Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4643 State: PUBLISHED Published: 2014-06-25T20:00:00Z Last Updated: 2024-09-16T23:35:59.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or (6) CDUP command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58818 - http://osvdb.org/show/osvdb/108051 - http://packetstormsecurity.com/files/127075/Core-FTP-LE-2.2-Heap-Overflow.html - http://www.expl
org/show/osvdb/108051 - http://packetstormsecurity.com/files/127075/Core-FTP-LE-2.2-Heap-Overflow.html - http://www.exploit-db.com/exploits/33713
CVE ID: CVE-2014-4644 State: PUBLISHED Published: 2014-06-25T20:00:00 Last Updated: 2024-08-06T11:20:26.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/108452 - http://www.securityfocus.com/bid/68141 - http://www.exploit-db.com/exploits/33809
CVE ID: CVE-2014-4645 State: PUBLISHED Published: 2014-06-25T20:00:00 Last Updated: 2024-08-06T11:20:26.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33822 - http://www.securityfocus.com/bid/68144
CVE ID: CVE-2014-4646 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T11:20:26.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-214 - http://secunia.com/advisories/59494 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-20
CVE ID: CVE-2014-4647 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:20:26.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94480 - http://zerodayinitiative.com/advisories/ZDI-14-224/
CVE ID: CVE-2014-4648 State: PUBLISHED Published: 2014-06-28T15:00:00 Last Updated: 2024-08-06T11:20:26.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure." Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/releases/2.6.3 - http://piwigo.org/forum/viewtopic.php?id=24009
CVE ID: CVE-2014-4649 State: PUBLISHED Published: 2014-06-28T15:00:00 Last Updated: 2024-08-06T11:20:26.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/bugs/view.php?id=3089 - http://piwigo.org/bugs/changelog_page.php
CVE ID: CVE-2014-4650 State: PUBLISHED Published: 2020-02-20T16:01:22 Last Updated: 2024-08-06T11:20:26.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/06/26/3 - http://bugs.python.org/issue21766 - https://access.redhat.com/security/cve/cve-2014-465
ists/oss-security/2014/06/26/3 - http://bugs.python.org/issue21766 - https://access.redhat.com/security/cve/cve-2014-4650
CVE ID: CVE-2014-4651 State: PUBLISHED Published: 2020-02-18T13:06:18 Last Updated: 2024-08-06T11:20:27.020Z Vendors: Apache Products: Apache jclouds Problem Types: Insecure Temporary File Description: It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/579 - https://issues.apache.org/jira/browse/JCLOUDS-612
CVE ID: CVE-2014-4652 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:20:26.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - https://bugzilla.redhat.com/show_bug.cgi?id=1113406 - https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92 - h
dhat.com/show_bug.cgi?id=1113406 - https://github.com/torvalds/linux/commit/07f4d9d74a04aa7c72c5dae0ef97565f28f17b92 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://secunia.com/advisories/59777 - http://secunia.com/advisories/59434 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - http://rhn.redhat.com/errata/RHSA-2015-1272.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94412 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92 - http://www.openwall.com/lists/oss-securi
orvalds/linux-2.6.git%3Ba=commit%3Bh=07f4d9d74a04aa7c72c5dae0ef97565f28f17b92 - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4653 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:20:26.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - http://www.securityfocus.com/bid/68164 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - https:/
/www.securityfocus.com/bid/68164 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1113409 - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://secunia.com/advisories/59777 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd9f26e4eca5d08a27d12c0933fceef76ed9663d - http://secunia.com/advisories/59434 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - https://github.com/torvalds/linux/commit/fd9f26e4eca5d08a27d12c0933fceef76ed9663d - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://lists.opensuse.org/opensuse-secur
c0933fceef76ed9663d - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4654 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:20:26.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com
tainer: References: - http://secunia.com/advisories/60545 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://www.securityfocus.com/bid/68162 - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://secunia.com/advisories/59777 - http://secunia.com/advisories/59434 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - https://bugzilla.redhat.com/show_bug.cgi?id=1113445 - https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563 - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0f
ecurity/2014/06/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4655 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:20:26.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.co
ntainer: References: - http://secunia.com/advisories/60545 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://www.securityfocus.com/bid/68162 - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://www.securitytracker.com/id/1036763 - http://secunia.com/advisories/59777 - http://secunia.com/advisories/59434 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - https://bugzilla.redhat.com/show_bug.cgi?id=1113445 - https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563 - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/l
ef08563 - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82262a46627bebb0febcc26664746c25cef08563 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4656 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:20:26.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - https://source.android.com/security/bulletin/2017-04-01 - https://github.com/torvalds/linux/commi
