Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-125114 State: PUBLISHED Published: 2025-07-25T15:52:16.998Z Last Updated: 2025-07-29T13:48:53.796Z Vendors: i-Ftp Products: i-Ftp Problem Types: CWE-121, CWE-20 Description: A stack-based buffer overflow vulnerability exists in i-Ftp version 2.20 due to improper handling of the Time attribute within Schedule.xml. By placing a specially crafted Schedule.xml file in the i-Ftp application directory, a remote attacker can trigger a buffer overflow during scheduled download parsing, potentially leading to arbitrary code execution or a crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/module
otes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/iftp_schedule_bof.rb - https://www.exploit-db.com/exploits/35177 - https://www.exploit-db.com/exploits/35671 - https://www.vulncheck.com/advisories/iftp-schedule-stack-based-buffer-overflow
CVE ID: CVE-2014-125115 State: PUBLISHED Published: 2025-07-25T15:53:16.906Z Last Updated: 2025-11-22T13:50:47.996Z Vendors: Artica ST Products: Pandora FMS Problem Types: CWE-798, CWE-89 Description: An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhash_data parameter, allowing attackers to extract administrator credentials or active session tokens via crafted requests. This occurs because input is directly concatenated into an SQL query without adequate validation, enabling SQL injection. After authentication is bypassed, a second vulnerability in the File Manage
adequate validation, enabling SQL injection. After authentication is bypassed, a second vulnerability in the File Manager component permits arbitrary PHP file uploads. The file upload functionality does not enforce MIME-type or file extension restrictions, allowing authenticated users to upload web shells into a publicly accessible directory and achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/35380 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/pandora_fms_sqli.rb - https://web.archive.org/web/20140331231237/http://pandorafms.com/downloads/whats_new_5-SP3.pd
http/pandora_fms_sqli.rb - https://web.archive.org/web/20140331231237/http://pandorafms.com/downloads/whats_new_5-SP3.pdf - https://web.archive.org/web/20140304121149/http://blog.pandorafms.org/?p=2041 - https://www.vulncheck.com/advisories/pandora-fms-default-creds-sqli-rce
CVE ID: CVE-2014-125116 State: PUBLISHED Published: 2025-07-25T15:51:57.134Z Last Updated: 2025-11-21T01:36:32.621Z Vendors: HybridAuth Products: HybridAuth Problem Types: CWE-434, CWE-306 Description: A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script. The script remains accessible after deployment and fails to sanitize input before writing to the application’s config.php file. An unauthenticated attacker can inject arbitrary PHP code into config.php, which is later executed when the file is loaded. This allows attackers to achieve remote code execution on the server. Exploitation of this issue w
n the file is loaded. This allows attackers to achieve remote code execution on the server. Exploitation of this issue will overwrite the existing configuration, rendering the application non-functional. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/34390 - https://www.exploit-db.com/exploits/34273 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/hybridauth_install_php_exec.rb - https://vulners.com/metasploit/MSF:EXPLOIT-UNIX-WEBAPP-HYBRIDAUTH_INSTALL_PHP_EXEC- - https://hybridauth.github.io/ - https://www.vulncheck.com/advisories/hybridauth-unauth-rce-via-config-injection
CVE ID: CVE-2014-125117 State: PUBLISHED Published: 2025-07-25T15:50:39.022Z Last Updated: 2025-11-21T01:37:47.821Z Vendors: D-Link Products: DSP-W215 Problem Types: CWE-121, CWE-20 Description: A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink
nt: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dspw215_info_cgi_bof.rb - https://www.exploit-db.com/exploits/34063 - https://web.archive.org/web/20140525215526/http://www.devttys0.com/2014/05/hacking-the-dspw215-again/ - https://www.fortiguard.com/encyclopedia/ips/38932/d-link-info-cgi-post-request-buffer-overflow - https://www.vulncheck.com/advisories/dlink-stack-based-buffer-overflow-rce
CVE ID: CVE-2014-125118 State: PUBLISHED Published: 2025-07-25T15:51:01.932Z Last Updated: 2025-07-25T17:45:58.304Z Vendors: MicroWorld Products: eScan Web Management Console Problem Types: CWE-78, CWE-306 Description: A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username to inject arbitrary commands via a specially crafted password value. Successful exploitation results in remote code execution. Privilege escalation to root is possible by abusing the runasroot utility with mwconf-level priv
