Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - https://access.redhat.com/errata/RHSA-2014:0413 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://www.debian.org/security/2014/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/58415 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://www.securityfo
2.html - http://secunia.com/advisories/58415 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://www.securityfocus.com/bid/66883 - http://security.gentoo.org/glsa/glsa-201502-12.xml
CVE ID: CVE-2014-0459 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:13:10.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - https://
http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - https://access.redhat.com/errata/RHSA-2014:0413 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www.debian.org/security/2014/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/58415 - http://www.securityfocus.com/bid/66910 - http://security.gentoo.org/glsa/glsa-201502-12.xml
CVE ID: CVE-2014-0460 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:13:10.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59642 - http://secunia.com/advisories/59022 - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/
dhat.com/errata/RHSA-2014-0675.html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://secunia.com/advisories/59705 - http://www.ubuntu.com/usn/USN-2191-1 - http://www-01.ibm.com/support/docview.wss?uid=swg21676672 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - http://www-01.ibm.com/support/docview.wss?uid=swg21676315 - https://access.redhat.com/errata/RHSA-2014:0413 - http://secunia.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=14085297470925
.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://secunia.com/advisories/61264 - http://secunia.com/advisories/59706 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677294 - http://secunia.com/advisories/59436 - http://secunia.com/advisories/59071 - http://www.debian.org/security/2014/dsa-2912 - http://www.securityfocus.com/bid/66916 - http://secunia.com/advisories/60117 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681256 - http://secunia.com/advisories/58415 - http://ma
72952.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681256 - http://secunia.com/advisories/58415 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://secunia.com/advisories/59516 - http://www-01.ibm.com/support/docview.wss?uid=swg21674539 - http://www-01.ibm.com/support/docview.wss?uid=swg21686717 - http://www-01.ibm.com/support/docview.wss?uid=swg21683484 - http://www-01.ibm.com/support/docview.wss?uid=swg21673836 - http://www.ibm.com/support/docview.wss?uid=swg21677387 - http://secunia.com/advisories/59023 - http://www-01.ibm.com/support/docview.wss?uid=swg21676746 - http://secunia.com/advisories/59307 - http://www-01.ibm.com/support/docview.wss?uid=swg21679713 - http:/
d=swg21676746 - http://secunia.com/advisories/59307 - http://www-01.ibm.com/support/docview.wss?uid=swg21679713 - http://www.ibm.com/support/docview.wss?uid=swg21675343 - http://secunia.com/advisories/59082 - http://secunia.com/advisories/59250 - http://security.gentoo.org/glsa/glsa-201502-12.xml - http://secunia.com/advisories/59255 - http://secunia.com/advisories/59704 - http://www-01.ibm.com/support/docview.wss?uid=swg21681018 - http://secunia.com/advisories/60111 - http://secunia.com/advisories/60003 - http://www.ibm.com/support/docview.wss?uid=swg21675588
CVE ID: CVE-2014-0461 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:13:10.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - https://www.ibm.com/support/docview.wss?uid=swg21675973 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http:
g21675973 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - https://access.redhat.com/errata/RHSA-2014:0413 - http://secunia.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://secunia.com/advisories/58974 - http://www.debian.org/security/2014/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/
14/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/58415 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21676746 - http://security.gentoo.org/glsa/glsa-201502-12.xml - http://www.securityfocus.com/bid/66902
CVE ID: CVE-2014-0462 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T09:13:10.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2191-1 - http://www.debian.org/security/2014/dsa-2912 - http://secunia.com/advisories/58415
CVE ID: CVE-2014-0463 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:13:10.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66908 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://security.gentoo.org/glsa/glsa-201502-12.xml
CVE ID: CVE-2014-0464 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:13:10.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66913 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://security.gentoo.org/glsa/glsa-201502-12.xml
CVE ID: CVE-2014-0465 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T09:20:18.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
CVE ID: CVE-2014-0466 State: PUBLISHED Published: 2014-04-03T15:00:00 Last Updated: 2024-08-06T09:20:17.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742902 - http://www.securityfocus.com/bid/66660 - https://security.gentoo.org/glsa/201701-67 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00021.html - http://www.debian.org/security/2014/dsa-2892
CVE ID: CVE-2014-0467 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T09:20:17.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2874 - http://www.ubuntu.com/usn/USN-2147-1 - http://rhn.redhat.com/errata/RHSA-2014-0304.html - http://www.securityfocus.com/bid/66165 - http://www.mutt.org/doc/devel/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00001.htm
65 - http://www.mutt.org/doc/devel/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00001.html - http://www.securitytracker.com/id/1029919 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00083.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00085.html
CVE ID: CVE-2014-0468 State: PUBLISHED Published: 2025-06-26T20:39:24.065Z Last Updated: 2025-06-27T14:39:39.531Z Vendors: fusionforge Products: fusionforge Description: Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html - https://web.archive.org/web/20151019035734/http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html
CVE ID: CVE-2014-0469 State: PUBLISHED Published: 2014-05-05T16:00:00 Last Updated: 2024-08-06T09:20:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67090 - http://www.debian.org/security/2014/dsa-2921 - http://www.openwall.com/lists/oss-security/2014/04/28/3 - http://packages.qa.debian.org/x/xbuffy/news/20140427T181904Z.html
CVE ID: CVE-2014-0470 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T09:20:18.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2917 - http://www.openwall.com/lists/oss-security/2014/04/28/6
CVE ID: CVE-2014-0471 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T09:20:17.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2915 - http://www.securityfocus.com/bid/67106 - http://www.ubuntu.com/usn/USN-2183-1
CVE ID: CVE-2014-0472 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T09:20:17.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2169-1 - https://www.djangoproject.com/weblog/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014-0457.html - http://secunia.com/
.djangoproject.com/weblog/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014-0457.html - http://secunia.com/advisories/61281 - http://www.debian.org/security/2014/dsa-2934 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://rhn.redhat.com/errata/RHSA-2014-0456.html
CVE ID: CVE-2014-0473 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T09:20:18.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2169-1 - https://www.djangoproject.com/weblog/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014-0457.html - http://secunia.com/advisories/61281 - http:/
/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014-0457.html - http://secunia.com/advisories/61281 - http://www.debian.org/security/2014/dsa-2934 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://rhn.redhat.com/errata/RHSA-2014-0456.html
CVE ID: CVE-2014-0474 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T09:20:18.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2169-1 - https://www.djangoproject.com/weblog/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014
com/usn/USN-2169-1 - https://www.djangoproject.com/weblog/2014/apr/21/security/ - http://rhn.redhat.com/errata/RHSA-2014-0457.html - http://secunia.com/advisories/61281 - http://www.debian.org/security/2014/dsa-2934 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://rhn.redhat.com/errata/RHSA-2014-0456.html
CVE ID: CVE-2014-0475 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T09:20:17.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2976 - http://www.securityfocus.com/bid/68505 - http://www.securitytracker.com/id/1030569 - https://rhn.redhat.com/errata/RHSA-2014-1110.
