Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
les associated with different web applications on a single Tomcat instance via a crafted web application. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1590036 - http://advisories.mageia.org/MGASA-2014-0268.html - http://svn.apache.org/viewvc?view=revision&revision=1589837 - http://www.ubuntu.com/usn/USN-2654-1 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://secunia.com/advisories/59732 - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://www.mandriva.com/security/advisories?name=M
12.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://svn.apache.org/viewvc?view=revision&revision=1590028 - http://svn.apache.org/viewvc?view=revision&revision=1589992 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-3530 - http://svn.apache.org/viewvc?view=revision&revision=1589983 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2
http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://svn.apache.org/viewvc?view=revision&revision=1588199 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://svn.apache.org/viewvc?view=revision&revision=1589997 - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://svn.apache.org/viewvc?view=revision&revision=1589980 - http://svn.apache.org/viewvc?view=revision&revision=1589640 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://
org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://secunia.com/advisories/59873 - http://seclists.org/fulldisclosure/2014/May/141 - http://svn.apache.org/viewvc?view=revision&revision=1589985 - http://svn.apache.org/viewvc?view=revision&revision=1593815 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://svn.apache.org/viewvc?view=revision&revision=1589990 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://s
/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://svn.apache.org/viewvc?view=revision&revision=1588193 - http://www.securityfocus.com/bid/67669 - http://www.securitytracker.com/id/1030298 - http://www.debian.org/security/2016/dsa-3552 - http://svn.apache.org/viewvc?view=revision&revision=1593821 - http://secunia.com/advisories/60729 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220
67c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apach
E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0120 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T09:05:38.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f." Additional Analyst Notes: - CVE Program Container: References: - https://infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf - https://github.com
SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf - https://github.com/hawtio/hawtio/commit/b4e23e002639c274a2f687ada980118512f06113 - https://bugzilla.redhat.com/show_bug.cgi?id=1072681
CVE ID: CVE-2014-0121 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T09:05:38.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter. Additional Analyst Notes: - CVE Program Container: References: - https://infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf - https://github.com/hawtio/hawtio/commit/5289715e4f2657562fdddcbad830a30969b96e1e - https://bugzilla.redhat.com/show_bug.c
ttps://github.com/hawtio/hawtio/commit/5289715e4f2657562fdddcbad830a30969b96e1e - https://bugzilla.redhat.com/show_bug.cgi?id=1072716
CVE ID: CVE-2014-0122 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by remaining in a chat session after an intra-session capability removal by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=256418 - http://openwall.com/
t Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=256418 - http://openwall.com/lists/oss-security/2014/03/17/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082
CVE ID: CVE-2014-0123 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, which allows remote authenticated users to perform wiki operations by leveraging the student role and using the Recent Activity block to reach the individual wiki of an arbitrary student. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256419 - http://g
es: - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256419 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39990
CVE ID: CVE-2014-0124 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:39.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properly restrict the display of e-mail addresses, which allows remote authenticated users to obtain sensitive information by using the (1) Forum or (2) Quiz module. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43916 - http://openwall.com/lists/oss-s
erences: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43916 - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256421
CVE ID: CVE-2014-0125 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=256422 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29409 - http://openwall.com/lists/oss-security/2014/03/17/1
CVE ID: CVE-2014-0126 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/03/17/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146 - https://moodle.org/mod/forum/discuss.php?
