Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7212 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7213 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7214 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7215 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7216 State: PUBLISHED Published: 2015-09-11T20:00:00 Last Updated: 2024-08-06T12:40:19.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file. Additional Analyst Notes: - CVE Program Container: References: - https://www.rcesecurity.com/2015/09/cve-2014-7216-a-journey-through-yahoos-bug-bounty-program/ - https://hackerone.com/reports/10767 - http://www.securityfocus.com/archive/1/536390/100/0/threaded - http://www.securitytracker.
hackerone.com/reports/10767 - http://www.securityfocus.com/archive/1/536390/100/0/threaded - http://www.securitytracker.com/id/1033544 - http://seclists.org/fulldisclosure/2015/Sep/24 - http://packetstormsecurity.com/files/133443/Yahoo-Messenger-11.5.0.228-Buffer-Overflow.html
CVE ID: CVE-2014-7217 State: PUBLISHED Published: 2014-10-03T01:00:00 Last Updated: 2024-08-06T12:40:19.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00009.htm
al Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00009.html - http://www.phpmyadmin.net/home_page/security/PMASA-2014-11.php - http://www.securityfocus.com/bid/70252 - http://secunia.com/advisories/61777 - https://github.com/phpmyadmin/phpmyadmin/commit/c1a3f85fbd1a9569646e7cf1b791325ae82c7961 - https://github.com/phpmyadmin/phpmyadmin/commit/304fb2b645b36a39e03b954fdbd567173ebe6448
CVE ID: CVE-2014-7221 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T12:40:19.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing [img]//http:// substrings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96889 - http://r4p3.net/forum/reverse-engineering/38/teamspeak-3-exploit-bb-code-freeze
rce.ibmcloud.com/vulnerabilities/96889 - http://r4p3.net/forum/reverse-engineering/38/teamspeak-3-exploit-bb-code-freeze-crash-not-responding/905 - http://r4p3.net/public/ts3bbcodefreeze.txt - https://packetstormsecurity.com/files/128571/TeamSpeak-Client-3.0.14-Buffer-Overflow.html
CVE ID: CVE-2014-7222 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T12:40:19.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \\ (backslash) characters, a digit, a \ (backslash) character, and "z" in a series of nested img BBCODE tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70219 - http://r4p3.net/public/ts3bbcodefreeze.txt - http://r4p3.net
ner: References: - http://www.securityfocus.com/bid/70219 - http://r4p3.net/public/ts3bbcodefreeze.txt - http://r4p3.net/forum/reverse-engineering/38/teamspeak-3-exploit-bb-code-freeze-crash-not-responding/905/ - http://packetstormsecurity.com/files/128571/TeamSpeak-Client-3.0.14-Buffer-Overflow.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96890
CVE ID: CVE-2014-7224 State: PUBLISHED Published: 2020-02-07T15:30:31 Last Updated: 2024-08-06T12:40:19.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/02/20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96833 - https://daoyuan14.github.io/news/newattackvector.html - https://www.securityfocus.com/bid/70222
CVE ID: CVE-2014-7226 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T12:40:19.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70216 - http://packetstormsecurity.com/files/128532/HTTP-File-Server-2.3a-2.3b-2.3c-Remote-Command-Execution.html - http://www.exploit-db.com/exploits/34852 - http://www.rejetto.com/forum/hfs-~-ht
3b-2.3c-Remote-Command-Execution.html - http://www.exploit-db.com/exploits/34852 - http://www.rejetto.com/forum/hfs-~-http-file-server/new-version-2-3d/
CVE ID: CVE-2014-7227 State: REJECTED Published: 2014-10-03T18:00:00 Last Updated: 2014-10-03T17:57:01 Description: No description available.
