Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ponse/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00 - http://www.kb.cert.org/vuls/id/719172
CVE ID: CVE-2014-1653 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1654 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1655 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1656 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1657 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1658 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1659 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1660 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1661 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1662 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1663 State: PUBLISHED Published: 2014-02-06T16:00:00 Last Updated: 2024-08-06T09:50:10.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix XenMobile Device Manager server (formerly Zenprise Device Manager server) 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90959 - http://www.securitytracker.com/id/1029728 - http://osvdb.org/102884 - http://www.securityfocus.com/bid/65348 - http://secunia.com/advisories/56438 - http://support.citrix.com/article/CTX140044
CVE ID: CVE-2014-1664 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T09:50:11.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65123 - http://www.securityfocus.com/archive/1/530879/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/90695 - http://osvdb.org/102559
CVE ID: CVE-2014-1665 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T09:50:10.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65457 - https://packetstormsecurity.com/files/125086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91012 - https://www.exploit-db.com/exploits/31427/ - http://blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html
CVE ID: CVE-2014-1666 State: PUBLISHED Published: 2014-01-26T11:00:00 Last Updated: 2024-08-06T09:50:10.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the (1) PHYSDEVOP_prepare_msix and (2) PHYSDEVOP_release_msix operations, which allows local PV guests to cause a denial of service (host or guest malfunction) or possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102536 - http://www.securityfocus.com/bid/65125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90675 - http://l
/102536 - http://www.securityfocus.com/bid/65125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90675 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127607.html - http://support.citrix.com/article/CTX200288 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127580.html - http://www.openwall.com/lists/oss-security/2014/01/24/6 - http://www.securitytracker.com/id/1029684 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html - http://xenbits.xen.org/xsa/advisory-87.html - http://secunia.
use.org/opensuse-security-announce/2014-03/msg00010.html - http://xenbits.xen.org/xsa/advisory-87.html - http://secunia.com/advisories/56650 - http://xenbits.xen.org/xsa/xsa87-unstable-4.3.patch
CVE ID: CVE-2014-1670 State: PUBLISHED Published: 2014-01-25T16:00:00 Last Updated: 2024-08-06T09:50:10.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://blog.trustlook.com/2014/01/23/trustlook-reported-microsofts-first-ever-android-vulnerability/ - http://www.youtube.com/watch?v=_j1RKtTxZ3k - http://osvdb.org/102575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90977 - http://www.securityfocus.com/bid/65128 - https://play.google.com/store/apps
.xforce.ibmcloud.com/vulnerabilities/90977 - http://www.securityfocus.com/bid/65128 - https://play.google.com/store/apps/details?id=com.microsoft.bing
CVE ID: CVE-2014-1671 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T09:50:10.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.php; the ID parameter to (3) userui/advisory_detail.php or (4) userui/ticket.php; and the (5) ORDER[] parameter to userui/ticket_list.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56396 - https://exch
php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90592 - http://www.baesystemsdetica.com.au/Research/Advisories/Dell-KACE-K1000-SQL-Injection-%28DS-2014-001%29 - http://www.securityfocus.com/bid/65029
CVE ID: CVE-2014-1672 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T09:50:10.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90976 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98087
