Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1836 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T09:50:11.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Feb/14 - http://community.impresscms.org/modules/smartsection/item.php?itemid=675 - https://github.com/pedrib/PoC/blob/master/generic/impresscms-1.3.5.txt - http://www.securityfocus.com/bid/65279
d=675 - https://github.com/pedrib/PoC/blob/master/generic/impresscms-1.3.5.txt - http://www.securityfocus.com/bid/65279 - http://osvdb.org/show/osvdb/102770
CVE ID: CVE-2014-1837 State: PUBLISHED Published: 2014-01-30T19:00:00 Last Updated: 2024-08-06T09:50:11.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56577 - http://osvdb.org/102563 - http://www.securityfocus.com/bid/65173 - http://stackideas.com/downloads/changelog/komento - https://exchange.xforce.ibmcloud.com/vulnerabilities/90974
CVE ID: CVE-2014-1838 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T09:50:11.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html - http://secunia.com/advisories/57209 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051 - http://www.logilab.org/ticket/207561 - http://comments.gmane.org/gman
bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051 - http://www.logilab.org/ticket/207561 - http://comments.gmane.org/gmane.comp.security.oss.general/11986
CVE ID: CVE-2014-1839 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T09:50:11.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.logilab.org/ticket/207562 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html - http://secunia.com/advisories/57209 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051 - http://comments.gmane.org/gmane.comp.security.oss.general/11986
CVE ID: CVE-2014-1840 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T09:50:11.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125038/MyBB-1.6.12-POST-Cross-Site-Scripting.html - http://osandamalith.wordpress.com/2014/02/02/mybb-1-6-12-post-xss-0day/
CVE ID: CVE-2014-1841 State: PUBLISHED Published: 2014-04-29T10:00:00 Last Updated: 2024-08-06T09:50:11.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65462 - http://www.exploit-db.com/exploits/31579 - http://www.osvdb.org/103195 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
CVE ID: CVE-2014-1842 State: PUBLISHED Published: 2014-04-29T10:00:00 Last Updated: 2024-08-06T09:50:11.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/103196 - http://www.exploit-db.com/exploits/31579 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
CVE ID: CVE-2014-1843 State: PUBLISHED Published: 2014-04-29T10:00:00 Last Updated: 2024-08-06T09:58:15.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/103197 - http://www.securityfocus.com/bid/65469 - http://www.exploit-db.com/exploits/31579 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
CVE ID: CVE-2014-1845 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T09:58:14.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91216 - https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b - https://bugzilla.redhat.com/show_bug.cgi?id=1059410 - http://www.openwall.com/lists/oss-security/2014/02/03/19 - https://git.enlightenme
.redhat.com/show_bug.cgi?id=1059410 - http://www.openwall.com/lists/oss-security/2014/02/03/19 - https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0
CVE ID: CVE-2014-1846 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T09:58:15.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b - https://bugzilla.redhat.com/show_bug.cgi?id=1059410 - http://www.openwall.com/lists/oss-security/2014/02/03/19 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91215
CVE ID: CVE-2014-1849 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T09:58:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam DNS server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/artemharutyunyan/getmecamtool/blob/master/src/dnsmod.c - http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-crede
tmecamtool/blob/master/src/dnsmod.c - http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-credentials-vulnerability.html - http://seclists.org/fulldisclosure/2014/May/35
CVE ID: CVE-2014-1850 State: REJECTED Published: 2020-01-06T19:40:59 Last Updated: 2020-01-06T20:52:07 Description: No description available.
