Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8472 State: PUBLISHED Published: 2014-11-04T20:00:00 Last Updated: 2024-08-06T13:18:48.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98535 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-
.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx - http://www.securitytracker.com/id/1031214
CVE ID: CVE-2014-8473 State: PUBLISHED Published: 2014-11-04T20:00:00 Last Updated: 2024-08-06T13:18:48.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98536 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx - http://www.securityfocus.com/bid/709
curity-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx - http://www.securityfocus.com/bid/70925 - http://www.securitytracker.com/id/1031214
CVE ID: CVE-2014-8474 State: PUBLISHED Published: 2014-11-04T20:00:00 Last Updated: 2024-08-06T13:18:48.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98537 - http://www.securityfocus.com/bid/70926 - http://www.ca.c
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98537 - http://www.securityfocus.com/bid/70926 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx - http://www.securitytracker.com/id/1031214
CVE ID: CVE-2014-8475 State: PUBLISHED Published: 2014-11-18T15:00:00 Last Updated: 2024-08-06T13:18:48.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service (sshd deadlock and prevention of new connections) by ending multiple connections before authentication is completed. Additional Analyst Notes: - CVE Program Container: References: - https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc - http://packetstormsecurity.com/files/128972/Fr
https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A24.sshd.asc - http://packetstormsecurity.com/files/128972/FreeBSD-Security-Advisory-sshd-Denial-Of-Service.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98491 - http://secunia.com/advisories/61440 - http://www.securityfocus.com/bid/70913 - http://www.securitytracker.com/id/1031168
CVE ID: CVE-2014-8476 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:18:48.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a call to getlogin, which returns the entire buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3070 - https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A25.setlogin.asc - http://secunia.com/advisories/62218 - http://secunia.com/advisories/61118
CVE ID: CVE-2014-8478 State: PUBLISHED Published: 2015-01-21T17:00:00 Last Updated: 2024-08-06T13:18:48.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service (reboot) via malformed HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdf
CVE ID: CVE-2014-8479 State: PUBLISHED Published: 2015-01-21T17:00:00 Last Updated: 2024-08-06T13:18:48.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service (reboot) via crafted FTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdf
CVE ID: CVE-2014-8480 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:18:48.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 lacks intended decoder-table flags for certain RIP-relative instructions, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1156615 - http://www.securityfocus.com/bid/70710 - http://www.openwall.com/lists/oss-security/2014/10/23/7 - http
cgi?id=1156615 - http://www.securityfocus.com/bid/70710 - http://www.openwall.com/lists/oss-security/2014/10/23/7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f6f1480d86bf9fc16c160d803ab1d006e3058d5 - https://github.com/torvalds/linux/commit/3f6f1480d86bf9fc16c160d803ab1d006e3058d5 - http://thread.gmane.org/gmane.comp.emulators.kvm.devel/128427
CVE ID: CVE-2014-8481 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:18:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not properly handle invalid instructions, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a crafted application that triggers (1) an improperly fetched instruction or (2) an instruction that occupies too many bytes. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8480. Additional Analyst Notes: - CVE Program Container: References: - h
xists because of an incomplete fix for CVE-2014-8480. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1156615 - https://github.com/torvalds/linux/commit/a430c9166312e1aa3d80bce32374233bdbfeba32 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a430c9166312e1aa3d80bce32374233bdbfeba32 - http://secunia.com/advisories/62042 - http://www.openwall.com/lists/oss-security/2014/10/23/7 - http://thread.gmane.org/gmane.comp.emulators.kvm.devel/128427