CVE ID: CVE-2014-1673 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T09:50:09.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98263 - http://packetstormsecurity.com/files/124967 - http://osvdb.org/102418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90746 - http://seclists.org/fulldisclosure/2014/Jan/185
CVE ID: CVE-2014-1677 State: PUBLISHED Published: 2017-04-03T15:00:00 Last Updated: 2024-08-06T09:50:09.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jul/67 - https://packetstormsecurity.com/files/125388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91578 - http://www.exploit-db.com/exploits/31894 - http://www.securityfocus.com/archive/1/538955/100/0/threaded
CVE ID: CVE-2014-1679 State: PUBLISHED Published: 2015-01-05T20:00:00 Last Updated: 2024-08-06T09:50:10.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-rev17 allows remote attackers to inject arbitrary web script or HTML via the header in an attached SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531005 - http://secunia.com/advisories/56828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91059 - https://forum.open-xchange.com/showthread.php?8259-Open-Xchange-release
ange.xforce.ibmcloud.com/vulnerabilities/91059 - https://forum.open-xchange.com/showthread.php?8259-Open-Xchange-releases-Security-Patch-2014-01-29-for-v7-2-2-v7-4-0-and-v7-4-1
CVE ID: CVE-2014-1680 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T09:50:10.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90966 - http://osvdb.org/102979 - http://www.bandisoft.com/bandizip/history - http://packetstormsecurity.com/files/125059
CVE ID: CVE-2014-1681 State: PUBLISHED Published: 2014-01-28T11:00:00 Last Updated: 2024-08-06T09:50:10.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90975 - http://osvdb.org/102633
CVE ID: CVE-2014-1682 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:50:09.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html - http://www.securityfocus.com/bid/65402 - https://support.zabbix.com/browse/ZBX-7703 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html
CVE ID: CVE-2014-1683 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T09:50:09.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name, (2) email, (3) subject, or (4) message parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65129 - http://seclists.org/fulldisclosure/2014/Jan/159 - http://packetstormsecurity.com/files/124948/SkyBlueCanvas-CMS-1
5129 - http://seclists.org/fulldisclosure/2014/Jan/159 - http://packetstormsecurity.com/files/124948/SkyBlueCanvas-CMS-1.1-r248-03-Command-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90670 - http://www.exploit-db.com/exploits/31183 - http://www.exploit-db.com/exploits/31432 - http://secunia.com/advisories/56646
CVE ID: CVE-2014-1684 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T09:50:10.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/gitweb.cgi/vlc.git/?p=vlc.git%3Ba=commitdiff%3Bh=98787d0843612271e99d62bee0dfd8197f0cf404 - https://trac.videolan.org/vlc/ticket/10482 - http://www.elsherei.c
itdiff%3Bh=98787d0843612271e99d62bee0dfd8197f0cf404 - https://trac.videolan.org/vlc/ticket/10482 - http://www.elsherei.com/?p=269 - https://security.gentoo.org/glsa/201603-08
CVE ID: CVE-2014-1685 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:50:10.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html - https://support.zabbix.com/browse/ZBX-7693 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html
CVE ID: CVE-2014-1686 State: PUBLISHED Published: 2018-04-13T21:00:00 Last Updated: 2024-08-06T09:50:09.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91847 - https://packetstormsecurity.com/files/125682 - http://www.securityfocus.com/bid/66141 - http://seclists.org/fulldisclosure/2014/Mar/102
CVE ID: CVE-2014-1690 State: PUBLISHED Published: 2014-02-28T02:00:00 Last Updated: 2024-08-06T09:50:10.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2137-1 - http://www.ubuntu.com/usn/USN-2140-1 - http://www.ubuntu.com/usn/USN-2158-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - https://bug
40-1 - http://www.ubuntu.com/usn/USN-2158-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - https://bugzilla.redhat.com/show_bug.cgi?id=1058748 - http://www.openwall.com/lists/oss-security/2014/01/28/3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886 - https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886
CVE ID: CVE-2014-1691 State: PUBLISHED Published: 2014-04-01T15:00:00 Last Updated: 2024-08-06T09:50:10.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/horde/horde/blob/82c400788537cfc0106b68447789ff53793ac086/bundles/groupware/docs/CHANGES#L215 - http://seclists.org/oss-sec/2014/q1/156 - http://seclists.org/oss-sec/2014/q1/153 - http://seclists.org/oss-sec/20