remote code execution. Privilege escalation to root is possible by abusing the runasroot utility with mwconf-level privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/32869 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/antivirus/escan_password_exec.rb - https://www.vulncheck.com/advisories/escan-web-management-console-command-injection
CVE ID: CVE-2014-125119 State: PUBLISHED Published: 2025-07-25T15:59:39.205Z Last Updated: 2025-11-21T01:38:41.928Z Vendors: RARLab Products: WinRAR Problem Types: CWE-20, CWE-434 Description: A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the user, while the file from the Local File Header is extracted and executed. An attacker can leverage this flaw to spoof filenames and trick users into executing malicious payloads under the guise of harmless files,
verage this flaw to spoof filenames and trick users into executing malicious payloads under the guise of harmless files, potentially leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rarlab.com/vuln_zip_spoofing_4.20.html - https://an7isec.blogspot.com/2014/03/winrar-file-extension-spoofing-0day.html - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/winrar_name_spoofing.rb - https://web.archive.org/web/20141111142204/https://www.intelcrawler.com/report_2603.pdf - https://web.archive.org/web/20140625054244/http://intelcrawler.com/news-15 - https://www.vulncheck.com/advisories/
pdf - https://web.archive.org/web/20140625054244/http://intelcrawler.com/news-15 - https://www.vulncheck.com/advisories/winrar-filename-spoofing-rce
CVE ID: CVE-2014-125121 State: PUBLISHED Published: 2025-07-31T14:52:45.290Z Last Updated: 2025-11-21T01:40:08.872Z Vendors: Array Networks Products: vAPV, vxAG Problem Types: CWE-798, CWE-732 Description: Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials (or SSH private key) and insecure permissions on a startup script. The devices ship with a default SSH login or a hardcoded DSA private key, allowing an attacker to authenticate remotely with limited privileges. Once authenticated, an attacker can overwrite the world-writable /ca/bin/monitor.sh script with ar
h limited privileges. Once authenticated, an attacker can overwrite the world-writable /ca/bin/monitor.sh script with arbitrary commands. Since this script is executed with elevated privileges through the backend binary, enabling the debug monitor via backend -c "debug monitor on" triggers execution of the attacker's payload as root. This allows full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ssh/array_vxag_vapv_privkey_privesc.rb - https://packetstorm.news/files/id/125761 - https://www.exploit-db.com/exploits/32440 - https://www.vulncheck.com/advisories/array-n
ketstorm.news/files/id/125761 - https://www.exploit-db.com/exploits/32440 - https://www.vulncheck.com/advisories/array-networks-vapv-vxag-default-credential-privilege-escalation
CVE ID: CVE-2014-125122 State: PUBLISHED Published: 2025-07-31T14:57:59.666Z Last Updated: 2025-11-21T01:43:36.733Z Vendors: Linksys Products: WRT120N Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TM_Block_URL parameter to the endpoint. By exploiting this flaw, an unauthenticated remote attacker can overwrite memory in a controlled manner, enabling them to temporarily reset the administrator password of the device to a blank value. This grants unauthorized access to the router’s web m
y reset the administrator password of the device to a blank value. This grants unauthorized access to the router’s web management interface without requiring valid credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/linksys_tmunblock_admin_reset_bof.rb - https://www.exploit-db.com/exploits/31758 - https://web.archive.org/web/20210424073058/http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overflow/ - https://www.vulncheck.com/advisories/linksys-wrt120n-stack-based-buffer-overflow-admin-password-reset
CVE ID: CVE-2014-125123 State: PUBLISHED Published: 2025-07-31T14:57:28.299Z Last Updated: 2025-07-31T18:48:20.064Z Vendors: LXCenter Products: Kloxo Problem Types: CWE-89 Description: An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12. The flaw resides in the login-name parameter passed to lbin/webcommand.php, which fails to properly sanitize input, allowing an attacker to extract the administrator’s password from the backend database. After recovering valid credentials, the attacker can authenticate to the Kloxo control panel and leverage the Command Center feature (display.php) to execute arbitrary o