CVE ID: CVE-2014-7228 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T12:40:19.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0 through 2.4.4; and CMS Update 1.0.a1 through 1.0.1, when performing a backup or update for an archive, does not delete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQ
lete parameters from $_GET and $_POST when it is cleansing $_REQUEST, but later accesses $_GET and $_POST using the getQueryParam function, which allows remote attackers to bypass encryption and execute arbitrary code via a command message that extracts a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - http://websec.wordpress.com/2014/10/05/joomla-3-3-4-akeeba-kickstart-remote-code-execution-cve-2014-7228/ - http://developer.joomla.org/security/595-20140903-core-remote-file-inclusion.html - https://www.akeebabackup.com/home/news/1605-security-update-sep-2014.html
CVE ID: CVE-2014-7229 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:40:19.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! before 2.5.4 before 2.5.26, 3.x before 3.2.6, and 3.3.x before 3.3.5 allows attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/596
CVE ID: CVE-2014-7230 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:40:19.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96725 - http://www.securityfocus.com/bid/70185 - https://bugs.launchpad.net/oslo-incubator/+bug/1343604 - http://rhn.redhat.com/errata
/www.securityfocus.com/bid/70185 - https://bugs.launchpad.net/oslo-incubator/+bug/1343604 - http://rhn.redhat.com/errata/RHSA-2014-1939.html - http://www.ubuntu.com/usn/USN-2405-1
CVE ID: CVE-2014-7231 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:40:19.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96726 - http://rhn.redhat.com/errata/RHSA-2014-1939.html - https://bugs.launchpad.net/oslo.utils/+bug/1345233
rabilities/96726 - http://rhn.redhat.com/errata/RHSA-2014-1939.html - https://bugs.launchpad.net/oslo.utils/+bug/1345233 - http://www.securityfocus.com/bid/70184
CVE ID: CVE-2014-7232 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-06T12:40:19.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser user, and (3) #superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/5643835-1EN_r1.pdf?REQ=RAA&DIRECTION=5643835-1EN&FILENAME=5643835
: - http://apps.gehealthcare.com/servlet/ClientServlet/5643835-1EN_r1.pdf?REQ=RAA&DIRECTION=5643835-1EN&FILENAME=5643835-1EN_r1.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/IM-5343950-1EN.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=5343950-1EN&FILENAME=IM-5343950-1EN.pdf&FILEREV=7&DOCREV_ORG=7&SUBMIT=+ACCEPT+ - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2014-7233 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-06T12:40:19.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilities menu, (2) TH8740 for installation using TH8740_122_Setup.exe, (3) hrml for "Setup and Activation" using DSASetup, and (4) an empty string for Shutter Configuration, which has unspecified impact and attack vectors. NOTE: since these passwords appear to be used to access functionality during installation, this issue might not cross privilege boundaries and might not be a vulnerability. Additional Analyst Notes: - CVE P
ion, this issue might not cross privilege boundaries and might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/5458232-1EN+r4.pdf?REQ=RAA&DIRECTION=5458232-1EN&FILENAME=5458232-1EN%2Br4.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2014-7234 State: REJECTED Published: 2015-08-04T10:00:00 Last Updated: 2015-08-04T09:57:02 Description: No description available.
CVE ID: CVE-2014-7235 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:40:19.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as exploited in the wild in September 2014. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128516/FreePBX-Authentication-Bypass-Account-Creation.html - http://secunia.com/advisories/61601 - https://github.com
es/128516/FreePBX-Authentication-Bypass-Account-Creation.html - http://secunia.com/advisories/61601 - https://github.com/FreePBX/fw_ari/commit/f294b4580ce725ca3c5e692d86e63d40cef4d836 - http://community.freepbx.org/t/critical-freepbx-rce-vulnerability-all-versions-cve-2014-7235/24536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96790 - https://www.exploit-db.com/exploits/41005/ - http://www.securityfocus.com/bid/70188
CVE ID: CVE-2014-7236 State: PUBLISHED Published: 2020-02-17T21:14:54 Last Updated: 2024-08-06T12:40:19.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70372 - http://packetstormsecurity.com/files/128623/Twiki-Perl-Code-Execution.html - http://seclists.org/fulldisclosure/2014/Oct/44 - http://www.securitytracker.com/id/1030981
CVE ID: CVE-2014-7237 State: PUBLISHED Published: 2014-10-16T00:00:00 Last Updated: 2024-08-06T12:40:19.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2014-7237 - http://www.securitytracker.com/id/1030982 - http://seclists.org/fulldisclosure/2014/Oct/45 - https://exchange.x