215 - http://seclists.org/oss-sec/2014/q1/156 - http://seclists.org/oss-sec/2014/q1/153 - http://seclists.org/oss-sec/2014/q1/169 - http://www.debian.org/security/2014/dsa-2853 - https://github.com/horde/horde/commit/da6afc7e9f4e290f782eca9dbca794f772caccb3
CVE ID: CVE-2014-1692 State: PUBLISHED Published: 2014-01-29T15:00:00 Last Updated: 2024-08-06T09:50:11.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://marc.info/?l=bugtraq&m=141
?l=bugtraq&m=144050155601375&w=2 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9%3Br2=1.10%3Bf=h - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637 - http://openwall.com/lists/oss-security/2014/01/29/2 - http://osvdb.org/102611 - http://secunia.com/advisories/60184 - http://www.securityfocus.com/bid/65230 - http://openwall.com/lists/oss-security/2014/01/29/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90819
CVE ID: CVE-2014-1693 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T09:50:10.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recv_bin, (12) recv_chunk_start, (13) send, (14) send_bin, (15) send_chunk_start, (16) append_chunk_start, (17) append, or (18) append_bin command. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3571-1/ - ht
append_bin command. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3571-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1059331 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:174 - http://seclists.org/oss-sec/2014/q1/163 - http://advisories.mageia.org/MGASA-2014-0553.html
CVE ID: CVE-2014-1694 State: PUBLISHED Published: 2014-02-04T16:00:00 Last Updated: 2024-08-06T09:50:10.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow remote attackers to hijack the authentication of arbitrary users for requests that (5) create tickets or (6) send follow-ups to existing tickets. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.o
(6) send follow-ups to existing tickets. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102632 - https://www.otrs.com/security-advisory-2014-01-csrf-issue-customer-web-interface - https://github.com/OTRS/otrs/commit/6f324aaf8647729d509eebf063a0181f9f9196f7 - http://www.openwall.com/lists/oss-security/2014/01/29/15 - https://www.otrs.com/release-notes-otrs-help-desk-3-3-4 - https://github.com/OTRS/otrs/commit/92f417277f43832f1a0462f2485fe1fd3fd52312 - http://secunia.com/advisories/56655 - http://www.openwall.com/lists/oss-security/2014/01/29/7 - https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77 - http://secunia.com/advisories/56644
9/7 - https://github.com/OTRS/otrs/commit/ca2c3390fd60d9a3f810ed2c22cbc2c193457b77 - http://secunia.com/advisories/56644 - http://www.debian.org/security/2014/dsa-2867 - http://bugs.otrs.org/show_bug.cgi?id=10099
CVE ID: CVE-2014-1695 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T09:50:10.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/36842/ - http://www.securityfocus.com/bid/65844 - http://secunia.com/advisories/57018 - https://www.otrs.com/security-advisory-2014-03-xss-issue - http://packetstormsecurity.com/files/131654/OTRS-3.x
/57018 - https://www.otrs.com/security-advisory-2014-03-xss-issue - http://packetstormsecurity.com/files/131654/OTRS-3.x-Cross-Site-Scripting.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00030.html - http://adamziaja.com/poc/201401-xss-otrs.html - http://www.osvdb.org/103781
CVE ID: CVE-2014-1696 State: PUBLISHED Published: 2014-02-07T02:00:00 Last Updated: 2024-08-06T09:50:11.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90934 - http://osvdb.org/102809 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01
CVE ID: CVE-2014-1697 State: PUBLISHED Published: 2014-02-07T02:00:00 Last Updated: 2024-08-06T09:50:11.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90933 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf - http://secunia.com/advisories/56651 - http://www.securityfocus.com/bid/65351 - http://ics-cert.us-cert.gov/advi
87.pdf - http://secunia.com/advisories/56651 - http://www.securityfocus.com/bid/65351 - http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01
CVE ID: CVE-2014-1698 State: PUBLISHED Published: 2014-02-07T02:00:00 Last Updated: 2024-08-06T09:50:10.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90935 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf - http://secunia.com/advisories/56651 - http://www.securityfocus.com/bid/65349 - http://ics-cert.us-cert.gov/advisories/ICSA-14-035-0