Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
(8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32208 - https://security.gentoo.org/glsa/201612-27 - http://secunia.com/advisories/57384 - ht
ww.exploit-db.com/exploits/32208 - https://security.gentoo.org/glsa/201612-27 - http://secunia.com/advisories/57384 - http://www.securityfocus.com/archive/1/531418/100/0/threaded - http://www.debian.org/security/2014/dsa-2904 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - https://www.virtualbox.org/changeset/50441/vbox - http://seclists.org/fulldisclosure/2014/Mar/95 - http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities
CVE ID: CVE-2014-0984 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:34:40.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1986895 - http://www.cores
alyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1986895 - http://www.coresecurity.com/advisories/sap-router-password-timing-attack - http://www.securityfocus.com/archive/1/531854/100/0/threaded - http://www.exploit-db.com/exploits/32919 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-0985 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01 - http://www.securityfocus.com/bid/69529
CVE ID: CVE-2014-0986 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01 - http://www.securityfocus.com/bid/69531
CVE ID: CVE-2014-0987 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:41.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01 - http://www.securityfocus.com/bid/69532
CVE ID: CVE-2014-0988 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69533 - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01
CVE ID: CVE-2014-0989 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69534 - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01
CVE ID: CVE-2014-0990 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01 - http://www.securityfocus.com/bid/69535
CVE ID: CVE-2014-0991 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:39.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01 - http://www.securityfocus.com/bid/69536
CVE ID: CVE-2014-0992 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T09:34:40.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69538 - https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01
CVE ID: CVE-2014-0993 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2024-08-06T09:34:40.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/646748 - http://www.coresecurity.com/advisories/delphi-and-c-builder-vcl-library-buffer-overflow - http://support.embarcadero.com/article/44015
CVE ID: CVE-2014-0994 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T09:34:40.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the BITMAPINFOHEADER.biClrUsed field in a BMP file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0993. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/delphi-and-c-
3. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/delphi-and-c-builder-vcl-library-heap-buffer-overflow - http://seclists.org/fulldisclosure/2014/Sep/57 - http://support.embarcadero.com/article/44015
CVE ID: CVE-2014-0995 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T09:34:40.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/SAP_Gsupport/status/522750365780160513 - http://secunia.com/advisories/60950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97610 - http://packetstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denia
com/vulnerabilities/97610 - http://packetstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denial-Of-Service.html - http://www.coresecurity.com/advisories/sap-netweaver-enqueue-server-trace-pattern-denial-service-vulnerability - http://www.securityfocus.com/archive/1/533719/100/0/threaded - http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/ - http://seclists.org/fulldisclosure/2014/Oct/76
CVE ID: CVE-2014-0997 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-06T09:34:40.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and potentially other unspecified Android releases before 5.0.1 and 5.0.2 does not properly handle exceptions, which allows remote attackers to cause a denial of service (reboot) via a crafted 802.11 probe response frame. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130107/Android-WiF
Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2015/Jan/104 - https://www.coresecurity.com/advisories/android-wifi-direct-denial-service - https://www.exploit-db.com/exploits/35913/ - http://www.securityfocus.com/archive/1/534544/100/0/threaded - http://www.securityfocus.com/bid/72311
CVE ID: CVE-2014-0998 State: PUBLISHED Published: 2015-02-02T16:00:00 Last Updated: 2024-08-06T09:34:41.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534563/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/107 - https://www.freebsd.org/sec
ocus.com/archive/1/534563/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/107 - https://www.freebsd.org/security/advisories/FreeBSD-EN-15:01.vt.asc - http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities
CVE ID: CVE-2014-0999 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T09:34:41.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/May/95 - http://packetstormsecurity.com/files/132022/Sendio-ESP-Information-Disclosure.html - http://www.securityfocus.com/archive/1/535592/100/0/threaded - http://www.sendio.com/software-release-history/ - ht
ml - http://www.securityfocus.com/archive/1/535592/100/0/threaded - http://www.sendio.com/software-release-history/ - http://www.exploit-db.com/exploits/37114
CVE ID: CVE-2014-1000000 State: REJECTED Published: 2019-02-19T15:00:00 Last Updated: 2019-02-19T14:57:01 Description: No description available.
CVE ID: CVE-2014-100000 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.
