Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
med configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-02 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01 - http://www.securityfocus.com/bid/65871
CVE ID: CVE-2014-0775 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0777 State: PUBLISHED Published: 2014-04-11T16:00:00 Last Updated: 2025-09-24T21:14:59.224Z Severity: N/A (CVSS 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C) Vendors: IOServer Products: OPC Drivers Problem Types: CWE-125 Description: The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-100-01 - http://www.ioserver.com/
CVE ID: CVE-2014-0778 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2025-09-24T21:24:10.830Z Severity: N/A (CVSS 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N) Vendors: Progea Products: Movicon Problem Types: CWE-200 Description: TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-105-01 - http://www.progea.com/it-it/downloads/software.aspx
CVE ID: CVE-2014-0779 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2025-09-24T21:33:37.552Z Severity: N/A (CVSS 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P) Vendors: Schneider Electric Products: ClearSCADA, SCADA Expert ClearSCADA Problem Types: CWE-119 Description: The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via
2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file). Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-024-01 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-072-01
CVE ID: CVE-2014-0780 State: PUBLISHED Published: 2014-04-25T01:00:00.000Z Last Updated: 2025-10-22T00:05:38.084Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: InduSoft Products: Web Studio Problem Types: CWE-22 Description: Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/42699/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02 - http://www.securityfocu
xploit-db.com/exploits/42699/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02 - http://www.securityfocus.com/bid/67056 - http://download.indusoft.com/71.2.4/IWS71.2.4.zip
CVE ID: CVE-2014-0781 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2025-09-25T17:22:27.951Z Severity: N/A (CVSS 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C) Vendors: Yokogawa Products: CENTUM CS 3000 Problem Types: CWE-122 Description: Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a - http://www.securityfocus.com/bid/66130 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yok
ttps://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
CVE ID: CVE-2014-0782 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2025-09-25T17:27:46.585Z Severity: N/A (CVSS 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C) Vendors: Yokogawa Products: CENTUM CS 3000 Problem Types: CWE-121 Description: Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: Ref
remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a - http://www.securityfocus.com/bid/66130 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
CVE ID: CVE-2014-0783 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2025-09-25T17:24:25.563Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:N/C:P/I:P/A:C) Vendors: Yokogawa Products: CENTUM CS 3000 Problem Types: CWE-121 Description: Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a - http://www.securityfocus.com/bid/66130 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yokog
ps://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
CVE ID: CVE-2014-0784 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2025-09-25T17:25:47.981Z Severity: N/A (CVSS 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C) Vendors: Yokogawa Products: CENTUM CS 3000 Problem Types: CWE-121 Description: Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a - http://www.securityfocus.com/bid/66130 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yo
https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
CVE ID: CVE-2014-0785 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0786 State: PUBLISHED Published: 2014-05-01T01:00:00 Last Updated: 2025-10-13T22:50:30.946Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Ecava Products: IntegraXor Problem Types: CWE-200 Description: Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. Additional Analyst Notes: - CVE Program Container: References: - http://www.integraxor.com/blog/category/security/vulnerability-note/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01 - http://www.integraxor.com/blog/category/security/vulnerability-note/ - https://www.cisa.gov/news-ev
ies/icsa-14-091-01 - http://www.integraxor.com/blog/category/security/vulnerability-note/ - https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
CVE ID: CVE-2014-0787 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2025-09-25T17:39:03.344Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: WellinTech Products: KingSCADA Problem Types: CWE-121 Description: Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-098-02 - https://www.exploit-db.com/exploits/42724/ - http://www.securityfocus.com/bid/66709 - http://www.wellintech.com/index.php?option=com_content&view=article&id=56&Itemid=11
CVE ID: CVE-2014-0788 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0789 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2025-09-25T17:45:27.086Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:N/A:P) Vendors: Schneider Electric Products: OPC Factory Server (OFS) Problem Types: CWE-122 Description: Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote attackers to cause a denial of service via long arguments to unspecified functions. Additional Analyst Notes: - CVE Program Container: References:
of service via long arguments to unspecified functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-093-01 - http://www.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2014/03/20140325_vulnerability_disclosure_opc_factory_server.xml - http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page
CVE ID: CVE-2014-0791 State: PUBLISHED Published: 2014-01-03T17:00:00 Last Updated: 2024-08-06T09:27:19.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/01/02/5 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html - http://lists.opensuse.org/opensuse-up
/2014/01/02/5 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html - http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html - http://openwall.com/lists/oss-security/2014/01/03/4 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:171 - https://bugzilla.redhat.com/show_bug.cgi?id=998941 - https://github.com/sidhpurwala-huzaifa/FreeRDP/commit/e2745807c4c3e0a590c0f69a9b655dc74ebaa03e - http://advisories.mageia.org/MGASA-2014-0287.html - https://github.com/FreeRDP/FreeRDP/pull/1649 - https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
