Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://secunia.com/advisories/60976 - http://secunia.com/advisories/62027 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00010.html - http://rhn.redhat.com/errata/RHSA-2014-1762.html
CVE ID: CVE-2014-3655 State: PUBLISHED Published: 2019-11-13T15:45:32 Last Updated: 2024-08-06T10:50:18.303Z Vendors: JBoss Products: KeyCloak Problem Types: Soft Token deletion via CSRF Description: JBoss KeyCloak is vulnerable to soft token deletion via CSRF Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3655 - https://access.redhat.com/security/cve/cve-2014-3655 - https://snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-30138
CVE ID: CVE-2014-3656 State: PUBLISHED Published: 2019-12-10T13:04:43 Last Updated: 2024-08-06T10:50:18.259Z Vendors: JBoss KeyCloak Products: JBoss KeyCloak Problem Types: XSS in login status iframe Description: JBoss KeyCloak: XSS in login-status-iframe.html Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3656 - https://access.redhat.com/security/cve/cve-2014-3656
CVE ID: CVE-2014-3657 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T10:50:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62303 - http://www.ubuntu.com/usn/USN-2404-1 - http://rhn.redhat.com/errata/RHSA-2014-1352.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdif
/usn/USN-2404-1 - http://rhn.redhat.com/errata/RHSA-2014-1352.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=fc22b2e74890873848b43fffae43025d22053669 - http://security.libvirt.org/2014/0005.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00014.html - http://secunia.com/advisories/60291 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00017.html
CVE ID: CVE-2014-3658 State: REJECTED Published: 2022-07-07T16:02:03 Last Updated: 2022-07-07T16:02:03 Description: No description available.
CVE ID: CVE-2014-3659 State: REJECTED Published: 2014-09-25T10:00:00 Last Updated: 2014-09-25T05:57:00 Description: No description available.
CVE ID: CVE-2014-3660 State: PUBLISHED Published: 2014-11-04T16:00:00 Last Updated: 2024-08-06T10:50:17.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://secunia.com/advisories/59903 - https://
.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://secunia.com/advisories/59903 - https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html - http://www.debian.org/security/2014/dsa-3057 - https://support.apple.com/kb/HT205030 - http://www.securityfocus.com/bid/70644 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00034.html - https://bugzilla.redhat.com/attachment.cgi?id=944444&action=diff - http://secunia.com/advisories/61966 - http://secunia.com/advisories/61965 - http://www.ubuntu.com/usn/USN-2389-1 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/20
lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.openwall.com/lists/oss-security/2014/10/17/7 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 - http://rhn.redhat.com/errata/RHSA-2014-1655.html - http://rhn.redhat.com/errata/RHSA-2014-1885.html - https://bugzilla.redhat.com/show_bug.cgi?id=1149084 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61991 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - https://support.apple.com
?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - https://support.apple.com/kb/HT205031
CVE ID: CVE-2014-3661 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:18.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3662 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:18.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3663 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:18.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3664 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T10:50:17.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1147765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96973 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3665 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T10:50:18.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-30 - https://wiki.jenkins-ci.org/display/JENKINS/Slave+To+Master+Access+Control - https://bugzilla.redhat.com/show_bug.cgi?id=1147767 - https://www.cloudbees.com/jen
INS/Slave+To+Master+Access+Control - https://bugzilla.redhat.com/show_bug.cgi?id=1147767 - https://www.cloudbees.com/jenkins-security-advisory-2014-10-30
CVE ID: CVE-2014-3666 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:17.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3667 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:18.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3668 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59967
nds read operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59967 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88412772d295ebf7dd34409534507dc9bcac726e - http://rhn.redhat.com/errata/RHSA-2014-1767.html - http://www.ubuntu.com/usn/USN-2391-1 - https://support.apple.com/HT204659 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html - http://secunia.com/advisories/61982 - http://secunia.com/advisories/61763 - https://bugs.php.net/bug.php?id=68027 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http
?id=68027 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3064 - http://linux.oracle.com/errata/ELSA-2014-1768.html - http://www.securityfocus.com/bid/70666 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://secunia.com/advisories/61970 - https://bugzilla.redhat.com/show_bug.cgi?id=1154503 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://rhn.redhat.com/errata/RHSA-2014-1768.