CVE ID: CVE-2014-8483 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:18:48.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61932 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00046.html - http://www.ubuntu.com/usn/USN-2401-1 - http://secunia.com/advisories/62261 - http://www.debian.org/security/2014/dsa-3063 - http://bugs.quassel-irc.org/issues/1314 - http://lists.opensuse.org/opensu
ttp://www.debian.org/security/2014/dsa-3063 - http://bugs.quassel-irc.org/issues/1314 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html - http://www.debian.org/security/2014/dsa-3068 - http://secunia.com/advisories/62035 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00028.html - https://github.com/quassel/quassel/commit/8b5ecd226f9208af3074b33d3b7cf5e14f55b138
CVE ID: CVE-2014-8484 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62241 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - http://openwall.com/lists/oss-security/2014/10/23/5 - http://www.o
ipermail/package-announce/2014-December/145328.html - http://openwall.com/lists/oss-security/2014/10/23/5 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://sourceware.org/bugzilla/show_bug.cgi?id=17509 - http://www.securityfocus.com/bid/70714 - http://www.openwall.com/lists/oss-security/2014/10/26/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1156272 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://secunia.com/advisories/62746 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883ca
unce/2014-December/145742.html - https://sourceware.org/git/?p=binutils-gdb.git%3Ba=commit%3Bh=bd25671c6f202c4a5108883caa2adb24ff6f361f - https://security.gentoo.org/glsa/201612-24
CVE ID: CVE-2014-8485 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62241 - https://sourceware.org/bugzilla/show_bug.cgi?id=17510 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail
ecurity/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - http://www.securityfocus.com/bid/70741 - https://bugzilla.redhat.com/show_bug.cgi?id=1157276 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.openwall.com/lists/oss-security/2014/10/26/2 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Ba=commit%3Bh=493a33860c71cac998f1a56d6d87d6faa801fbaa - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://secunia.com/advisories/62746 - http://lists.fedoraproject.org/pipermail/package-announc
14-December/145262.html - http://secunia.com/advisories/62746 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - http://lcamtuf.blogspot.co.uk/2014/10/psa-dont-run-strings-on-untrusted-files.html - https://security.gentoo.org/glsa/201612-24
CVE ID: CVE-2014-8486 State: REJECTED Published: 2016-04-29T22:00:00 Last Updated: 2016-04-29T21:57:01 Description: No description available.
CVE ID: CVE-2014-8487 State: PUBLISHED Published: 2015-02-24T15:00:00 Last Updated: 2024-08-06T13:18:48.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534739/100/0/threaded - http://www.securityfocus.com/bid/72714
CVE ID: CVE-2014-8488 State: PUBLISHED Published: 2014-12-10T01:00:00 Last Updated: 2024-08-06T13:18:48.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156596.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156526.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156564.html - http://seclists
5-April/156526.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156564.html - http://seclists.org/fulldisclosure/2014/Oct/111
CVE ID: CVE-2014-8489 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:18:48.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the TargetResource parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/35 - http://tetraph.com/security/cves/cve-2014-8489-ping-identity-corporation-pingfederate-6-10-1-sp-endpoints-dest-redirect-privilege-escalation-security-vulnerability/ - http://packe
y-corporation-pingfederate-6-10-1-sp-endpoints-dest-redirect-privilege-escalation-security-vulnerability/ - http://packetstormsecurity.com/files/129454/PingFederate-6.10.1-SP-Endpoints-Open-Redirect.html
CVE ID: CVE-2014-8490 State: PUBLISHED Published: 2020-01-28T19:27:58 Last Updated: 2024-08-06T13:18:48.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TennisConnect COMPONENTS 9.927 allows remote attackers to inject arbitrary web script or HTML via the pid parameter to index.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://tetraph.com/security/cves/cve-2014-8490-tennisconnect-components-system-xss-cross-site-scripting-security-vulnerability/ - http://seclists.org/fulldisclosure/2014/Dec/83
CVE ID: CVE-2014-8491 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-06T13:18:48.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banner_widget_default/gallery.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8238 - https://g0blin.co.uk/cve-2014-8491/