CVE ID: CVE-2014-1854 State: PUBLISHED Published: 2014-02-27T15:00:00 Last Updated: 2024-08-06T09:58:15.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91253 - http://www.adrotateplugin.com/2014/01/adrotate-pro-3-9-6-and-adrotate-free-3-9-5 - http://www.securityfocus.com/archive/1/531176/100/0/threaded - https://www.htbridg
e-pro-3-9-6-and-adrotate-free-3-9-5 - http://www.securityfocus.com/archive/1/531176/100/0/threaded - https://www.htbridge.com/advisory/HTB23201 - http://www.securityfocus.com/bid/65709 - http://www.exploit-db.com/exploits/31834 - http://secunia.com/advisories/57079
CVE ID: CVE-2014-1855 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T09:58:15.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23200 - http://forum.seopanel.in/viewtopic.php?f=7&t=10978 - http://secunia.com/advisories/58706 - http://www.securityfocus.com/archive/1/532119/100/0/threaded - http://packetstormsecurity.com/files/12
dvisories/58706 - http://www.securityfocus.com/archive/1/532119/100/0/threaded - http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2014-1858 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T09:58:16.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: __init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128781.html - https://github.com/numpy/numpy/commit/0bb46c1448b0d3f5453d5182a17ea7ac5854ee15 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737778 - https://github.com/numpy/numpy/pull/4262 - https://bugzilla.redhat.com/show_bug.cgi?id=1062009 - http://www.se
=737778 - https://github.com/numpy/numpy/pull/4262 - https://bugzilla.redhat.com/show_bug.cgi?id=1062009 - http://www.securityfocus.com/bid/65441 - https://github.com/numpy/numpy/blob/maintenance/1.8.x/doc/release/1.8.1-notes.rst - https://exchange.xforce.ibmcloud.com/vulnerabilities/91318 - http://www.openwall.com/lists/oss-security/2014/02/08/3 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128358.html
CVE ID: CVE-2014-1859 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T09:58:15.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128781.html - http://www.securityfocus.com/bid/65440 - https://github.com/numpy/numpy/commit/0bb46c1448b0d3f5453d5182a17ea7ac5854ee15 - https://bugs.debian.org/cgi-bin/bu
40 - https://github.com/numpy/numpy/commit/0bb46c1448b0d3f5453d5182a17ea7ac5854ee15 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737778 - https://github.com/numpy/numpy/pull/4262 - https://bugzilla.redhat.com/show_bug.cgi?id=1062009 - https://github.com/numpy/numpy/blob/maintenance/1.8.x/doc/release/1.8.1-notes.rst - http://www.openwall.com/lists/oss-security/2014/02/08/3 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128358.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/91317
CVE ID: CVE-2014-1860 State: PUBLISHED Published: 2020-01-08T15:37:35 Last Updated: 2024-08-06T09:58:16.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65293 - http://www.openwall.com/lists/oss-security/2014/02/03/14 - http://www.openwall.com/lists/oss-security/2014/02/07/7 - https://packetstormsecurity.com/files/cve/CVE-2014-1860 - https://www.exploit-database.net/?id=21609
CVE ID: CVE-2014-1861 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T09:58:14.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-02/0075.html - http://blog.quaji.com/2014/02/remote-code-execution-on-all-enterprise.html
CVE ID: CVE-2014-1867 State: PUBLISHED Published: 2019-12-13T13:08:00 Last Updated: 2024-08-06T09:58:14.488Z Vendors: suphp Products: suphp Problem Types: UNKNOWN_TYPE Description: suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-1867 - http://www.securityfocus.com/bid/65212 - http://www.openwall.com/lists/oss-security/2014/02/10/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91315
CVE ID: CVE-2014-1868 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T09:58:15.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56940 - https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements - https://exchange.xforce.ibmcloud.com/vulnerabilities/91181
CVE ID: CVE-2014-1869 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T09:58:15.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zeroclipboard/zeroclipboard/pull/335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91085 - http://secunia.com/advisories/56821 - http://www.secu
335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91085 - http://secunia.com/advisories/56821 - http://www.securityfocus.com/bid/65484 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01 - https://github.com/zeroclipboard/zeroclipboard/releases/tag/v1.3.2 - https://github.com/zeroclipboard/zeroclipboard/commit/2f9eb9750a433965572d047e24b0fc78fd1415ca
CVE ID: CVE-2014-1870 State: PUBLISHED Published: 2014-02-06T23:00:00Z Last Updated: 2024-09-16T16:23:52.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/