com/advisories/60545 - https://source.android.com/security/bulletin/2017-04-01 - https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd - http://www.ubuntu.com/usn/USN-2335-1 - http://rhn.redhat.com/errata/RHSA-2015-0087.html - http://www.ubuntu.com/usn/USN-2334-1 - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - https://bugzilla.redhat.com/show_bug.cgi?id=1113470 - http://secunia.com/advisories/59777 - http://secunia.com/advisories/59434 - https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ac902c112d90a89e59916f7
19fc141beb3e8e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ac902c112d90a89e59916f751c2745f4dbdbb4bd - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=883a1d49f0d77d30012f114b2e19fc141beb3e8e - http://www.openwall.com/lists/oss-security/2014/06/26/6 - http://www.securitytracker.com/id/1038201 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4657 State: PUBLISHED Published: 2020-02-20T14:28:16 Last Updated: 2024-08-06T11:20:26.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md - https://www.securityfocus.com/bid/68232
CVE ID: CVE-2014-4658 State: PUBLISHED Published: 2020-02-20T14:30:49 Last Updated: 2024-08-06T11:20:26.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md - https://www.securityfocus.com/bid/68233
CVE ID: CVE-2014-4659 State: PUBLISHED Published: 2020-02-20T14:33:25 Last Updated: 2024-08-06T11:20:26.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md - https://www.securityfocus.com/bid/68234
CVE ID: CVE-2014-4660 State: PUBLISHED Published: 2020-02-20T02:08:50 Last Updated: 2024-08-06T11:20:26.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md - https://www.securityfocus.com/bid/68231 - https://www.openwall.com/lists/oss-secur
ible/blob/release1.5.5/CHANGELOG.md - https://www.securityfocus.com/bid/68231 - https://www.openwall.com/lists/oss-security/2014/06/26/19 - https://security-tracker.debian.org/tracker/CVE-2014-4660 - https://github.com/ansible/ansible/commit/c4b5e46054c74176b2446c82d4df1a2610eddc08
CVE ID: CVE-2014-4661 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T11:20:26.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04441391 - http://www.kb.cert.org/vuls/id/683972 - http://www.securityfocus.com/bid/70286 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04441391
CVE ID: CVE-2014-4663 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T11:20:26.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/689 - http://seclists.org/fulldisclosure/2014/Jul/4 - http://seclists.org/fulldisclosure/2014/Jun/117 - https://code.google.com/p/timthumb/issues/detail?id=485 - http://secunia.com/advisories/59558 - http://packetstormsecurity.com/files/127192/TimThumb-2
humb/issues/detail?id=485 - http://secunia.com/advisories/59558 - http://packetstormsecurity.com/files/127192/TimThumb-2.8.13-Remote-Code-Execution.html - https://code.google.com/p/timthumb/source/detail?r=219 - http://www.exploit-db.com/exploits/33851
CVE ID: CVE-2014-4664 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T11:27:35.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70911 - http://www.securityfocus.com/archive/1/533907/100/0/threaded - http://www.wordfence.com/blog/2014/06/security-fix-wordfence-5-1-4/ - http://hacktivity.websecgeeks.com/word-press-firewal
tp://www.wordfence.com/blog/2014/06/security-fix-wordfence-5-1-4/ - http://hacktivity.websecgeeks.com/word-press-firewall-plugin-xss/ - http://www.securityfocus.com/bid/70915 - https://wordpress.org/plugins/wordfence/changelog/
CVE ID: CVE-2014-4667 State: PUBLISHED Published: 2014-07-03T01:00:00 Last Updated: 2024-08-06T11:27:35.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d3217b15a19a4779c39b212358a5c71d725822ee - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.openwall.com/lists/oss-security/2014/06/27/11 - ht
use.org/opensuse-security-announce/2014-10/msg00006.html - http://www.openwall.com/lists/oss-security/2014/06/27/11 - http://secunia.com/advisories/59790 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - http://www.securityfocus.com/bid/68224 - http://secunia.com/advisories/59777 - http://secunia.com/advisories/60596 - http://linux.oracle.com/errata/ELSA-2014-3068.html - http://linux.oracle.com/errata/ELSA-2014-3069.html - https://bugzilla.redhat.com/show_bug.cgi?id=1113967 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - http://www.
bugzilla.redhat.com/show_bug.cgi?id=1113967 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 - http://www.debian.org/security/2014/dsa-2992 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d3217b15a19a4779c39b212358a5c71d725822ee - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-4668 State: PUBLISHED Published: 2014-07-02T01:00:00 Last Updated: 2024-08-06T11:27:35.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68249 - http://openwall.com/lists/oss-security/2014/06/28/7 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156190.html - http://www.mandriva.com/security/advi
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156190.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:225 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156162.html - https://github.com/cherokee/webserver/commit/fbda667221c51f0aa476a02366e0cf66cb012f88 - http://openwall.com/lists/oss-security/2014/06/28/3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155776.html - http://advisories.mageia.org/MGASA-2015-0181.html
CVE ID: CVE-2014-4669 State: PUBLISHED Published: 2014-06-28T15:00:00 Last Updated: 2024-08-06T11:27:35.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68200 - http://seclists.org/fulldisclosure/2014/Jun/127 - http://packetstormsecurity.com/files/127239/HP-Enterprise-Maps-1.00-Authenticated-XXE-Injection.html
CVE ID: CVE-2014-4670 State: PUBLISHED Published: 2014-07-10T10:00:00 Last Updated: 2024-08-06T11:27:36.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - https://bugs.php.net/bug.php?id=67538 - http://secunia.com/advisories/54553 - http:/
pport/docview.wss?uid=swg21683486 - https://bugs.php.net/bug.php?id=67538 - http://secunia.com/advisories/54553 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://rhn.redhat.com/errata/RHSA-2014-1326.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html - http://www.debian.org/security/2014/dsa-3008 - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://secunia.com/advisories/60696 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-u
.html - http://secunia.com/advisories/60696 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html