/2015-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://rhn.redhat.com/errata/RHSA-2014-1768.html - http://secunia.com/advisories/60699 - http://secunia.com/advisories/60630
CVE ID: CVE-2014-3669 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1824.html - http://secunia.com/advisories/59967 - http://lists.opensuse.org/o
: - http://rhn.redhat.com/errata/RHSA-2014-1824.html - http://secunia.com/advisories/59967 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html - http://rhn.redhat.com/errata/RHSA-2014-1767.html - http://www.ubuntu.com/usn/USN-2391-1 - https://support.apple.com/HT204659 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html - http://secunia.com/advisories/61982 - http://secunia.com/advisories/61763 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3064 - http://linux.oracle.com/errata/ELSA-2014-1768.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=56754a7f9eba0e4f5
http://linux.oracle.com/errata/ELSA-2014-1768.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=56754a7f9eba0e4f559b6ca081d9f2a447b3f159 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - https://bugzilla.redhat.com/show_bug.cgi?id=1154500 - https://bugs.php.net/bug.php?id=68044 - http://www.securityfocus.com/bid/70611 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://secunia.com/advisories/61970 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://rhn.redhat.com/errata/RHSA-2014-1768.html - http://secunia.com/advi
//rhn.redhat.com/errata/RHSA-2014-1765.html - http://rhn.redhat.com/errata/RHSA-2014-1768.html - http://secunia.com/advisories/60699 - http://secunia.com/advisories/60630
CVE ID: CVE-2014-3670 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:17.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=c
bnail function. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ddb207e7fa2e9adeba021a1303c3781efda5409b - http://rhn.redhat.com/errata/RHSA-2014-1824.html - http://secunia.com/advisories/59967 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html - http://rhn.redhat.com/errata/RHSA-2014-1767.html - http://www.ubuntu.com/usn/USN-2391-1 - https://support.apple.com/HT204659 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html - http://secunia.com/advisories/61982 - http://secunia.com/advisories/61763 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html
advisories/61763 - http://linux.oracle.com/errata/ELSA-2014-1767.html - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3064 - http://linux.oracle.com/errata/ELSA-2014-1768.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://secunia.com/advisories/61970 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://www.securityfocus.com/bid/70665 - http://rhn.redhat.com/errata/RHSA-2014-1768.html - https://bugzilla.redhat.com/show_bug.cgi
ecurityfocus.com/bid/70665 - http://rhn.redhat.com/errata/RHSA-2014-1768.html - https://bugzilla.redhat.com/show_bug.cgi?id=1154502 - http://secunia.com/advisories/60699 - https://bugs.php.net/bug.php?id=68113 - http://secunia.com/advisories/60630
CVE ID: CVE-2014-3671 State: REJECTED Published: 2014-10-13T18:00:00 Last Updated: 2014-10-13T18:57:00 Description: No description available.
CVE ID: CVE-2014-3672 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-06T10:50:18.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://xenbits.xen.org/xsa/advisory-180.html - https://libvirt.org/news-2015.html - http://www.securitytracker.com/id/1035945 - https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38a
.securitytracker.com/id/1035945 - https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38ad63db4cf - http://www.openwall.com/lists/oss-security/2016/05/24/5
CVE ID: CVE-2014-3673 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:18.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70883 - http://linux.oracle.com/errata/ELSA-2014-3087.html - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://www.ubuntu.com/usn/USN-2418-1 - http://linux.oracle.com/errata/ELSA-2014-3089.html - http://
42722450701342&w=2 - http://www.ubuntu.com/usn/USN-2418-1 - http://linux.oracle.com/errata/ELSA-2014-3089.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2015-0062.html - http://www.ubuntu.com/usn/USN-2417-1 - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - http://linux.oracle.com/errata/ELSA-2014-3088.html - http://www.debian.org/security/2014/dsa-3060 - https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://secunia.com/advisories/62428 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025
00010.html - http://secunia.com/advisories/62428 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=1147850 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://rhn.redhat.com/errata/RHSA-2015-0115.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-3674 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T10:50:18.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1906.html - http://rhn.redhat.com/errata/RHSA-2014-1796.html
CVE ID: CVE-2014-3675 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T10:50:18.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/13/4 - http://www.securityfocus.com/bid/70407 - http://rhn.redhat.com/errata/RHSA-2014-1801.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96981
CVE ID: CVE-2014-3676 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T10:50:18.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/13/4 - http://www.securityfocus.com/bid/70409 - http://rhn.redhat.com/errata/RHSA-2014-1801.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96988
CVE ID: CVE-2014-3677 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T10:50:17.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/13/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96989 - http://rhn.redhat.com/errata/RHSA-2014-1801.html - http://www.securityfocus.com/bid/70410
CVE ID: CVE-2014-3678 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T10:50:17.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/JENKINS/Monitoring - http://secunia.com/advisories/59122 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3679 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:18.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/JENKINS/Monitoring - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3680 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T10:50:17.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3681 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T10:50:18.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96975 - https://bugzilla.redhat.com/show_bug.cgi?id=1147766 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
CVE ID: CVE-2014-3682 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T10:50:18.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/droolsjbpm/jbpm-designer/commit/5641588c730cc75dc3b76c34b76271fbd407fb84 - http://rhn.redhat.com/errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RH