CVE ID: CVE-2014-1874 State: PUBLISHED Published: 2014-02-28T02:00:00 Last Updated: 2024-08-06T09:58:14.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2137-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://git.kernel
ntu.com/usn/USN-2137-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2172fa709ab32ca60e86179dc67d0857be8e2c98 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2140-1 - http://www.openwall.com/lists/oss-security/2014/02/07/2 - http://secunia.com/advisories/59262 - https://bugzilla.redhat.com/show_bug.cgi?id=1062356 - http://www.ubuntu.com/usn/USN-2139-1 - http://secunia.com/advisories/59309 - http://secunia.com/advisories/59406 - http://www.ubuntu.com/usn/USN-2134-1 - http://www.securityfocus.com/bid/65459 - http://linux
unia.com/advisories/59406 - http://www.ubuntu.com/usn/USN-2134-1 - http://www.securityfocus.com/bid/65459 - http://linux.oracle.com/errata/ELSA-2014-0771.html - http://www.ubuntu.com/usn/USN-2133-1 - https://github.com/torvalds/linux/commit/2172fa709ab32ca60e86179dc67d0857be8e2c98 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.4 - http://linux.oracle.com/errata/ELSA-2014-3043.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-1875 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T09:58:15.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91464 - http://secunia.com/advisories/56823 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128823.html - http://osvdb.org/102963 - https://bugzilla.redhat.com/show_bug.cgi?id=1062424 - https://bugs.debian.org/cg
128823.html - http://osvdb.org/102963 - https://bugzilla.redhat.com/show_bug.cgi?id=1062424 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737835 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128882.html - http://seclists.org/oss-sec/2014/q1/267 - http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes - http://seclists.org/oss-sec/2014/q1/272 - https://github.com/dagolden/Capture-Tiny/commit/635c9eabd52ab8042b0c841823bd6e692de87924 - https://github.com/dagolden/Capture-Tiny/issues/16
CVE ID: CVE-2014-1876 State: PUBLISHED Published: 2014-02-10T23:00:00 Last Updated: 2024-08-06T09:58:15.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - https://access.redhat
ences: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - https://access.redhat.com/errata/RHSA-2014:0413 - https://bugzilla.redhat.com/show_bug.cgi?id=1060907 - http://secunia.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://www.debian.org/security/2014/dsa-2912 - htt
852974709252&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://www.debian.org/security/2014/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/58415 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://seclists.org/oss-sec/2014/q1/285 - http://www-01.ibm.com/support/docview.wss?uid=swg21676746 - http://seclists.org/oss-sec/2014/q1/242 - http://www-01.ibm.com/support/docview.wss?uid=swg21679713 - http://www.securityfocus.com/bid/65568 - http://osvdb.org/102808
CVE ID: CVE-2014-1877 State: PUBLISHED Published: 2014-03-13T14:00:00 Last Updated: 2024-08-06T09:58:16.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone, (2) Street, (3) Address line, (4) Zip code, or (5) City field to main/auth/profile.php; (6) Subject field to main/social/groups.php; or (7) Message body field to main/messages/view_message.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/258 - http://seclists.org/oss-sec/2014/q1/286 - http://www.xchg.info/?p=381 - http://www
://seclists.org/oss-sec/2014/q1/258 - http://seclists.org/oss-sec/2014/q1/286 - http://www.xchg.info/?p=381 - http://www.securityfocus.com/bid/65416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91295
CVE ID: CVE-2014-1878 State: PUBLISHED Published: 2014-02-28T15:00:00 Last Updated: 2024-08-06T09:58:16.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-04/msg00033.html - https://dev.icinga.org/issues/5434 - https://www.icinga.org/2014/02/11/bugfix-releases-1-10-3-1-9-5-1-8-6 - https
html - https://dev.icinga.org/issues/5434 - https://www.icinga.org/2014/02/11/bugfix-releases-1-10-3-1-9-5-1-8-6 - https://bugzilla.redhat.com/show_bug.cgi?id=1066578 - http://www.securityfocus.com/bid/65605 - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - http://secunia.com/advisories/57024
CVE ID: CVE-2014-1879 State: PUBLISHED Published: 2014-02-20T11:00:00 Last Updated: 2024-08-06T09:58:15.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2014-1.php - http://www.securityfocus.com/bid/65717 - http://secunia.com/advisories/59832 - https://github.com/phpmyadmin/phpmyadmin/commit/968d5d5f486820bfa30af046f063b9f23304e14a - http://lists.opensuse.org/opensuse
://github.com/phpmyadmin/phpmyadmin/commit/968d5d5f486820bfa30af046f063b9f23304e14a - http://lists.opensuse.org/opensuse-updates/2014-03/msg00017.html