlib2.git/commit/?h=v1.4.7&id=39641e74a560982fbf93f29bf96b37d27803cb56 - http://www.securityfocus.com/bid/90959 - http://lists.opensuse.org/op
.4.7&id=39641e74a560982fbf93f29bf96b37d27803cb56 - http://www.securityfocus.com/bid/90959 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2014-9763 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T13:55:04.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted PNM file. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/tree/ChangeLog - https://security.gentoo.org/glsa/201611-12 - http://www.securityfocus.com/bid/90955 - http://www.debian.org/security/2016/dsa-3537 - https://git.enlightenment.org/legacy/imlib2.git/commit/?h=v1.4.7&id=c21beaf1780cf3ca291735ae7d58a3dde63277a2 - http://lists.ope
/git.enlightenment.org/legacy/imlib2.git/commit/?h=v1.4.7&id=c21beaf1780cf3ca291735ae7d58a3dde63277a2 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2014-9764 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T13:55:04.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/tree/ChangeLog - http://www.securityfocus.com/bid/90962 - https://security.gentoo.org/glsa/201611-12 - http://www.debian.org/security/2016/dsa-3537 - https://git.enlightenment.org/legacy/imlib2.git/commit/?h=v1.4.7&id=1f9b0b32728803a1578e658cd0955df773e34f49 - http://lists.opensuse.org/opensuse-updat
egacy/imlib2.git/commit/?h=v1.4.7&id=1f9b0b32728803a1578e658cd0955df773e34f49 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2014-9765 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T13:55:04.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/08/2 - https://github.com/jmacd/xdelta-devel/commit/ef93ff74203e030073b898c05e8b4860b5d09ef2 - http://www.ubuntu.com/usn/USN-2901-1 - http://www.debian.org/security/2016/dsa-3484 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00125.html -
01-1 - http://www.debian.org/security/2016/dsa-3484 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00125.html - https://security.gentoo.org/glsa/201701-40 - http://www.securityfocus.com/bid/83109 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00131.html - http://www.openwall.com/lists/oss-security/2016/02/08/1
CVE ID: CVE-2014-9766 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-06T13:55:04.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=69014 - https://lists.freedesktop.org/archives/pixman/2014-April/003244.html - http://www.openwall.com/lists/oss-security/2016/02/24/13 - https://cgit.freedesktop.org/pixman/commit/?id=8
03244.html - http://www.openwall.com/lists/oss-security/2016/02/24/13 - https://cgit.freedesktop.org/pixman/commit/?id=857e40f3d2bc2cfb714913e0cd7e6184cf69aca3 - https://bugzilla.redhat.com/show_bug.cgi?id=972647 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.openwall.com/lists/oss-security/2016/02/24/15 - https://lists.x.org/archives/xorg-announce/2014-July/002452.html - http://www.ubuntu.com/usn/USN-2918-1 - http://www.debian.org/security/2016/dsa-3525
CVE ID: CVE-2014-9767 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T13:55:04.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - http://www.securitytracker.com/id/1035311 - https://bugs.php.net/bug.php?id=67996 - https://github.com/facebook/hhvm/commit/65c95a015
curitytracker.com/id/1035311 - https://bugs.php.net/bug.php?id=67996 - https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686 - http://www.openwall.com/lists/oss-security/2016/03/16/20 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/76652 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - https://bugs.php.net/bug.php?id=70350 - http://lists.opensuse.org/opensuse-security-announce
nce/2016-04/msg00057.html - https://bugs.php.net/bug.php?id=70350 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
CVE ID: CVE-2014-9768 State: PUBLISHED Published: 2016-03-18T14:00:00 Last Updated: 2024-08-06T13:55:04.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dom
irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dominic-white - https://vimeo.com/96718889
CVE ID: CVE-2014-9769 State: PUBLISHED Published: 2016-03-28T16:00:00 Last Updated: 2024-08-06T13:55:04.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata during use of a regular expression in an Emerging Threats Open ruleset. Additional Analyst Notes: - CVE Program Container: References: - http://vcs.pcre.org/pcre?view=revision&revision=1475 - http://www.securityfocus.com/bid/85570 -
ontainer: References: - http://vcs.pcre.org/pcre?view=revision&revision=1475 - http://www.securityfocus.com/bid/85570 - https://redmine.openinfosecfoundation.org/issues/1693 - http://www.securitytracker.com/id/1035424 - http://www.openwall.com/lists/oss-security/2016/03/26/1 - https://bugs.debian.org/819050