Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2628 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T10:21:35.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04390793 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04390793
CVE ID: CVE-2014-2629 State: PUBLISHED Published: 2014-08-12T14:00:00 Last Updated: 2024-08-06T10:21:35.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to process-creation time. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030697 - http://www.securityfocus.com/bid/69147 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=
30697 - http://www.securityfocus.com/bid/69147 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=c04391893 - http://secunia.com/advisories/59981 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=c04391893
CVE ID: CVE-2014-2630 State: PUBLISHED Published: 2014-08-12T01:00:00 Last Updated: 2024-08-06T10:21:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04394554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95181 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04394554 - http://secunia.com/advisories/60041 - http://www.securitytracker.com/id/1030702 - http://p
play?docId=emr_na-c04394554 - http://secunia.com/advisories/60041 - http://www.securitytracker.com/id/1030702 - http://packetstormsecurity.com/files/156206/xglance-bin-Local-Root-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2020/Feb/1 - https://seclists.org/bugtraq/2020/Feb/7 - http://packetstormsecurity.com/files/157528/HP-Performance-Monitoring-xglance-Privilege-Escalation.html
CVE ID: CVE-2014-2631 State: PUBLISHED Published: 2014-08-12T00:00:00 Last Updated: 2024-08-06T10:21:35.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030698 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04394553 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04394553
CVE ID: CVE-2014-2632 State: PUBLISHED Published: 2014-08-23T23:00:00 Last Updated: 2024-08-06T10:21:35.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030756 - http://www.securityfocus.com/bid/69377 - http://secunia.com/advisories/60028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95448 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docD
es/95448 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127
CVE ID: CVE-2014-2633 State: PUBLISHED Published: 2014-08-23T23:00:00 Last Updated: 2024-08-06T10:21:35.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69376 - http://www.securitytracker.com/id/1030756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95449 - http://secunia.com/advisories/60028 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/s
s/95449 - http://secunia.com/advisories/60028 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127
CVE ID: CVE-2014-2634 State: PUBLISHED Published: 2014-08-23T23:00:00 Last Updated: 2024-08-06T10:21:35.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69379 - http://www.securitytracker.com/id/1030756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95450 - http://secunia.com/advisories/60028 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.
lnerabilities/95450 - http://secunia.com/advisories/60028 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127
CVE ID: CVE-2014-2635 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636
CVE ID: CVE-2014-2636 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636
CVE ID: CVE-2014-2637 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636
CVE ID: CVE-2014-2638 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636
CVE ID: CVE-2014-2639 State: PUBLISHED Published: 2014-09-28T19:00:00 Last Updated: 2024-08-06T10:21:35.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04048122 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04048122
CVE ID: CVE-2014-2640 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:21:35.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - http://www.securitytracker.com/id/1030960 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay
c04463322 - http://www.securitytracker.com/id/1030960 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - http://www.kb.cert.org/vuls/id/125228
CVE ID: CVE-2014-2641 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:21:35.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - http://www.securitytracker.com/id/1030960
CVE ID: CVE-2014-2642 State: PUBLISHED Published: 2014-10-02T00:00:00 Last Updated: 2024-08-06T10:21:35.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322 - http://www.securitytracker.com/id/1030960
CVE ID: CVE-2014-2643 State: PUBLISHED Published: 2014-10-05T01:00:00 Last Updated: 2024-08-06T10:21:35.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121 - http://www.securitytracker.com/id/1030970 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121
CVE ID: CVE-2014-2644 State: PUBLISHED Published: 2014-10-06T01:00:00 Last Updated: 2024-08-06T10:21:35.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121 - http://www.securitytracker.com/id/1030970 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121 - http://www.securityfocus.com/bid/70223
CVE ID: CVE-2014-2645 State: PUBLISHED Published: 2014-10-05T01:00:00 Last Updated: 2024-08-06T10:21:35.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121 - http://www.securitytracker.com/id/1030970 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121
CVE ID: CVE-2014-2646 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04470581 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04470581