4-7237 - http://www.securitytracker.com/id/1030982 - http://seclists.org/fulldisclosure/2014/Oct/45 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96952
CVE ID: CVE-2014-7238 State: PUBLISHED Published: 2020-01-23T14:29:38 Last Updated: 2024-08-06T12:40:19.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8235
CVE ID: CVE-2014-7240 State: PUBLISHED Published: 2017-10-06T14:00:00 Last Updated: 2024-08-06T12:40:19.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://g0blin.co.uk/cve-2014-7240/ - https://wpvulndb.com/vulnerabilities/8234
CVE ID: CVE-2014-7241 State: PUBLISHED Published: 2014-12-19T11:00:00 Last Updated: 2024-08-06T12:40:19.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary Java methods via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN97384696/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000124 - https://play.google.com/store/apps/details?id=jp.co.tsutaya.android.ranking
CVE ID: CVE-2014-7242 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-06T12:40:19.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to spoof servers and obtain sensitive information by leveraging failure to verify SSL/TLS server certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27388160/index.html - http://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000125.html
CVE ID: CVE-2014-7243 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: LG Electronics Mobile WiFi router L-09C, L-03E, and L-04D does not restrict access to the web administration interface, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000140.html - http://jvn.jp/en/jp/JVN71762315/995312/index.html - http://jvn.jp/en/jp/JVN71762315/index.html
CVE ID: CVE-2014-7244 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7245 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7246 State: PUBLISHED Published: 2014-11-14T00:00:00 Last Updated: 2024-08-06T12:40:19.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request. Additional Analyst Notes: - CVE Program Container: References: - https://forgerock.org/2014/11/openam-security-advisory-201404/ - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000129 - http://jvn.jp/en/jp/JVN65559247/index.html - http://sources.forgerock.org/changelog/opena
n.jp/jvndb/JVNDB-2014-000129 - http://jvn.jp/en/jp/JVN65559247/index.html - http://sources.forgerock.org/changelog/openam/?cs=11248
CVE ID: CVE-2014-7247 State: PUBLISHED Published: 2014-11-26T02:00:00 Last Updated: 2024-08-06T12:40:19.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN16318793/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131 - http://www.justsystems.com/jp/info/js14003.html
CVE ID: CVE-2014-7248 State: PUBLISHED Published: 2014-11-15T02:00:00 Last Updated: 2024-08-06T12:40:19.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering a crafted entry in a log file. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000133 - http://jvn.jp/en/jp/JVN89852154/index.html - http://www.ipa.go.jp/security/vuln/iLogScanner/
CVE ID: CVE-2014-7249 State: PUBLISHED Published: 2014-12-19T11:00:00 Last Updated: 2024-08-06T12:40:19.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM AR550S, CentreCOM AR570S, CentreCOM 8700SL, CentreCOM 8948XL, CentreCOM 9924SP, CentreCOM 9924T/4SP, Rapier 48i, and SwitchBlade4000 with firmware before 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request. Additional Analyst Notes: - CVE Program Container: References
to execute arbitrary code via a crafted HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN22440986/index.html - http://www.allied-telesis.co.jp/support/list/faq/vuls/20141111aen.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000132
CVE ID: CVE-2014-7250 State: PUBLISHED Published: 2014-12-12T02:00:00 Last Updated: 2024-08-06T12:40:19.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN07930208/index.html - https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195243 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000134
CVE ID: CVE-2014-7251 State: PUBLISHED Published: 2014-12-06T15:00:00 Last Updated: 2024-08-06T12:40:19.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0004E.pdf - http://jvn.jp/en/jp/JVN54775800/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99018 - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-
00/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99018 - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000141.html
CVE ID: CVE-2014-7252 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local users to execute arbitrary code or read kernel memory via unknown vectors related to userland data and "improper data validation." Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-
alidation." Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000137.html - http://jvn.jp/en/jp/JVN67792023/index.html - http://jvn.jp/en/jp/JVN67792023/397327/index.html - http://jvn.jp/en/jp/JVN67792023/995312/index.html
CVE ID: CVE-2014-7253 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows local users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000138.html - http://jvn.jp/en/jp/JVN06302787/index.html - http://jvn.jp/en/jp/JVN06302787/995312/index.html