CVE ID: CVE-2014-0792 State: PUBLISHED Published: 2014-01-17T16:00:00 Last Updated: 2024-08-06T09:27:19.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types. Additional Analyst Notes: - CVE Program Container: References: - http://www.sonatype.org/advisories/archive/2014-01-13-Nexus - https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability - https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist
CVE ID: CVE-2014-0793 State: PUBLISHED Published: 2014-01-30T18:00:00 Last Updated: 2024-08-06T09:27:19.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website or (2) latitude parameter in a comment to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64659 - http://stackideas.com/downloads/changelog/komento - http://www.securityfocus.com/archive/1/530873/100/0/threaded - https://www.htbridge.com/advisory/HTB23194
log/komento - http://www.securityfocus.com/archive/1/530873/100/0/threaded - https://www.htbridge.com/advisory/HTB23194 - http://www.exploit-db.com/exploits/31174
CVE ID: CVE-2014-0794 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T09:27:19.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a comment.like action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://extensions.joomla.org/extensions/contacts-and-feedback/articles-comments/23394 - http://www.securityfocus.com/bid/64661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90532 - http://www.securityfocus.com/archive/1/530872/100/0/
4661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90532 - http://www.securityfocus.com/archive/1/530872/100/0/threaded - http://www.osvdb.org/101960 - http://www.exploit-db.com/exploits/31175 - https://www.htbridge.com/advisory/HTB23195
CVE ID: CVE-2014-0802 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T09:27:19.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001 - http://jvn.jp/en/jp/JVN88313872/index.html
CVE ID: CVE-2014-0803 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T09:27:19.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the tetra filer application 2.3.1 and earlier for Android 4.0.3, tetra filer free application 2.3.1 and earlier for Android 4.0.3, tetra filer application 1.5.1 and earlier for Android before 4.0.3, and tetra filer free application 1.5.1 and earlier for Android before 4.0.3 allows attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000002 - https://play.google.com/stor
Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000002 - https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.free - http://jvn.jp/en/jp/JVN51285738/index.html - https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.app
CVE ID: CVE-2014-0804 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T09:27:20.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free - http://jvn.jp/en/jp/JVN44392991/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003 - https://play.google.com/store
http://jvn.jp/en/jp/JVN44392991/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003 - https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro
CVE ID: CVE-2014-0805 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T09:27:20.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free application 5.4.3 and earlier, and NeoFiler Lite application 2.4.2 and earlier for Android allows attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.skyarts.android.neofiler - http://jvn.jp/en/jp/JVN85716574/index.html - https://play.google.com/store/apps/details?id=com.skyarts.android.neofilerlite
p://jvn.jp/en/jp/JVN85716574/index.html - https://play.google.com/store/apps/details?id=com.skyarts.android.neofilerlite - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000004 - http://www.skyarts.com/products/android/neofiler/index.html - https://play.google.com/store/apps/details?id=com.skyarts.android.neofilerfree
CVE ID: CVE-2014-0806 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:27:20.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN81637882/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000007
CVE ID: CVE-2014-0807 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:27:20.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/weakness.php?id=56 - http://jvn.jp/en/jp/JVN17849447/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000005
CVE ID: CVE-2014-0808 State: PUBLISHED Published: 2014-01-22T21:00:00 Last Updated: 2024-08-06T09:27:20.153Z Vendors: EC-CUBE CO.,LTD., S‑cubism Inc. Products: EC-CUBE, EC-Orange Problem Types: Authorization Bypass Through User-Controlled Key Description: Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/weakness.php?id=57 -
CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/weakness.php?id=57 - http://jvn.jp/en/jp/JVN51770585/ - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000006 - https://ec-orange.jp/ - https://jvn.jp/en/jp/JVN15637138/ - https://jvndb.jvn.jp/jvndb/JVNDB-2024-000054
CVE ID: CVE-2014-0809 State: PUBLISHED Published: 2014-01-24T15:00:00 Last Updated: 2024-08-06T09:27:20.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN49384502/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90980 - https://play.google.com/store/apps/details?id=com.acidzazz.simzip
CVE ID: CVE-2014-0810 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T09:27:20.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5, 2009 before update 6, and 2010 before update 6, and Sanshiro Viewer before 2.0.2.0, allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28011378/index.html - http://www.justsystems.com/jp/info/js14001.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000011
CVE ID: CVE-2014-0811 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T09:27:20.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN24730765/index.html - http://www.securityfocus.com/bid/65742 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000012
CVE ID: CVE-2014-0812 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T09:27:20.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB Joyful Note 2.8 and earlier, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kent-web.com/bbs/joyful.html - http://osvdb.org/102740 - http://www.securityfocus.com/bid/65301 - http://jvn.jp/en/jp/JVN30718178/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000013
CVE ID: CVE-2014-0813 State: PUBLISHED Published: 2014-02-14T16:00:00 Last Updated: 2024-08-06T09:27:20.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50943964/index.html - http://osvdb.org/102939 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016 - http://www.securityfocus.com/bid/65368 - http://www.phpmyfaq.de/advisory_2014-02-04.php - http://secunia.com/advisories/56006 - https://exchange.xforce.ibmcloud.com/vulne
w.phpmyfaq.de/advisory_2014-02-04.php - http://secunia.com/advisories/56006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90963
CVE ID: CVE-2014-0814 State: PUBLISHED Published: 2014-02-14T16:00:00 Last Updated: 2024-08-06T09:27:20.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000015 - http://www.securityfocus.com/bid/65368 - http://www.phpmyfaq.de/advisory_2014-02-04.php - http://secunia.com/advisories/56006 - http://jvn.jp/en/jp/JVN30050348/index.html - http://osvdb.org/102940