Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ps://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2014/dsa-2974 - http://secunia.com/advisories/59794 - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001553.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/
.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://bugs.php.net/bug.php?id=67411 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.securityfocus.com/bid/68241 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-3480 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:06.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/68238 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - htt
us.com/bid/68238 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2014/dsa-2974 - http://secunia.com/advisories/59794 - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001553.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - https://bugs.php.net/bug.php?id=67412 - http://www.oracle.com/technetwork/topics/
- http://support.apple.com/kb/HT6443 - https://bugs.php.net/bug.php?id=67412 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-3481 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T10:43:06.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0798.html - http://www.securitytracker.com/id/1032017 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://rhn.redhat.com/errata/RHSA-2015-0675.
tracker.com/id/1032017 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2014-0797.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94939 - http://rhn.redhat.com/errata/RHSA-2014-0799.html - https://bugzilla.redhat.com/show_bug.cgi?id=1105242
CVE ID: CVE-2014-3482 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T10:43:06.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68343 - http://secunia.com/advisories/59973 - http://openwall.com/lists/oss-security/2014/07/02/5 - https://groups.google.com/forum/message/raw
com/advisories/59973 - http://openwall.com/lists/oss-security/2014/07/02/5 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J - http://secunia.com/advisories/60214 - http://secunia.com/advisories/60763 - http://rhn.redhat.com/errata/RHSA-2014-0876.html - http://www.debian.org/security/2014/dsa-2982
CVE ID: CVE-2014-3483 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T10:43:06.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0877.html - http://secunia.com/advisories/59971 - http://openwall.com/lists/oss-security/2014/07/02/5 - https://groups.google.c
ml - http://secunia.com/advisories/59971 - http://openwall.com/lists/oss-security/2014/07/02/5 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J - http://secunia.com/advisories/60214 - http://www.debian.org/security/2014/dsa-2982 - http://www.securityfocus.com/bid/68341
CVE ID: CVE-2014-3484 State: PUBLISHED Published: 2020-02-20T03:37:59 Last Updated: 2024-08-06T10:43:06.347Z Vendors: n/a Products: musl libc Problem Types: Buffer Overflow Description: Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/495 - http://git.musl-libc.org/cgit/mu
Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/495 - http://git.musl-libc.org/cgit/musl/commit/?id=b3d9e0b94ea73c68ef4169ec82c898ce59a4e30a
CVE ID: CVE-2014-3485 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T10:43:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030501 - http://rhn.redhat.com/errata/RHSA-2014-0814.html
CVE ID: CVE-2014-3486 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T10:43:06.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68300 - https://bugzilla.redhat.com/show_bug.cgi?id=1107528 - http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE ID: CVE-2014-3487 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:06.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=
ta/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2014/dsa-2974 - http://secunia.com/advisories/59794 - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001553.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.h
/www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - https://bugs.php.net/bug.php?id=67413 - http://secunia.com/advisories/59831 - http://www.securityfocus.com/bid/68120 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-3488 State: PUBLISHED Published: 2014-07-31T14:00:00 Last Updated: 2024-08-06T10:43:06.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message. Additional Analyst Notes: - CVE Program Container: References: - http://netty.io/news/2014/06/11/3-9-2-Final.html - https://github.com/netty/netty/issues/2562 - http://secunia.com/advisories/59196 - https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994 - https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
CVE ID: CVE-2014-3489 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T10:43:06.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68299 - http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE ID: CVE-2014-3490 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T10:43:06.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818. Additional Analyst Notes: - CVE Program Container: Ref
nerability exists because of an incomplete fix for CVE-2012-0818. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ronsigal/Resteasy/commit/9b7d0f574cafdcf3bea5428f3145ab4908fc6d83 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://secunia.com/advisories/60019 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - https://github.com/resteasy/Resteasy/pull/521 - https://github.com/resteasy/Resteasy/pull/533 - http://rhn.redhat.com/errata/RHSA-2014-1039.html - http://www.securityfocus.com/bid/69058 - http://rhn.redhat.com/errata/RHSA-2015-0125.html - http://rhn.redhat.com/errata/RHSA-2014-1040.html - h
.com/bid/69058 - http://rhn.redhat.com/errata/RHSA-2015-0125.html - http://rhn.redhat.com/errata/RHSA-2014-1040.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://rhn.redhat.com/errata/RHSA-2014-1011.html - http://rhn.redhat.com/errata/RHSA-2014-1298.html
CVE ID: CVE-2014-3491 State: PUBLISHED Published: 2014-07-01T16:00:00 Last Updated: 2024-08-06T10:43:06.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/5881
CVE ID: CVE-2014-3492 State: PUBLISHED Published: 2014-07-01T16:00:00 Last Updated: 2024-08-06T10:43:06.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/6149
