Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9692 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.383Z Vendors: n/a Products: Tecal RH1288 V2,Tecal RH2265 V2,Tecal RH2285 V2,Tecal RH2265 V2,Tecal RH2285H V2,Tecal RH2268 V2,Tecal RH2288 V2,Tecal RH2288H V2,Tecal RH2485 V2,Tecal RH5885 V2,Tecal RH5885 V3,Tecal RH5885H V3,Tecal XH310 V2,Tecal XH311 V2,Tecal XH320 V2,Tecal XH621 V2,Tecal DH310 V2,Tecal DH320 V2,Tecal DH620 V2,Tecal DH621 V2,Tecal DH628 V2,Tecal BH620 V2,Tecal BH621 V2,Tecal BH622 V2,Tecal BH640 V2,Tecal CH121,Tecal CH140,Tecal CH220,Tecal CH221,Tecal CH222,Tecal CH240,Tecal CH242,Tecal CH242 V3, Tecal RH1288 V2 V100R002C00SPC107 and earlier versions,Tecal RH2265 V2 V100R00
, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to figure out the RMCP+ session IDs of users and access the system with forged identities. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisor
tities. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE ID: CVE-2014-9693 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.126Z Vendors: n/a Products: Tecal RH1288 V2,Tecal RH2265 V2,Tecal RH2285 V2,Tecal RH2265 V2,Tecal RH2285H V2,Tecal RH2268 V2,Tecal RH2288 V2,Tecal RH2288H V2,Tecal RH2485 V2,Tecal RH5885 V2,Tecal RH5885 V3,Tecal RH5885H V3,Tecal XH310 V2,Tecal XH311 V2,Tecal XH320 V2,Tecal XH621 V2,Tecal DH310 V2,Tecal DH320 V2,Tecal DH620 V2,Tecal DH621 V2,Tecal DH628 V2,Tecal BH620 V2,Tecal BH621 V2,Tecal BH622 V2,Tecal BH640 V2,Tecal CH121,Tecal CH140,Tecal CH220,Tecal CH221,Tecal CH222,Tecal CH240,Tecal CH242,Tecal CH242 V3, Tecal RH1288 V2 V100R002C00SPC107 and earlier versions,Tecal RH2265 V2 V100R00
, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to execute arbitrary code or restart the system via crafted DNS packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE ID: CVE-2014-9694 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.551Z Vendors: n/a Products: Tecal RH1288 V2,Tecal RH2265 V2,Tecal RH2285 V2,Tecal RH2265 V2,Tecal RH2285H V2,Tecal RH2268 V2,Tecal RH2288 V2,Tecal RH2288H V2,Tecal RH2485 V2,Tecal RH5885 V2,Tecal RH5885 V3,Tecal RH5885H V3,Tecal XH310 V2,Tecal XH311 V2,Tecal XH320 V2,Tecal XH621 V2,Tecal DH310 V2,Tecal DH320 V2,Tecal DH620 V2,Tecal DH621 V2,Tecal DH628 V2,Tecal BH620 V2,Tecal BH621 V2,Tecal BH622 V2,Tecal BH640 V2,Tecal CH121,Tecal CH140,Tecal CH220,Tecal CH221,Tecal CH222,Tecal CH240,Tecal CH242,Tecal CH242 V3, Tecal RH1288 V2 V100R002C00SPC107 and earlier versions,Tecal RH2265 V2 V100R00
ons,Tecal BH621 V2 V100R002C00SPC106 and earlier versions,Tecal BH622 V2 V100R002C00SPC110 ?and earlier versions,Tecal BH640 V2 V100R002C00SPC108 and earlier versions,Tecal CH121 V100R001C00SPC180 and earlier versions,Tecal CH140 V100R001C00SPC110 and earlier versions,Tecal CH220 V100R001C00SPC180 and earlier versions,Tecal CH221 V100R001C00SPC180 and earlier versions,Tecal CH222 V100R002C00SPC180 and earlier versions,Te ...[truncated*] Problem Types: CSRF Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier ve
2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and ear
10 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R0
BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions have a CSRF vulnerability. The products do not use the Token mechanism for web access control. When users log in to the Huawei servers and access websites containing the malicious CSRF script, the CSRF script is executed, which may
to the Huawei servers and access websites containing the malicious CSRF script, the CSRF script is executed, which may cause configuration tampering and system restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408100
CVE ID: CVE-2014-9695 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.485Z Vendors: n/a Products: Tecal E9000 Chassis V100R001C00SPC160 and earlier versions Problem Types: Privilege Escalation Description: The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408118
CVE ID: CVE-2014-9696 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.215Z Vendors: n/a Products: Tecal E9000 Chassis V100R001C00SPC160 and earlier versions Problem Types: Privilege Escalation Description: The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408117
CVE ID: CVE-2014-9697 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:55:04.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted website. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408141.htm
CVE ID: CVE-2014-9699 State: PUBLISHED Published: 2019-06-24T20:42:29 Last Updated: 2024-08-06T13:55:04.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled. Apache logs, system logs, design files (i.e., a history of print files), and more are exposed to unauthenticated attackers through this HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://support.makerbot.com/learn/makerbot-desktop-software/release-notes/makerbot-desktop-release-notes_13520 - https://secur3.us/index.php/vulnerabilities/