can authenticate to the Kloxo control panel and leverage the Command Center feature (display.php) to execute arbitrary operating system commands as root on the underlying host system. This vulnerability was reported to be exploited in the wild in January 2014. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20140301125222/http://www.webhostingtalk.com/showthread.php?p=8996984 - https://web.archive.org/web/20141118054734/https://vpsboard.com/topic/3384-kloxo-installations-compromised/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/kloxo_sqli.rb - https://github.com/lxcenter/kloxo - https://www.exp
asploit-framework/master/modules/exploits/linux/http/kloxo_sqli.rb - https://github.com/lxcenter/kloxo - https://www.exploit-db.com/exploits/31577 - https://www.vulncheck.com/advisories/kloxo-unauth-sqli-rce
CVE ID: CVE-2014-125124 State: PUBLISHED Published: 2025-07-31T15:00:20.053Z Last Updated: 2025-11-21T01:44:46.525Z Vendors: Artica ST Products: Pandora FMS Problem Types: CWE-78, CWE-306 Description: An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023. The anyterm-module endpoint accepts unsanitized user input via the p parameter and directly injects it into a shell command, allowing arbitrary command execution as the pandora user. In certain versions (notably 4.1 and 5.0RC1), the pandora user can elevate privileges to root without a password using a chain involving
ns (notably 4.1 and 5.0RC1), the pandora user can elevate privileges to root without a password using a chain involving the artica user account. This account is typically installed without a password and is configured to run sudo without authentication. Therefore, full system compromise is possible without any credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/pandora_fms_exec.rb - https://www.exploit-db.com/exploits/31518 - https://www.vulncheck.com/advisories/pandora-fms-anyterm-unauth-command-injection
CVE ID: CVE-2014-125125 State: PUBLISHED Published: 2025-07-31T14:50:53.697Z Last Updated: 2025-07-31T15:15:56.589Z Vendors: A10 Networks Products: AX Series Loadbalancer Problem Types: CWE-22, CWE-706 Description: A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vulnerability resides in the handling of the filename parameter in the /xml/downloads endpoint, which fails to properly sanitize user input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP requests containing directory traversal sequences to read arbitrary files outside the intended directory. The files returned by the vulnerable endpoint a
versal sequences to read arbitrary files outside the intended directory. The files returned by the vulnerable endpoint are deleted from the system after retrieval. This can lead to unauthorized disclosure of sensitive information such as SSL certificates and private keys, as well as unintended file deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/a10networks_ax_directory_traversal.rb - https://www.exploit-db.com/exploits/31261 - https://www.vulncheck.com/advisories/a10-networks-ax-loadbalancer-path-traversal
CVE ID: CVE-2014-125126 State: PUBLISHED Published: 2025-07-31T15:01:17.704Z Last Updated: 2025-07-31T15:27:11.508Z Vendors: Simple E-Document Products: Simple E-Document Problem Types: CWE-434, CWE-306 Description: An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cookie header (access=3) with HTTP requests. The application’s upload mechanism fails to restrict file types and does not validate or sanitize user-supplied input, allowing attackers to upload malicious .php scripts. Authentication can be bypassed entirely by supplying a specially crafted cookie (access=3)
pload malicious .php scripts. Authentication can be bypassed entirely by supplying a specially crafted cookie (access=3), granting access to the upload functionality without valid credentials. If file uploads are enabled on the server, the attacker can upload a web shell and gain remote code execution with the privileges of the web server user, potentially leading to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/simple_e_document_upload_exec.rb - https://www.exploit-db.com/exploits/31264 - https://sourceforge.net/projects/simplee-doc/ - https://www.vuln
d_exec.rb - https://www.exploit-db.com/exploits/31264 - https://sourceforge.net/projects/simplee-doc/ - https://www.vulncheck.com/advisories/simple-edocument-abitrary-file-upload-rce
