Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9601 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T13:47:41.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html - https://www.djangoproject.com/weblog/2015/jan/02/pillow-security-release/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148442.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.ht
package-announce/2015-January/148442.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://pillow.readthedocs.org/releasenotes/2.7.0.html - http://www.securityfocus.com/bid/77758 - https://github.com/python-pillow/Pillow/pull/1060
CVE ID: CVE-2014-9602 State: PUBLISHED Published: 2015-01-16T20:00:00 Last Updated: 2024-08-06T13:47:41.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted X-Face image data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=93a5a16f136d095d23610f57bdad10ba88120fba - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-9603 State: PUBLISHED Published: 2015-01-16T20:00:00 Last Updated: 2024-08-06T13:47:41.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the relationship between a certain length value and the frame width, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Sierra VMD video data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3030fb7e0d41836f8add6399e9a7c7b740b48bfd - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-9604 State: PUBLISHED Published: 2015-01-16T20:00:00 Last Updated: 2024-08-06T13:47:41.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the (1) restore_median and (2) restore_median_il functions. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3881606240953b9275a247a1c98a567f3c44890f - http://www.ubuntu.com/usn/USN-2534-1 - https:
rg/?p=ffmpeg.git%3Ba=commit%3Bh=3881606240953b9275a247a1c98a567f3c44890f - http://www.ubuntu.com/usn/USN-2534-1 - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-9605 State: PUBLISHED Published: 2015-09-04T15:00:00 Last Updated: 2024-08-06T13:47:41.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and create a system backup tarball, restart the server, or stop the filters on the server via a ' (single quote) character in the login and password parameters to webupgrade/webupgrade.php. NOTE: this was originally reported as an SQL injection vulnerability, but this may be inaccurate. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.netsweeper.com/docs/4.1/releas
curate. Additional Analyst Notes: - CVE Program Container: References: - https://helpdesk.netsweeper.com/docs/4.1/release_notes/netsweeper_releasenotes/4_1_release_notes/4_1_2_release_notes/4.1.2_release_notes.htm - https://helpdesk.netsweeper.com/docs/3.1/release_notes/netsweeper_releasenotes/3_1_10_0_release_notes/3.1.10_release_notes.htm - https://www.exploit-db.com/exploits/37928/ - https://helpdesk.netsweeper.com/docs/4.0/release_notes/netsweeper_releasenotes/4_0_9_release_notes/4.0.9_release_notes.htm
CVE ID: CVE-2014-9606 State: PUBLISHED Published: 2020-02-19T19:37:41 Last Updated: 2024-08-06T13:47:41.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) server parameter to remotereporter/load_logfiles.php, (2) customctid parameter to webadmin/policy/category_table_ajax.php, (3) urllist parameter to webadmin/alert/alert.php, (4) QUERY_STRING to webadmin/ajaxfilemanager/ajax_get_file_listing.php, or (5) PATH_INFO to webadmin/policy/policy_table_ajax.php/. Additional Analyst Notes: -
ager/ajax_get_file_listing.php, or (5) PATH_INFO to webadmin/policy/policy_table_ajax.php/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9607 State: PUBLISHED Published: 2020-02-19T19:39:38 Last Updated: 2024-08-06T13:47:41.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9608 State: PUBLISHED Published: 2020-02-19T19:43:51 Last Updated: 2024-08-06T13:47:41.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9609 State: PUBLISHED Published: 2020-02-19T19:47:14 Last Updated: 2024-08-06T13:47:41.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. (dot dot) in the log parameter in a stats action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9610 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T13:47:41.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html - https://www.exploit-db.com/exploits/37929/
CVE ID: CVE-2014-9611 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T13:47:41.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html - https://www.exploit-db.com/exploits/37931/
CVE ID: CVE-2014-9612 State: PUBLISHED Published: 2020-02-19T19:51:06 Last Updated: 2024-08-06T13:47:41.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via the server parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9613 State: PUBLISHED Published: 2020-02-19T19:53:48 Last Updated: 2024-08-06T13:47:41.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to webadmin/auth/verification.php or (2) dpid parameter to webadmin/deny/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9614 State: PUBLISHED Published: 2020-02-19T19:56:27 Last Updated: 2024-08-06T13:47:41.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9615 State: PUBLISHED Published: 2020-02-19T19:59:27 Last Updated: 2024-08-06T13:47:41.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter to webadmin/deny/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9616 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T13:47:41.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9617 State: PUBLISHED Published: 2020-02-19T20:02:46 Last Updated: 2024-08-06T13:47:41.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE ID: CVE-2014-9618 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T13:47:41.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html - https://www.exploit-db.com/exploits/37933/
CVE ID: CVE-2014-9619 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T13:47:41.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/
ted by secuid0.php.gif. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html - https://www.exploit-db.com/exploits/37932/