CVE ID: CVE-2014-3493 State: PUBLISHED Published: 2014-06-23T14:00:00 Last Updated: 2024-08-06T10:43:06.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1 - http://www.m
am Container: References: - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_samba1 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:136 - http://rhn.redhat.com/errata/RHSA-2014-0866.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://secunia.com/advisories/61218 - http://secunia.com/advisories/59834 - http://linux.oracle.com/errata/ELSA-2014-0866.html - http://secunia.com/advisories/59848 - http://www.securityfocus.com/archive/1/532757/100/0/threaded - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://www.securityfocus.com/bid/68150 - http://secunia.com/advisories/59407 - http://lists.fedoraproject.or
02-15.xml - http://www.securityfocus.com/bid/68150 - http://secunia.com/advisories/59407 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://secunia.com/advisories/59433 - http://secunia.com/advisories/59919 - https://bugzilla.redhat.com/show_bug.cgi?id=1108748 - http://advisories.mageia.org/MGASA-2014-0279.html - http://secunia.com/advisories/59378 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 - http://secunia.com/advisories/59579 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - http://www.samba.org/samba/security/CVE-2014-3493 - http://www.securitytracker.com/id/1030455
CVE ID: CVE-2014-3494 State: PUBLISHED Published: 2014-07-01T16:00:00 Last Updated: 2024-08-06T10:43:06.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html - http://www.securityfocus.com/bid/68113 - http://quickgit.kde.org/?p=kdelibs.git&a=commitdiff&h=bbae87dc1be3ae063796a582774bd5642cacdd5d&hp=1ccdb43ed3b32a7798eec6d3
tp://quickgit.kde.org/?p=kdelibs.git&a=commitdiff&h=bbae87dc1be3ae063796a582774bd5642cacdd5d&hp=1ccdb43ed3b32a7798eec6d39bb3c83a6e40228f - http://www.kde.org/info/security/advisory-20140618-1.txt
CVE ID: CVE-2014-3495 State: PUBLISHED Published: 2019-12-13T13:20:46 Last Updated: 2024-08-06T10:43:06.236Z Vendors: duplicity Products: duplicity Problem Types: verification of SSL certificates Description: duplicity 0.6.24 has improper verification of SSL certificates Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-3495 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3495 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-3495 - https://access.redhat.com/security/cve/cve-2014-3495
CVE ID: CVE-2014-3496 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T10:43:06.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a (1) .tar.gz, (2) .zip, (3) .tgz, or (4) .tar file extension in a cartridge manifest file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59298 - https://github.com/openshift/origin-server/pull/5521 - http://rhn.redhat.com/errata/RHSA-2014-0764.html - http://rhn.redhat.com/errata/RHSA-2014-0762.h
igin-server/pull/5521 - http://rhn.redhat.com/errata/RHSA-2014-0764.html - http://rhn.redhat.com/errata/RHSA-2014-0762.html - http://rhn.redhat.com/errata/RHSA-2014-0763.html - https://bugzilla.redhat.com/show_bug.cgi?id=1110470
CVE ID: CVE-2014-3497 State: PUBLISHED Published: 2014-07-03T17:00:00 Last Updated: 2024-08-06T10:43:06.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2256-1 - http://secunia.com/advisories/59532 - https://review.openstack.org/#/c/101031/ - http://www.openwall.com/lists/oss-security/2014/06/19/10 - http://www.securityfocus.com/bid/68116 - http://lists.openstack.org/pipermail/openstack-announce/2014-June/000
6/19/10 - http://www.securityfocus.com/bid/68116 - http://lists.openstack.org/pipermail/openstack-announce/2014-June/000243.html - https://review.openstack.org/#/c/101032/
CVE ID: CVE-2014-3498 State: PUBLISHED Published: 2017-06-08T18:00:00 Last Updated: 2024-08-06T10:43:06.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5 - https://bugzilla.redhat.com/show_bug.cgi?id=1335551
CVE ID: CVE-2014-3499 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T10:43:06.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1111687 - http://rhn.redhat.com/errata/RHSA-2014-0820.html
CVE ID: CVE-2014-3500 State: PUBLISHED Published: 2014-11-15T21:00:00 Last Updated: 2024-08-06T10:43:06.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL. Additional Analyst Notes: - CVE Program Container: References: - http://cordova.apache.org/announcements/2014/08/04/android-351.html - http://www.securityfocus.com/bid/69038
CVE ID: CVE-2014-3501 State: PUBLISHED Published: 2014-11-15T21:00:00 Last Updated: 2024-08-06T10:43:06.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69041 - http://cordova.apache.org/announcements/2014/08/04/android-351.html
CVE ID: CVE-2014-3502 State: PUBLISHED Published: 2014-11-15T21:00:00 Last Updated: 2024-08-06T10:43:06.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI scheme for an Android intent. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69046 - http://cordova.apache.org/announcements/2014/08/04/android-351.html - http://cordova.apache.org/announcements/2014/08/06/android-351-update.html
CVE ID: CVE-2014-3503 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T10:43:06.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532669/100/0/threaded - http://syncope.apache.org/security.html - http://packetstormsecurity.com/files/127375/Apache-Syncope-Insecure-Password-Generation.html - http://www.securityfocus.com/bid/68431
CVE ID: CVE-2014-3504 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T10:43:06.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2315-1 - http://www.securityfocus.c
onal Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2315-1 - http://www.securityfocus.com/bid/69238 - http://secunia.com/advisories/60721 - https://subversion.apache.org/security/CVE-2014-3522-advisory.txt - https://groups.google.com/forum/#%21topic/serf-dev/NvgPoK6sFsc - http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html - https://security.gentoo.org/glsa/201610-05 - http://secunia.com/advisories/59584 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-3505 State: PUBLISHED Published: 2014-08-13T23:00:00 Last Updated: 2024-08-06T10:43:06.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1297.html - http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html - http://linux.oracle.com/errata/ELSA-2014-1052.html - http://secunia.com/ad