CVE ID: CVE-2014-2647 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:21:35.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444 - http://www.exploit-db.com/exploits/35076 - https://h205
m/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444 - http://www.exploit-db.com/exploits/35076 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444
CVE ID: CVE-2014-2648 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866
CVE ID: CVE-2014-2649 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:21:35.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866
CVE ID: CVE-2014-2650 State: PUBLISHED Published: 2020-01-09T13:00:21 Last Updated: 2024-08-06T10:21:35.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-1403-01.pdf - http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
CVE ID: CVE-2014-2651 State: PUBLISHED Published: 2020-01-09T12:52:39 Last Updated: 2024-08-06T10:21:36.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-1403-02.pdf - http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
CVE ID: CVE-2014-2652 State: PUBLISHED Published: 2018-03-19T21:00:00 Last Updated: 2024-08-06T10:21:36.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-1404-01.pdf
CVE ID: CVE-2014-2653 State: PUBLISHED Published: 2014-03-27T10:00:00 Last Updated: 2024-08-06T10:21:35.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2164-1 - http://secunia.com/advisories/59855 - http://rhn.redhat.com/errata/RHSA-2015-0425.html - http://advisories.mageia.org/MGASA-2014-0166.html - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://marc.info/?l=bugtraq&m=1
es.mageia.org/MGASA-2014-0166.html - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://www.securityfocus.com/bid/66459 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:095 - http://openwall.com/lists/oss-security/2014/03/26/7 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html - http://www.debian.org/security/2014/dsa-2894 - http://rhn.redhat.com/errata/RHSA-2014-1552.html - http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html - http:/
-bin/bugreport.cgi?bug=742513 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:068 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-2654 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T10:21:36.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) edit_ad_unit.php, (2) view_adunits.php, or (3) edit_campaign.php in www/cp/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92545 - http://secunia.com/advisories/58003 - http://www.securityfocus.com/archive/1/531848/100/0/threaded - http://www.securityfocus.com/bid/66661 - https://www.htbrid
tp://www.securityfocus.com/archive/1/531848/100/0/threaded - http://www.securityfocus.com/bid/66661 - https://www.htbridge.com/advisory/HTB23209
CVE ID: CVE-2014-2655 State: PUBLISHED Published: 2014-04-02T14:00:00 Last Updated: 2024-08-06T10:21:36.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/postfixadmin/code/1650 - http://www.debian.org/security/2014/dsa-2889 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00075.html - http://www.securityfocus.com/bid/66455 - http://www.openwall.com/lists/oss-security/2014
updates/2014-05/msg00075.html - http://www.securityfocus.com/bid/66455 - http://www.openwall.com/lists/oss-security/2014/03/26/11 - http://www.openwall.com/lists/oss-security/2014/03/26/6
CVE ID: CVE-2014-2656 State: REJECTED Published: 2016-06-01T15:00:00 Last Updated: 2016-06-01T14:57:01 Description: No description available.
CVE ID: CVE-2014-2657 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T10:21:36.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors, related to embedded MFPs. Additional Analyst Notes: - CVE Program Container: References: - http://www.papercut-mf.com/release-history/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92650
CVE ID: CVE-2014-2658 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T10:21:35.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.papercut-mf.com/release-history/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92649 - http://www.papercut.com/release-history/ - http://secunia.com/advisories/58037
CVE ID: CVE-2014-2659 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T10:21:35.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.papercut-mf.com/release-history/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92648 - http://www.papercut.com/release-history/ - http://secunia.com/advisories/58037
CVE ID: CVE-2014-2664 State: PUBLISHED Published: 2017-10-17T15:00:00 Last Updated: 2024-08-06T10:21:36.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92169 - http://secunia.com/advisories/57315 - http://www.securityfoc
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/92169 - http://secunia.com/advisories/57315 - http://www.securityfocus.com/bid/66506/discuss - https://secuniaresearch.flexerasoftware.com//secunia_research/2014-4 - http://karmainsecurity.com/KIS-2014-04
CVE ID: CVE-2014-2665 State: PUBLISHED Published: 2014-04-20T01:00:00 Last Updated: 2024-08-06T10:21:35.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account, as demonstrated by tracking the victim's activity, related to a "login CSRF" issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimed
lated to a "login CSRF" issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimedia.org/show_bug.cgi?id=62497 - http://openwall.com/lists/oss-security/2014/03/28/1 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-March/000145.html - http://openwall.com/lists/oss-security/2014/04/01/7 - https://gerrit.wikimedia.org/r/#/c/121517/1/includes/specials/SpecialChangePassword.php