CVE ID: CVE-2014-9620 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T13:47:41.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/17/9 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://usn.ubuntu.com/3686-1/ - http://rhn.redhat.com/errata/RHSA-2016-0760.html - https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4 - http://mx.gw.com/pipermail/file/2015/
l - https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4 - http://mx.gw.com/pipermail/file/2015/001660.html - http://www.securityfocus.com/bid/71715 - http://mx.gw.com/pipermail/file/2014/001653.html - http://www.debian.org/security/2015/dsa-3121 - https://security.gentoo.org/glsa/201503-08 - http://advisories.mageia.org/MGASA-2015-0040.html
CVE ID: CVE-2014-9621 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T13:47:41.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/17/9 - https://usn.ubuntu.com/3686-1/ - http://mx.gw.com/pipermail/file/2014/001654.html - http://mx.gw.com/pipermail/file/2015/001660.html - https://security.gentoo.org/glsa/201503-08 - http://advisories.mageia.org/MGASA-2015-0040.html - https://github.com/file/file/commit/65437cee25199dbd385fb35901bc
8 - http://advisories.mageia.org/MGASA-2015-0040.html - https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c
CVE ID: CVE-2014-9622 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T13:47:41.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=66670 - https://bugs.gentoo.org/show_bug.cgi?id=472888 - http://seclists.org/fulldisclosure/2014/Nov/36 - http://www.openwall.com/lists/oss-security/2015/01/17/10 - http://secunia.com/advisories/62155 - http://www.securit
36 - http://www.openwall.com/lists/oss-security/2015/01/17/10 - http://secunia.com/advisories/62155 - http://www.securityfocus.com/bid/71284 - http://www.debian.org/security/2015/dsa-3131 - https://security.gentoo.org/glsa/201701-09
CVE ID: CVE-2014-9623 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T13:47:41.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image in the saving state. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0838.html - http://rhn.redhat.com/errata/RHSA-2015-0644.html - http://secunia.com/advisories/62165 - http://rhn.redhat.com/errata/RHSA-2015-0837.html - http://www.oracle.com/technetwork/topics/security/bulleti
ies/62165 - http://rhn.redhat.com/errata/RHSA-2015-0837.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://bugs.launchpad.net/glance/+bug/1383973 - http://www.openwall.com/lists/oss-security/2015/01/18/4 - https://bugs.launchpad.net/glance/+bug/1398830 - https://security.openstack.org/ossa/OSSA-2015-003.html
CVE ID: CVE-2014-9624 State: PUBLISHED Published: 2017-09-12T14:00:00 Last Updated: 2024-08-06T13:47:41.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: CAPTCHA bypass vulnerability in MantisBT before 1.2.19. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031633 - https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=1.2.19 - https://www.mantisbt.org/bugs/view.php?id=17984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100213 - http://www.openwall.com/lists/oss-security/2015/01/18/11 - https://bugzilla.redhat.com/show_bug.cgi?id=1183593
CVE ID: CVE-2014-9625 State: PUBLISHED Published: 2020-01-24T21:57:29 Last Updated: 2024-08-06T13:47:41.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update status file, aka an "integer truncation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/videolan/vlc/commit/fbe2837bc80f155c001781041a54c58b5524fc14 - http://openwall.com/lists/oss-secur
- https://github.com/videolan/vlc/commit/fbe2837bc80f155c001781041a54c58b5524fc14 - http://openwall.com/lists/oss-security/2015/01/20/5 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9626 State: PUBLISHED Published: 2020-01-24T21:57:25 Last Updated: 2024-08-06T13:47:41.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9627 State: PUBLISHED Published: 2020-01-24T21:57:23 Last Updated: 2024-08-06T13:47:41.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39 - https://www.videolan.org
015/01/20/5 - https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9628 State: PUBLISHED Published: 2020-01-24T21:57:20 Last Updated: 2024-08-06T13:47:41.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/2e7c7091a61aa5d07e7997b393d821e91f593c39 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9629 State: PUBLISHED Published: 2020-01-24T21:57:17 Last Updated: 2024-08-06T13:47:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/9bb0353a5c63a7f8c6fc853faa3df4b4df1f5eb5 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9630 State: PUBLISHED Published: 2020-01-24T21:57:14 Last Updated: 2024-08-06T13:47:41.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/204291467724867b79735c0ee3aeb0db
//openwall.com/lists/oss-security/2015/01/20/5 - https://github.com/videolan/vlc/commit/204291467724867b79735c0ee3aeb0dbc2200f97 - https://www.videolan.org/security/sa1501.html
CVE ID: CVE-2014-9632 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T13:47:41.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=818 - http://www.exploit-db.com/exploits/35993 - http://www.avg.com/eu-en/avg-release-notes - http://www.osvdb.org/113824 - http://packetstormsecurity.com/files/13
993 - http://www.avg.com/eu-en/avg-release-notes - http://www.osvdb.org/113824 - http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html
CVE ID: CVE-2014-9633 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T13:47:41.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35905 - http://packetstormsecurity.com/files/130094/Comodo-Backup-4.4.0.0-NULL-Pointer-Dereference.html - http://forums.comodo.com/news-announcements-feedback-cb/comodo-backup-44123-released-t107293.0.html
CVE ID: CVE-2014-9634 State: PUBLISHED Published: 2017-09-12T14:00:00 Last Updated: 2024-08-06T13:47:41.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to capture cookies by intercepting their transmission within an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/22/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1185148 - https://jenkins.io/changelog-old/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769682 - https://issues.jenkins-ci.org/brow