.securityfocus.com/bid/68505 - http://www.securitytracker.com/id/1030569 - https://rhn.redhat.com/errata/RHSA-2014-1110.html - http://www.openwall.com/lists/oss-security/2014/07/14/6 - https://security.gentoo.org/glsa/201602-02 - https://sourceware.org/bugzilla/show_bug.cgi?id=17137 - http://www.openwall.com/lists/oss-security/2014/07/10/7 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:152 - http://linux.oracle.com/errata/ELSA-2015-0092.html
CVE ID: CVE-2014-0476 State: PUBLISHED Published: 2014-10-25T22:00:00 Last Updated: 2024-08-06T09:20:17.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option. Additional Analyst Notes: - CVE Program Container: References: - http://www.chkrootkit.org/ - http://www.openwall.com/lists/oss-security/2014/06/04/9 - https://security.gentoo.org/glsa/201709-05 - http://www.ubuntu.com/usn/USN-2230-1 - http://osvdb.org/show/osvdb/107710 - http://www
urity.gentoo.org/glsa/201709-05 - http://www.ubuntu.com/usn/USN-2230-1 - http://osvdb.org/show/osvdb/107710 - http://www.debian.org/security/2014/dsa-2945 - http://packetstormsecurity.com/files/134484/Chkrootkit-Local-Privilege-Escalation.html - https://www.exploit-db.com/exploits/38775/
CVE ID: CVE-2014-0477 State: PUBLISHED Published: 2014-07-03T17:00:00 Last Updated: 2024-08-06T09:20:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/release/RJBS/Email-Address-1.905 - http://secunia.com/advisories/59333 - http://seclists.org/oss-sec/2014/q2/563 - http://secunia.com/advisories/61981 - https://github.com/rjbs/Email-Address/commit/83f83061171157
/oss-sec/2014/q2/563 - http://secunia.com/advisories/61981 - https://github.com/rjbs/Email-Address/commit/83f8306117115729ac9346523762c0c396251eb5 - http://secunia.com/advisories/59212 - https://github.com/rjbs/Email-Address/blob/master/Changes - https://bugzilla.redhat.com/show_bug.cgi?id=1110723 - http://www.debian.org/security/2014/dsa-2969
CVE ID: CVE-2014-0478 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T09:20:18.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58843 - http://secunia.com/advisories/59358 - http://www.debian.org/security/2014/dsa-2958 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=749795 - http://www.ubuntu.com/usn/USN-2246-1
CVE ID: CVE-2014-0479 State: PUBLISHED Published: 2014-08-06T19:00:00 Last Updated: 2024-08-06T09:20:18.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59896 - http://www.debian.org/security/2014/dsa-2997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95149 - http://www.securityfocus.com/bid/69055 - https://bugs.launchpad.net/ubuntu/+source/reportbug/+bug/1353046 - http://www.osvdb.org/109858
CVE ID: CVE-2014-0480 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T09:20:18.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20/security/ - http://www.securityfocus.com/bid/69425 - http://secunia.com/advisories/61276 - http://sec
weblog/2014/aug/20/security/ - http://www.securityfocus.com/bid/69425 - http://secunia.com/advisories/61276 - http://secunia.com/advisories/61281 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.debian.org/security/2014/dsa-3010 - http://secunia.com/advisories/59782
CVE ID: CVE-2014-0481 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T09:20:18.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20/security/ - http://secunia.com/ad
CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20/security/ - http://secunia.com/advisories/61276 - http://secunia.com/advisories/61281 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.debian.org/security/2014/dsa-3010 - http://secunia.com/advisories/59782
CVE ID: CVE-2014-0482 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T09:20:18.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20/security/ - http://secunia.com/advisories/61276 - http://secunia.com/advisories/61281 - h
project.com/weblog/2014/aug/20/security/ - http://secunia.com/advisories/61276 - http://secunia.com/advisories/61281 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.debian.org/security/2014/dsa-3010 - http://secunia.com/advisories/59782