CVE ID: CVE-2014-9701 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T13:55:04.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalink_page.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.mantisbt.org/bugs/view.php?id=19493 - http://www.openwall.com/lists/oss-security/2015/03/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1202885 - https://www.mantisbt.org/bugs/view.php?id=17362#c40613 - https://github.com/mantisbt/mantisbt/commit
ug.cgi?id=1202885 - https://www.mantisbt.org/bugs/view.php?id=17362#c40613 - https://github.com/mantisbt/mantisbt/commit/d95f070db852614fa18ccca6a4f12f4bffede1fd - https://github.com/mantisbt/mantisbt/commit/e7e2b5503580e42db9d91e0d599d61d3ff03c27e
CVE ID: CVE-2014-9702 State: PUBLISHED Published: 2020-06-01T16:56:02 Last Updated: 2024-08-06T13:55:04.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information (username and password) via any request, such as a password reset request. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2016/09/jahx161_-_cmfive_database_credential_disclosure.html
CVE ID: CVE-2014-9705 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T13:55:04.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3195 - http://www.ubuntu.com/usn/USN-2535-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bugs.php.net/bug.php?id=68552 - http://lists.open
N-2535-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bugs.php.net/bug.php?id=68552 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html - https://www.htbridge.com/advisory/HTB23252 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - http://svn.php.
//php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600&r2=335803 - https://support.apple.com/HT205267 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://openwall.com/lists/oss-security/2015/03/15/6 - http://www.securityfocus.com/bid/73031 - http://www.securitytracker.com/id/1031948 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2014-9706 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T13:55:04.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3206 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154551.html - https://git.samba.org/?p=jelmer/dulwich.git%3Ba=commitdiff%3Bh=091638be3c89f46f42c3b1d57dc1504af
015-April/154551.html - https://git.samba.org/?p=jelmer/dulwich.git%3Ba=commitdiff%3Bh=091638be3c89f46f42c3b1d57dc1504af5729176 - http://www.openwall.com/lists/oss-security/2015/03/22/26 - http://www.openwall.com/lists/oss-security/2015/03/21/1 - https://lists.launchpad.net/dulwich-users/msg00827.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154523.html
CVE ID: CVE-2014-9707 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T13:55:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/embedthis/goahead/issues/106 - http://seclists.org/fulldisclosure/2015/Mar/157 - https://github.com/embedthis/goahead/commit/eed4a7d177bf94a54c7b06ccce88507
//seclists.org/fulldisclosure/2015/Mar/157 - https://github.com/embedthis/goahead/commit/eed4a7d177bf94a54c7b06ccce88507fbd76fb77 - http://packetstormsecurity.com/files/131156/GoAhead-3.4.1-Heap-Overflow-Traversal.html - http://www.securitytracker.com/id/1032208 - http://www.securityfocus.com/archive/1/535027/100/0/threaded
CVE ID: CVE-2014-9708 State: PUBLISHED Published: 2015-03-31T00:00:00 Last Updated: 2024-08-06T13:55:04.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037007 - https://github.com/embedthis/appweb/issues/413 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://github.com/embedthis/appweb/commit/7e6a925f5e86a19a7934a94bbd6959101d0b84eb#diff-7ca
y/cpujul2016-2881720.html - https://github.com/embedthis/appweb/commit/7e6a925f5e86a19a7934a94bbd6959101d0b84eb#diff-7ca4d62c70220e0e226e7beac90c95d9L17348 - http://packetstormsecurity.com/files/131157/Appweb-Web-Server-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2015/Apr/19 - http://www.securityfocus.com/archive/1/535028/100/0/threaded - http://www.securityfocus.com/bid/73407 - http://seclists.org/fulldisclosure/2015/Mar/158 - http://seclists.org/fulldisclosure/2015/Apr/19 - http://seclists.org/fulldisclosure/2015/Mar/158 - http://www.openwall.com/lists/oss-security/2015/03/28/2 - http://www.securityfocus.com/archive/1/archive/1/535028/100/1400/threaded - http://www.openwall
-security/2015/03/28/2 - http://www.securityfocus.com/archive/1/archive/1/535028/100/1400/threaded - http://www.openwall.com/lists/oss-security/2015/04/06/2 - https://security.paloaltonetworks.com/CVE-2014-9708 - https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved?language=en_US