CVE ID: CVE-2014-8492 State: PUBLISHED Published: 2017-10-06T14:00:00 Last Updated: 2024-08-06T13:18:48.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) site_name, (2) message, or (3) site_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://g0blin.co.uk/cve-2014-8492/ - https://wpvulndb.com/vulnerabilities/8239
CVE ID: CVE-2014-8493 State: PUBLISHED Published: 2014-11-20T17:00:00 Last Updated: 2024-08-06T13:18:48.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129139/ZTE-ZXHN-H108L-Access-Bypass.html - http://www.exploit-db.com/exploits/35276 - http://seclists.org/fulldisclosure/2014/Nov/46 - https://projectzero.gr/en/2014/11/zte-zxhn-h108l-authentication-bypass/ - http://www.exploit-db.com/exploits/35272 - https://exchange.xforce.ibmclou
14/11/zte-zxhn-h108l-authentication-bypass/ - http://www.exploit-db.com/exploits/35272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98733
CVE ID: CVE-2014-8494 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T13:18:48.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98315 - http://packetstormsecurity.com/files/128868/ESTsoft-ALUpdate-8.5.1.0.0-Privilege-Escalation.html - http://www.securityfocus.com/bid/70790
CVE ID: CVE-2014-8495 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:18:48.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031164 - http://www.securityfocus.com/bid/70799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98337 - http://support.citrix.com/article/CTX200260
CVE ID: CVE-2014-8496 State: PUBLISHED Published: 2014-12-10T00:00:00 Last Updated: 2024-08-06T13:18:48.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digicom DG-5514T ADSL router with firmware 3.2 generates predictable session IDs, which allows remote attackers to gain administrator privileges via a brute force session hijacking attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=La9nMeVCtt4
CVE ID: CVE-2014-8498 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:18:48.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71016 - http://osvdb.org/show/osvdb/114483 - http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html - http://seclists.org/
svdb/114483 - http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/18 - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/98596 - http://www.exploit-db.com/exploits/35210
CVE ID: CVE-2014-8499 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:18:48.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98595 - http://osvdb.org/show/osvdb/114485 - http://osvdb.org/show/osvdb/114484 -
ge.xforce.ibmcloud.com/vulnerabilities/98595 - http://osvdb.org/show/osvdb/114485 - http://osvdb.org/show/osvdb/114484 - http://www.securityfocus.com/bid/71018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98597 - http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Nov/18 - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt - http://www.exploit-db.com/exploits/35210
CVE ID: CVE-2014-8500 State: PUBLISHED Published: 2014-12-11T02:00:00 Last Updated: 2024-08-06T13:18:48.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://marc.info/?l=bugtraq&m=142180687100892&w=2 - http://security.gentoo.org/glsa/glsa-201502-03.xml - http://secunia.com/advis
rc.info/?l=bugtraq&m=142180687100892&w=2 - http://security.gentoo.org/glsa/glsa-201502-03.xml - http://secunia.com/advisories/62122 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-002.txt.asc - https://kb.isc.org/article/AA-01216/ - http://www.mandriva.com/security/advisories?name=MDVSA-2015:165 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html - http://secunia.com/advisories/62064 - http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10676 - http://www.debian.org/security/2014/dsa-3094 - http://securitytracker.
r.net/InfoCenter/index?page=content&id=JSA10676 - http://www.debian.org/security/2014/dsa-3094 - http://securitytracker.com/id?1031311 - http://advisories.mageia.org/MGASA-2014-0524.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html - http://www.kb.cert.org/vuls/id/264212 - http://www.securityfocus.com/bid/71590 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html - http://ubuntu.com/usn/usn-2437-1 - http://marc.info/?l=bugtraq&m=144000632319155&w=2 - http://lists.apple.com/archives
- http://ubuntu.com/usn/usn-2437-1 - http://marc.info/?l=bugtraq&m=144000632319155&w=2 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://rhn.redhat.com/errata/RHSA-2016-0078.html - https://support.apple.com/HT205219 - http://marc.info/?l=bugtraq&m=142180687100892&w=2 - http://marc.info/?l=bugtraq&m=144000632319155&w=2 - https://security.netapp.com/advisory/ntap-20190730-0002/