Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-10053 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:20:00.645Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Input Validation in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, data access is not properly validated in the Widevine secure application. Additional Ana
0A, SD 835, SD 845, and SD 850, data access is not properly validated in the Widevine secure application. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10054 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:27:42.285Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper access control in BTSOC. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SDX20, lack of input validation on BT HCI commands
415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SDX20, lack of input validation on BT HCI commands processing allows privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10055 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:54:14.467Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Leakage of protected contents when security config is not restored for OCMEM xPUs during each OCMEM power up Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10056 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:40:20.299Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Buffer Overflow vulnerability when using OpenCL-CPU Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, A buffer overflow can potentially occur in any OpenCL application that calls clBuildProgram() with a device of type CL_DEVICE_TYPE_CPU in its device_list argument. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10057 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T04:23:54.513Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper access control vulnerability in Audio. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and Snapdragon_High_Med_2016, binary Calibration files under data/misc/audio have 777 permissions. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid
gram Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10058 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:08:23.743Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Access Control in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, unauthorized users can potentially modify system time. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10059 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:20:59.340Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Access Control in Telephony Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10060 State: REJECTED Published: 2019-08-30T15:00:37 Last Updated: 2019-08-30T15:00:37 Description: No description available.
CVE ID: CVE-2014-10061 State: REJECTED Published: 2019-08-30T14:55:23 Last Updated: 2019-08-30T14:55:23 Description: No description available.
CVE ID: CVE-2014-10062 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:45:55.239Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in GPS Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, LocationService is being exported, which is a way for a service to expose its methods to other services. This makes it possible for any ot
being exported, which is a way for a service to expose its methods to other services. This makes it possible for any other services to import LocationService and call into the exposed method for bringing up a data connection. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10063 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:01:55.029Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Always-Incorrect Control Flow Implementation in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10064 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-17T00:36:04.821Z Vendors: HackerOne Products: qs node module Problem Types: CWE-400 Description: The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example, in a web application, other requests would not be processed while this blocking is occurring. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/28
CVE ID: CVE-2014-10065 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-16T22:25:48.380Z Vendors: HackerOne Products: remarkable node module Problem Types: CWE-94 Description: Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/remarkable/issues/97 - https://nodesecurity.io/advisories/30
CVE ID: CVE-2014-10066 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-16T16:48:22.004Z Vendors: HackerOne Products: fancy-server node module Problem Types: CWE-22 Description: Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/9
CVE ID: CVE-2014-10067 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T00:11:12.478Z Vendors: HackerOne Products: paypal-ipn node module Problem Types: Improper Authentication Description: paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly check for test_ipn in production. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andzdroid/paypal-ipn/issues/11 - https://nodesecurity.io/advisori
VE Program Container: References: - https://github.com/andzdroid/paypal-ipn/issues/11 - https://nodesecurity.io/advisories/26
CVE ID: CVE-2014-10068 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T03:12:54.633Z Vendors: HackerOne Products: inert node module Problem Types: CWE-22 Description: The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/inert/pull/15 - https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82 - https://nodesecurity.io/advisories/14
CVE ID: CVE-2014-10069 State: PUBLISHED Published: 2018-01-07T20:00:00Z Last Updated: 2024-09-16T20:11:19.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/habohitron/habohitron/blob/6add0d002fe553f0924a3bba197994c53ca7d52d/firmwares/3.1.1.21/analyse/hc.c#L17 - https://blogger.davidmanouchehri.com/2018
6add0d002fe553f0924a3bba197994c53ca7d52d/firmwares/3.1.1.21/analyse/hc.c#L17 - https://blogger.davidmanouchehri.com/2018/01/hitrons-encryption.html - https://github.com/Manouchehri/hitron-cfg-decrypter
CVE ID: CVE-2014-10070 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-06T14:02:38.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/35
env_reset" has been disabled. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3593-1/ - https://sourceforge.net/p/zsh/code/ci/546203a770cec329e73781c3c8ab1078390aee72 - http://zsh.sourceforge.net/releases.html
CVE ID: CVE-2014-10071 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-06T14:02:38.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zsh/code/ci/49a3086bb67575435251c70ee598e2fd406ef055 - https://usn.ubuntu.com/3593-1/ - https://access.redhat.com/errata/RHSA-2018:3073