CVE ID: CVE-2014-9709 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T13:55:04.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:153 - https://bugzilla.redhat.com/show_bug.cgi?id=1188639 - http://www.securitytracker.com/id/1033703 - http:
MDVSA-2015:153 - https://bugzilla.redhat.com/show_bug.cgi?id=1188639 - http://www.securitytracker.com/id/1033703 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3215 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://security.gentoo
suse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://security.gentoo.org/glsa/201607-04 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.ubuntu.com/usn/USN-2987-1 - http://www.securityfocus.com/bid/73306 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://bugs.php.net/bug.php?id=68601 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://advisories.mageia.org/MGASA-2015-0040.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2014-9710 State: PUBLISHED Published: 2015-05-27T10:00:00 Last Updated: 2024-08-06T13:55:04.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time window, related to a race condition, or (2) after an xattr-replacement attempt that fails because the data does not fit. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/
it. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5f5bc6b1e2d5a6f827bc860ef2dc5b6f365d1339 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - https://bugzilla.redhat.com/show_bug.cgi?id=1205079 - http://www.securitytracker.com/id/1032418 - http://www.openwall.com/lists/oss-security/2015/03/24/11 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - https://github.com/torvalds/linux/commit/5f5bc6b1e2d5a6f827bc860ef2dc5b6f365d1339
CVE ID: CVE-2014-9711 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T13:55:04.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 allow remote attackers to inject arbitrary web script or HTML via the (1) ReportName (Job Name) parameter to the Explorer report scheduler (cgi-bin/WsCgiExplorerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.ex
orerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.exe) summary report page. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20140911/cross_site_scripting_vulnerability_in_websense_explorer_report_scheduler.html - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - https://www.securify.nl/advisory/SFY20140914/multiple_cross_site_scripting_vulnerabilities_in_websense_reporting.html - http://www.websense.com/support/article/kbarticle/v7-8-3-About-Hotfix-02-for-Web-Security-Solutions - http://seclists.org/fulldisclosure/2015/M
/support/article/kbarticle/v7-8-3-About-Hotfix-02-for-Web-Security-Solutions - http://seclists.org/fulldisclosure/2015/Mar/109 - http://packetstormsecurity.com/files/130905/Websense-Reporting-Cross-Site-Scripting.html - http://packetstormsecurity.com/files/130903/Websense-Explorer-Report-Scheduler-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Mar/110 - http://www.websense.com/support/article/kbarticle/v7-8-4-About-Hotfix-01-for-Web-Security-Solutions - http://www.securityfocus.com/archive/1/534917/100/0/threaded - http://www.securityfocus.com/archive/1/534915/100/0/threaded
CVE ID: CVE-2014-9712 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T13:55:04.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/v7-8-4-About-Hotfix-01-for-V-Series-Appliance - http://www.securityfocus.com/bid/73417 - http://www.websense.com/support/article/kbarticle/v7-8-3-About-Hotfix-03-for-V-Series-Appliance
CVE ID: CVE-2014-9713 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T13:55:04.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406 - http://www.ubuntu.com/usn/USN-2742-1 - http://www.debian.org/security/2015/dsa-3209 - http://www.securityfocus.com/bid/73217 - http://www.openwall.com/lists/oss-security/2015/03/29/2
CVE ID: CVE-2014-9714 State: PUBLISHED Published: 2015-04-13T14:00:00 Last Updated: 2024-08-06T13:55:04.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddx_serialize_value function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74061 - https://phabricator.wikimedia.org/T85851 - https://github.com/facebook/hhvm/commit/324701c9fd31beb4f070f1b7ef78b115fbdfec34 - https://github.com/facebook/hhvm/issues
tps://github.com/facebook/hhvm/commit/324701c9fd31beb4f070f1b7ef78b115fbdfec34 - https://github.com/facebook/hhvm/issues/4283 - http://www.openwall.com/lists/oss-security/2015/04/07/3 - http://www.openwall.com/lists/oss-security/2015/04/01/1 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html