CVE ID: CVE-2014-125127 State: PUBLISHED Published: 2025-09-03T08:35:05.988Z Last Updated: 2025-09-03T13:20:06.873Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: flightphp Products: core Problem Types: CWE-770 Description: The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application needs it. An attacker can exploit this by sending requests with large payloads, causing excessive memory consumption and potentially exhausting
an exploit this by sending requests with large payloads, causing excessive memory consumption and potentially exhausting available server memory, leading to application crashes or service unavailability. The vulnerability was fixed in v1.2 by implementing lazy loading of request bodies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mikecao/flight/pull/125 - https://github.com/mikecao/flight/commit/da40e03eb4a39745107912dffe926a8fce0d38dc - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2014/CVE-2014-125127
CVE ID: CVE-2014-125128 State: PUBLISHED Published: 2025-09-08T10:09:25.057Z Last Updated: 2025-09-08T13:43:33.555Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Problem Types: CWE-79 Description: 'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function 'naughtyHref' doesn't properly validate the hyperreference (`href`) attribute in anchor tags (`<a>`), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/apostrophecms/sanitize-html/issues/1 - https://github.com/apostrophecms/sanitize-html/commit/8
ces: - https://github.com/apostrophecms/sanitize-html/issues/1 - https://github.com/apostrophecms/sanitize-html/commit/889d4ec968e175f1905b2eb9d33f1fa89217cb02 - https://github.com/apostrophecms/sanitize-html/commit/423b90e06e1e85245eccedaabeb3a82840c6cd86 - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2014/CVE-2014-125128
CVE ID: CVE-2014-1004 State: REJECTED Published: 2015-01-10T00:00:00Z Last Updated: 2024-09-17T00:56:35.812Z Description: No description available.
CVE ID: CVE-2014-1137 State: REJECTED Published: 2015-01-10T00:00:00Z Last Updated: 2024-09-17T03:03:22.756Z Description: No description available.
CVE ID: CVE-2014-1155 State: REJECTED Published: 2015-01-10T00:00:00Z Last Updated: 2024-09-16T23:25:25.357Z Description: No description available.
CVE ID: CVE-2014-1201 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T09:34:40.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530739/100/0/threaded - https://github.com/pedrib/PoC/bl
Container: References: - http://www.securityfocus.com/archive/1/530739/100/0/threaded - https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-testcase.html - https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-report.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90223 - http://osvdb.org/101903
CVE ID: CVE-2014-1202 State: PUBLISHED Published: 2014-01-25T01:00:00 Last Updated: 2024-08-06T09:34:40.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=3lCLE64rsc0 - http://packetstormsecurity.com/files/124773/SoapUI-Remote-Code-Execution.html - http://www.exploit-db.com/exploits/30908 - http://baraktawily.blogspot.com/2014/01/soapui-code-execution-vulnerability-cve.html - https://github.com/SmartBear/soapui/blob/master/REL
.blogspot.com/2014/01/soapui-code-execution-vulnerability-cve.html - https://github.com/SmartBear/soapui/blob/master/RELEASENOTES.txt
CVE ID: CVE-2014-1203 State: PUBLISHED Published: 2017-10-24T14:00:00 Last Updated: 2024-08-06T09:34:40.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jan/32
CVE ID: CVE-2014-1204 State: PUBLISHED Published: 2014-01-31T15:00:00 Last Updated: 2024-08-06T09:34:41.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102568 - http://www.exploit-db.com/exploits/31578 - http://www.tableausoftware.com/support/releases/812 - https://www.trustwave.com/spiderlabs/advisories/TWSL2014-003.txt - ht
p://www.tableausoftware.com/support/releases/812 - https://www.trustwave.com/spiderlabs/advisories/TWSL2014-003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90730 - http://secunia.com/advisories/56620 - http://www.securitytracker.com/id/1029706 - http://www.tableausoftware.com/support/releases/8.0.7 - http://www.securityfocus.com/bid/65171
CVE ID: CVE-2014-1206 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T09:34:40.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64774 - http://www.exploit-db.com/exploits/31738 - http://secunia.com/advisories/56350 - http://www.securityfocus.com/archive/1/531105/100/0/threaded - http://www.secureworks.com/advisories/SW
visories/56350 - http://www.securityfocus.com/archive/1/531105/100/0/threaded - http://www.secureworks.com/advisories/SWRX-2014-001/SWRX-2014-001.pdf - http://wiki.openwebanalytics.com/index.php?title=1.5.5