CVE ID: CVE-2014-10072 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-06T14:02:38.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3593-1/ - https://access.redhat.com/errata/RHSA-2018:1932 - https://sourceforge.net/p/zsh/code/ci/3e06aeabd8a9e8384ebaa8b08996cd1f64737210 - https://access.redhat.com/errata/RHSA-2018:3073
CVE ID: CVE-2014-10073 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-06T14:02:38.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00026.html - http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=blob%3Bf=NEWS - http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=commit%3Bh=8b10426dcc0246c1712a99460dd470dcb1cc4d9c - http://git.wpitchoune.net/gitweb/?p=psensor.gi
/?p=psensor.git%3Ba=commit%3Bh=8b10426dcc0246c1712a99460dd470dcb1cc4d9c - http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=commit%3Bh=48739caa745f9f8002e87af574f03e5dc6ae3447
CVE ID: CVE-2014-10074 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-06T14:02:38.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not block the upload of .php files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Umbraco/Umbraco-CMS/commit/cad06502235acabf7fb7dca779d2f78f08547e39 - http://issues.umbraco.org/issue/U4-5901
CVE ID: CVE-2014-10075 State: PUBLISHED Published: 2018-10-05T05:00:00Z Last Updated: 2024-09-16T19:20:49.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The karo gem 2.3.8 for Ruby allows Remote command injection via the host field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=63 - http://www.vapid.dhs.org/advisories/karo-2.3.8.html
CVE ID: CVE-2014-10076 State: PUBLISHED Published: 2018-10-05T05:00:00Z Last Updated: 2024-09-17T00:40:42.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=81
CVE ID: CVE-2014-10077 State: PUBLISHED Published: 2018-11-06T16:00:00 Last Updated: 2024-08-06T14:02:38.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/svenfuchs/i18n/releases/tag/v0.8.0 - https://github.com/rubysec/ruby-advisory-db/pull/182/files - https://lists.debian.org/debian-lts-announce/2018/11/msg00021.html - https://github.com/svenfuchs/i18n/
pull/182/files - https://lists.debian.org/debian-lts-announce/2018/11/msg00021.html - https://github.com/svenfuchs/i18n/pull/289
CVE ID: CVE-2014-10078 State: PUBLISHED Published: 2019-02-23T14:00:00 Last Updated: 2024-08-06T14:02:38.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018120091 - https://seclists.org/fulldisclosure/2014/Aug/8 - https://www.exploit-db.com/exploits/46549/
CVE ID: CVE-2014-10079 State: PUBLISHED Published: 2019-02-23T14:00:00 Last Updated: 2024-08-06T14:02:38.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.html - https://cxsecurity.com/issue/WLB-2018120091 - https://seclists.org/fulldisclosure/2014/Aug/8 - https://www.exploit-db.com/exp
://cxsecurity.com/issue/WLB-2018120091 - https://seclists.org/fulldisclosure/2014/Aug/8 - https://www.exploit-db.com/exploits/46549/
CVE ID: CVE-2014-10374 State: PUBLISHED Published: 2019-07-15T12:47:25 Last Updated: 2024-08-06T14:02:38.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low Energy (BLE) advertising packets with a TxAdd flag indicating random addresses, but the addresses remain constant. If devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary ca
devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary can determine whether the same device has entered one of these locations. Additional Analyst Notes: - CVE Program Container: References: - https://petsymposium.org/2019/files/papers/issue3/popets-2019-0036.pdf - https://twitter.com/TedOnPrivacy/status/1151390589990187008
CVE ID: CVE-2014-10375 State: PUBLISHED Published: 2019-08-14T04:46:05 Last Updated: 2024-08-06T14:02:38.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.nongnu.org/cgit/exosip.git/commit/?id=2549e421c14aff886629b8482c14af800f411070
CVE ID: CVE-2014-10376 State: PUBLISHED Published: 2019-08-16T20:09:48 Last Updated: 2024-08-06T14:02:38.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/i-recommend-this/#developers
CVE ID: CVE-2014-10377 State: PUBLISHED Published: 2019-08-21T18:11:07 Last Updated: 2024-08-06T14:02:38.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers - https://wpvulndb.com/vulnerabilities/9812
CVE ID: CVE-2014-10378 State: PUBLISHED Published: 2019-08-21T18:08:13 Last Updated: 2024-08-06T14:02:38.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The duplicate-post plugin before 2.6 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/duplicate-post/#developers
CVE ID: CVE-2014-10379 State: PUBLISHED Published: 2019-08-21T18:07:43 Last Updated: 2024-08-06T14:02:38.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The duplicate-post plugin before 2.6 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/duplicate-post/#developers
CVE ID: CVE-2014-10380 State: PUBLISHED Published: 2019-08-21T17:20:50 Last Updated: 2024-08-06T14:02:38.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/profile-builder/#developers
CVE ID: CVE-2014-10381 State: PUBLISHED Published: 2019-08-20T14:48:39 Last Updated: 2024-08-06T14:02:38.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/user-domain-whitelist/#developers
CVE ID: CVE-2014-10382 State: PUBLISHED Published: 2019-08-22T19:41:37 Last Updated: 2024-08-06T14:02:38.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/feature-comments/#developers
CVE ID: CVE-2014-10383 State: PUBLISHED Published: 2019-08-22T13:18:50 Last Updated: 2024-08-06T14:02:38.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/memphis-documents-library/#developers
CVE ID: CVE-2014-10384 State: PUBLISHED Published: 2019-08-22T13:19:54 Last Updated: 2024-08-06T14:02:38.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/memphis-documents-library/#developers
CVE ID: CVE-2014-10385 State: PUBLISHED Published: 2019-08-22T13:20:41 Last Updated: 2024-08-06T14:10:54.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memphis-documents-library plugin before 3.0 for WordPress has XSS via $_REQUEST. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/memphis-documents-library/#developers
CVE ID: CVE-2014-10386 State: PUBLISHED Published: 2019-08-22T19:05:53 Last Updated: 2024-08-06T14:10:54.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers
CVE ID: CVE-2014-10387 State: PUBLISHED Published: 2019-08-22T18:56:24 Last Updated: 2024-08-06T14:10:54.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers