Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8126 State: PUBLISHED Published: 2020-01-31T21:39:02 Last Updated: 2024-08-06T13:10:50.842Z Vendors: HTCondor Products: HTCondor Problem Types: Other Description: The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www-auth.cs.wisc.edu/lists/htcondor-users/2015-January/msg00034.shtml - https://bugzilla.redhat.com/show_bug.cgi?id=1169800 - http://rhn.redhat.com/errata/RHSA-2015-0035.html - http://rhn.redhat.com/errata/RHSA-2015-0036.html
CVE ID: CVE-2014-8127 State: PUBLISHED Published: 2017-06-26T15:00:00 Last Updated: 2024-08-06T13:10:50.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in ti
(6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html - http://www.securityfocus.com/bid/72323 - http://rhn.redhat.com/errata/RHSA-2016-1547.html - https://security.gentoo.org/glsa/201701-16 - http://bugzilla.maptools.org/show_bug.cgi?id=2497 - http://www.securitytracker.com/id/1032760 - http://bugzilla.maptools.org/show_bug.cgi?id=2496 - http://bugzilla.maptools.org/show_bug.cgi?id=2486 - http://bugzilla.maptools.org/show_bug.cgi?id=2484 - http://www.debian.org/sec
gzilla.maptools.org/show_bug.cgi?id=2486 - http://bugzilla.maptools.org/show_bug.cgi?id=2484 - http://www.debian.org/security/2015/dsa-3273 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://bugzilla.maptools.org/show_bug.cgi?id=2485 - http://bugzilla.maptools.org/show_bug.cgi?id=2500 - http://www.conostix.com/pub/adv/CVE-2014-8127-LibTIFF-Out-of-bounds_Reads.txt - http://www.openwall.com/lists/oss-security/2015/01/24/15
CVE ID: CVE-2014-8128 State: PUBLISHED Published: 2020-02-12T02:15:44 Last Updated: 2024-08-06T13:10:51.039Z Vendors: n/a Products: LibTIFF Problem Types: Other Description: LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt - http://openwall.com/lists/oss-security/2015/01/24/15 - http://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204942 - https://bugzilla.redhat.com/show_bug.cgi?id=11
://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204942 - https://bugzilla.redhat.com/show_bug.cgi?id=1185812 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
CVE ID: CVE-2014-8129 State: PUBLISHED Published: 2018-03-12T02:00:00 Last Updated: 2024-08-06T13:10:50.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204941 - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://bugzilla.maptools.org/show_bug.cgi?id=2488 - http://lists.app
http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://bugzilla.maptools.org/show_bug.cgi?id=2488 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://openwall.com/lists/oss-security/2015/01/24/15 - http://www.securityfocus.com/bid/72352 - https://security.gentoo.org/glsa/201701-16 - https://bugzilla.redhat.com/show_bug.cgi?id=1185815 - http://www.securitytracker.com/id/1032760 - http://bugzilla.maptools.org/show_bug.cgi?id=2487 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - https://www.debian.org/security/2015/dsa-3273 - http://www.conost
l - http://rhn.redhat.com/errata/RHSA-2016-1546.html - https://www.debian.org/security/2015/dsa-3273 - http://www.conostix.com/pub/adv/CVE-2014-8129-LibTIFF-Out-of-bounds_Reads_and_Writes.txt
CVE ID: CVE-2014-8130 State: PUBLISHED Published: 2018-03-12T02:00:00 Last Updated: 2024-08-06T13:10:50.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204941 - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.securityfocus.com/bid/72353 - https://github.com/vad
941 - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.securityfocus.com/bid/72353 - https://github.com/vadz/libtiff/commit/3c5eb8b1be544e41d2c336191bc4936300ad7543 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://openwall.com/lists/oss-security/2015/01/24/15 - https://security.gentoo.org/glsa/201701-16 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://www.conostix.com/pub/adv/CVE-2014-8130-LibTIFF-Division_By_Zero.txt - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - https://bugzilla.redhat.com/show_bug.cgi?id=1185817 - http:
01.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - https://bugzilla.redhat.com/show_bug.cgi?id=1185817 - http://bugzilla.maptools.org/show_bug.cgi?id=2483
CVE ID: CVE-2014-8131 State: PUBLISHED Published: 2015-01-06T15:00:00 Last Updated: 2024-08-06T13:10:50.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access. Additional Analyst Notes: - CVE Program Container: References: - http://security.libvirt.org/2014/0008.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00005.html
CVE ID: CVE-2014-8132 State: PUBLISHED Published: 2014-12-29T00:00:00 Last Updated: 2024-08-06T13:10:51.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1158089 - http://www.ubuntu.com/usn/USN-2478-1 - https://security.gentoo.org/glsa/201606-12 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147464.html - http://www.debian.org/security/2016/dsa-3488 - http:
raproject.org/pipermail/package-announce/2015-January/147464.html - http://www.debian.org/security/2016/dsa-3488 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.html - http://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/ - http://advisories.mageia.org/MGASA-2015-0014.html - http://secunia.com/advisories/60838 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:020 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.html
CVE ID: CVE-2014-8133 State: PUBLISHED Published: 2014-12-17T11:00:00 Last Updated: 2024-08-06T13:10:50.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2515-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1172797 - http://www.ubuntu
rences: - http://www.ubuntu.com/usn/USN-2515-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1172797 - http://www.ubuntu.com/usn/USN-2491-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2490-1 - http://www.ubuntu.com/usn/USN-2492-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=41bdc78544b8a93a9c6814b8bbbfef966272abbe - http://secunia.com/advisories/62801 - http://www.securityfocus.com/bid/71684 - http://www.ubuntu.com/usn/USN-2518-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.c
s?name=MDVSA-2015:058 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2493-1 - http://www.ubuntu.com/usn/USN-2517-1 - http://www.debian.org/security/2015/dsa-3128 - http://www.ubuntu.com/usn/USN-2516-1 - https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbe - http://rhn.redhat.com/errata/RHSA-2015-1272.html - http://www.openwall.com/lists/oss-security/2014/12/15/6
CVE ID: CVE-2014-8134 State: PUBLISHED Published: 2014-12-12T18:00:00 Last Updated: 2024-08-06T13:10:51.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.spinics.net/lists/kvm/msg111458.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html -
www.spinics.net/lists/kvm/msg111458.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1400314 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=1172765 - http://www.securityfocus.com/bid/71650 - http://secunia.com/advisories/62336 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html - http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8134
g/opensuse-security-announce/2015-04/msg00009.html - http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8134.html - https://bugzilla.novell.com/show_bug.cgi?id=909078 - https://support.f5.com/csp/article/K17120 - https://support.f5.com/csp/article/K17120?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2014-8135 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:10:50.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61111 - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=87b9437f8951f9d24f9a85c6bbfff0e54df8c984 - http://lists.opensuse.org/opensuse-updates/2015-01/ms
virt.git%3Ba=commit%3Bh=87b9437f8951f9d24f9a85c6bbfff0e54df8c984 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=1087104 - http://security.libvirt.org/2014/0009.html
CVE ID: CVE-2014-8136 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:10:51.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=2bdcd29c713dfedd813c89f56ae98f6f3898313d - http://www.mandriva.com/security/advisories?name=MDVSA-2015:070 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00003.html - h
driva.com/security/advisories?name=MDVSA-2015:070 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00003.html - http://secunia.com/advisories/61111 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00005.html - http://advisories.mageia.org/MGASA-2015-0002.html - http://rhn.redhat.com/errata/RHSA-2015-0323.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:023 - http://www.ubuntu.com/usn/USN-2867-1
CVE ID: CVE-2014-8137 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:10:50.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:012 - http://www.debian.org/security/2014/dsa-3106 - http://secunia.com/advisories/62619 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html -
2014/dsa-3106 - http://secunia.com/advisories/62619 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html - http://secunia.com/advisories/61747 - http://packetstormsecurity.com/files/129660/JasPer-1.900.1-Double-Free-Heap-Overflow.html - http://www.ubuntu.com/usn/USN-2483-2 - http://www.ubuntu.com/usn/USN-2483-1 - https://www.ocert.org/advisories/ocert-2014-012.html - http://secunia.com/advisories/62615 - http://www.securitytracker.com/id/1033459 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html - http://secunia.com/advisories/62311 - http://rhn.
l - http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html - http://secunia.com/advisories/62311 - http://rhn.redhat.com/errata/RHSA-2014-2021.html - http://www.securityfocus.com/bid/71742 - http://advisories.mageia.org/MGASA-2014-0539.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:159 - http://rhn.redhat.com/errata/RHSA-2015-1713.html
CVE ID: CVE-2014-8138 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:10:50.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:012 - http://www.debian.org/security/2014/dsa-3106 - http://secunia.com/advisories/62619 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html - http://lists.opensuse.org/opensuse-upda
ories/62619 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html - http://secunia.com/advisories/61747 - http://packetstormsecurity.com/files/129660/JasPer-1.900.1-Double-Free-Heap-Overflow.html - http://www.ubuntu.com/usn/USN-2483-2 - http://www.ubuntu.com/usn/USN-2483-1 - https://www.ocert.org/advisories/ocert-2014-012.html - http://secunia.com/advisories/62615 - http://www.securitytracker.com/id/1033459 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html - http://secunia.com/advisories/62311 - http://rhn.redhat.com/errata/RHSA-2014-2021.html -
pdates/2015-01/msg00014.html - http://secunia.com/advisories/62311 - http://rhn.redhat.com/errata/RHSA-2014-2021.html - http://www.securityfocus.com/bid/71746 - http://advisories.mageia.org/MGASA-2014-0539.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:159 - http://rhn.redhat.com/errata/RHSA-2015-1713.html
CVE ID: CVE-2014-8139 State: PUBLISHED Published: 2020-01-31T22:00:28 Last Updated: 2024-08-06T13:10:51.008Z Vendors: Info-ZIP Products: UnZip Problem Types: Buffer Overflow Description: Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-011.html - https://access.redhat.com/errata/RHSA-2015:0700 - https://bugzilla.redhat.com/show_bug.cgi?id=1174844 - http://www.securitytracker.com/id/1031433
CVE ID: CVE-2014-8140 State: PUBLISHED Published: 2020-01-31T22:00:32 Last Updated: 2024-08-06T13:10:50.891Z Vendors: Info-ZIP Products: UnZip Problem Types: Buffer Overflow Description: Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-011.html - https://access.redhat.com/errata/RHSA-2015:0700 - https://bugzilla.redhat.com/show_bug.cgi?id=1174851 - http://www.securitytracker.com/id/1031433
CVE ID: CVE-2014-8141 State: PUBLISHED Published: 2020-01-31T22:08:18 Last Updated: 2024-08-06T13:10:50.905Z Vendors: Info-ZIP Products: UnZip Problem Types: Buffer Overflow Description: Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-011.html - https://access.redhat.com/errata/RHSA-2015:0700 - https://bugzilla.redhat.com/show_bug.cgi?id=1174856 - http://www.securitytracker.com/id/1031433
CVE ID: CVE-2014-8142 State: PUBLISHED Published: 2014-12-20T11:00:00 Last Updated: 2024-08-06T13:10:51.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71791 - https://bugzilla.redhat.com/show_b
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71791 - https://bugzilla.redhat.com/show_bug.cgi?id=1175718 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=630f9c33c23639de85c3fd306b209b538b73b4c9 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - http://www.debian.org/security/2014/dsa-3117 - ht
p - http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - http://www.debian.org/security/2014/dsa-3117 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://bugs.php.net/bug.php?id=68594 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - https://security.gentoo.org/glsa/201503-03 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://rhn.redhat.com/errata/RHSA-2015-1066.html
CVE ID: CVE-2014-8143 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2024-08-06T13:10:51.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416326 - http://li
nces: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416326 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - https://download.samba.org/pub/samba/patches/security/samba-4.1.15-CVE-2014-8143.patch - http://www.securitytracker.com/id/1031615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100596 - https://download.samba.org/pub/samba/patches/security/samba-4.0.23-CVE-2014-8143.patch - https://www.samba.org/samba/security/CVE-2014-8143 - http://www.securityfocus.com/bid/72278 - http://secunia.com/advisories/62594 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html - http://www.ubuntu.c
.com/advisories/62594 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html - http://www.ubuntu.com/usn/USN-2481-1
CVE ID: CVE-2014-8144 State: PUBLISHED Published: 2014-12-31T22:00:00 Last Updated: 2024-08-06T13:10:50.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doorkeeper-gem/doorkeeper/blob/master/CHANGELOG.md - https://exchange.xforce.ibmcloud.com/vulnerabilities/99342 - http://seclists.org/oss-sec/2014/q4/1076