CVE ID: CVE-2014-100001 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:54.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57990 - https://wordpress.org/plugins/liveoptim/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilitie
isories/57990 - https://wordpress.org/plugins/liveoptim/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92586
CVE ID: CVE-2014-100002 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:56.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90806 - http://www.exploit-db.com/exploits/31262 - https://supportcenter.wiki.zoho.com/ReadMe-V2.html - http://osvdb.org/show/osvdb/102656
CVE ID: CVE-2014-100003 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T16:38:28.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34968 - http://packetstormsecurity.com/files/128668/YourMembers-Blind-SQL-Injection.html
CVE ID: CVE-2014-100004 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:54.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows remote attackers to inject arbitrary web script or HTML via the xmlcontrol parameter to the default URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65254 - http://osvdb.org/102660 - http://secunia.com/advisories/56705 - http://sitecorekh.blogspot.dk/2014/01/sitecore-releases-70-update-4-rev-140120.html -
://secunia.com/advisories/56705 - http://sitecorekh.blogspot.dk/2014/01/sitecore-releases-70-update-4-rev-140120.html - http://www.securityfocus.com/archive/1/530901/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/90833
CVE ID: CVE-2014-100005 State: PUBLISHED Published: 2015-01-13T11:00:00.000Z Last Updated: 2025-10-22T00:05:34.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php. Additional Analyst Notes: - CISA ADP Vulnrichme
pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://secunia.com/advisories/57304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91794 - http://resources.infosecinstitute.com/csrf-unauthorized-remote-admin-access/ - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10018
CVE ID: CVE-2014-100006 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:54.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) map, (2) streetview, or (3) reset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91133 - http://www.rusty-ice.de/advisory/advisory_2014001.txt
CVE ID: CVE-2014-100007 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:55.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57753 - https://wordpress.org/plugins/hk-exif-tags/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92555
CVE ID: CVE-2014-100008 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:54.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125959 - http://websecurity.com.ua/7087/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/92207
CVE ID: CVE-2014-100009 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T21:56:35.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation path via a request to (1) functions.php, (2) myCalendar.php, (3) refreshDate.php, (4) show_image.php, (5) widget.php, (6) phpthumb/GdThumb.inc.php, or (7) phpthumb/thumb_plugins/gd_reflection.inc.php in includes/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125959 - http://websecurity.com.ua/7087/
CVE ID: CVE-2014-100010 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:10:56.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Mar/73 - https://www.httpcs.com/advisory/httpcs127 - http://secunia.com/advisories/57306 - http://www.securityfocus.com/archive/1/531373/100/0/threaded - http://www.securityfocus.com/bid/66058
CVE ID: CVE-2014-100011 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:55.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32814 - http://www.securityfocus.com/archive/1/531798/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/92520 - http://www.securityfocus.com/bid/66771
CVE ID: CVE-2014-100012 State: PUBLISHED Published: 2015-01-13T15:00:00Z Last Updated: 2024-09-17T01:20:50.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/31898
CVE ID: CVE-2014-100013 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:56.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject or (2) Message field. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98734
CVE ID: CVE-2014-100014 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:55.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a (1) 2001, (2) 2002, or (3) 2003 opcode to port 3000. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/31763 - http://secunia.com/advisories/57037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91264
CVE ID: CVE-2014-100015 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:56.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32163 - http://packetstormsecurity.com/files/125361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91518 - http://www.exploit-db.com/exploits/31831
CVE ID: CVE-2014-100016 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:56.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56690 - http://osvdb.org/102717 - http://packetstormsecurity.com/files/124986/WordPress-Photocrati-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90812 - http://www.securityfocus.com/bid/65238
CVE ID: CVE-2014-100017 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:10:55.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitrary web script or HTML via the message field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128179/PhpOnlineChat-3.0-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/34555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95801 - http://www.securityfocus.com/bid/69669
CVE ID: CVE-2014-100018 State: PUBLISHED Published: 2015-01-13T15:00:00Z Last Updated: 2024-09-16T22:25:58.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/xss-in-unconfirmed-1-2-3/ - http://www.securityfocus.com/bid/66781 - http://secunia.com/advisories/57838 - https://wordpress.org/plugins/unconfirmed/changelog/