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146 - https://moodle.org/mod/forum/discuss.php?d=256423
CVE ID: CVE-2014-0127 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to bypass intended restrictions on starting a Feedback activity by choosing an unavailable time. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256417 - http://git.moodle.org/gw?p=moodle
/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256417 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43656
CVE ID: CVE-2014-0128 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T09:05:38.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-04/msg00030.html - http://lists.opensuse.org/opensuse-updates/2014-04/msg00060.html - http://secunia.com/advisories/57889 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.orac
unia.com/advisories/57889 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://secunia.com/advisories/57288 - http://www.securityfocus.com/bid/66112 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.squid-cache.org/Advisories/SQUID-2014_1.txt
CVE ID: CVE-2014-0129 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T09:05:38.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility of an arbitrary badge via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/03/17/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44140 - https://moodle.org/mod/forum/discuss.php?d=256424
CVE ID: CVE-2014-0130 State: PUBLISHED Published: 2014-05-07T10:00:00.000Z Last Updated: 2025-10-22T00:05:37.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2014-1863.html - http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf
: - http://rhn.redhat.com/errata/RHSA-2014-1863.html - http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/NkKc7vTW70o/NxW_PDBSG3AJ - http://www.securityfocus.com/bid/67244
CVE ID: CVE-2014-0131 State: PUBLISHED Published: 2014-03-24T10:00:00 Last Updated: 2024-08-06T09:05:38.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1074589 - http://www.spinics.net/lists/netdev/msg274250.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - https://github.com/torvalds/linux/commit/1
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - https://github.com/torvalds/linux/commit/1fd819ecb90cc9b822cd84d3056ddba315d3340f - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.spinics.net/lists/netdev/msg274316.html - http://www.openwall.com/lists/oss-security/2014/03/10/4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1fd819ecb90cc9b822cd84d3056ddba315d3340f
CVE ID: CVE-2014-0132 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T09:05:38.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind. Additional Analyst Notes: - CVE Program Container: References: - https://fedorahosted.org/389/changeset/76acff12a86110d4165f94e2cba13ef5c7ebc38a/ - http://secunia.com/advisories/57427 - http://rhn.redhat.com/errata/RHSA-2014-0292.html - http://secunia.com/advisories/57412 - https://fedorahosted.org/389/ticket/47739
CVE ID: CVE-2014-0133 State: PUBLISHED Published: 2014-03-28T15:00:00 Last Updated: 2024-08-06T09:05:38.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://mailman.nginx.org/pipermail/nginx-announce/2014/000135.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00095.html - http://www.securityfocus.com/bid/66537
CVE ID: CVE-2014-0134 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:38.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/nova/+bug/1221190 - http://www.openwall.com/lists/oss-security/2014/03/27/6 - http://www.ubuntu.com/usn/USN-2247-1
CVE ID: CVE-2014-0135 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:38.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://theforeman.org/security.html
CVE ID: CVE-2014-0136 State: PUBLISHED Published: 2014-10-27T01:00:00 Last Updated: 2024-08-06T09:05:39.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1037.html - http://www.securityfocus.com/bid/69233
CVE ID: CVE-2014-0137 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T09:05:38.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to MiqReportResult.exists. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0469.html
CVE ID: CVE-2014-0138 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T09:05:38.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015. Additional Analyst Notes: - CVE Program Container: References: - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
entry/portal/docdisplay?lndocid=MIGR-5095862 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://curl.haxx.se/docs/adv_20140326A.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://secunia.com/advisories/57836 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.debian.org/security/2014/dsa-2902 - http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ - http://secunia.com/advisories/59458 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html - http://secunia.com/advisories/58615 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://secunia.com/advisories/57968 - http://www-01.ibm.c
ories/58615 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://secunia.com/advisories/57968 - http://www-01.ibm.com/support/docview.wss?uid=swg21675820 - http://www.ubuntu.com/usn/USN-2167-1 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ - http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ - http://secunia.com/advisories/57966
CVE ID: CVE-2014-0139 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T09:05:38.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862 - http://www.oracle.com/technetwork/topic
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:213 - http://secunia.com/advisories/57836 - http://curl.haxx.se/docs/adv_20140326B.html - http://www.debian.org/security/2014/dsa-2902 - http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ - http://secunia.com/advisories/59458 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html - http://advisories.mageia.org/MGASA-2015-0165.html - http://secunia.com/advisories/58615 - http://secunia.com/advisories/57968 - http://www-01.ibm.com/support/docview.wss?u
http://secunia.com/advisories/58615 - http://secunia.com/advisories/57968 - http://www-01.ibm.com/support/docview.wss?uid=swg21675820 - http://www.ubuntu.com/usn/USN-2167-1 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ - http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ - http://secunia.com/advisories/57966
CVE ID: CVE-2014-0140 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T09:05:38.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1317.html - https://bugzilla.redhat.com/show_bug.cgi?id=1077359
CVE ID: CVE-2014-0141 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T09:05:38.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1187466
CVE ID: CVE-2014-0142 State: PUBLISHED Published: 2017-08-10T15:00:00 Last Updated: 2024-08-06T09:05:38.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d - http://rhn.redhat.com/errata/RHSA-2014-0421.html - htt
git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d - http://rhn.redhat.com/errata/RHSA-2014-0421.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9302e863aa8baa5d932fc078967050c055fa1a7f - https://bugzilla.redhat.com/show_bug.cgi?id=1078201 - http://www.debian.org/security/2014/dsa-3044