Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1909 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T09:58:15.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00038.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00039.html - http://seclists.org/oss-sec/2014/q1/
/msg00038.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00039.html - http://seclists.org/oss-sec/2014/q1/291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91291 - http://www.securityfocus.com/bid/65403
CVE ID: CVE-2014-1910 State: PUBLISHED Published: 2014-02-21T15:00:00 Last Updated: 2024-08-06T09:58:15.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57020 - http://support.citrix.com/article/CTX140303 - http://www.securitytracker.com/id/1029791
CVE ID: CVE-2014-1911 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T09:58:15.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password. Additional Analyst Notes: - CVE Program Container: References: - http://foscam.us/forum/mjpeg-54-firmware-bug-user-logon-bypass-t8442.html - http://www.kb.cert.org/vuls/id/525132
CVE ID: CVE-2014-1912 State: PUBLISHED Published: 2014-02-28T18:00:00 Last Updated: 2024-08-06T09:58:16.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://hg.python.org/cpython/rev/87673659d8f7 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00035.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html - http://rhn.redhat.com/errata/RHSA-2015-1064.html - http://www.or
s.opensuse.org/opensuse-updates/2014-05/msg00008.html - http://rhn.redhat.com/errata/RHSA-2015-1064.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://pastebin.com/raw.php?i=GHXSmNEg - http://bugs.python.org/issue20246 - http://www.debian.org/security/2014/dsa-2880 - https://security.gentoo.org/glsa/201503-10 - http://www.securityfocus.com/bid/65379 - http://www.openwall.com/lists/oss-security/2014/02/12/16 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1330.html - http://www.exploit-db.com/exploits/31875 - https://www.trustedsec.com/february-2014/python-remote-code-execution
.html - http://www.exploit-db.com/exploits/31875 - https://www.trustedsec.com/february-2014/python-remote-code-execution-socket-recvfrom_into/ - https://support.apple.com/kb/HT205031 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.ubuntu.com/usn/USN-2125-1 - http://www.securitytracker.com/id/1029831
CVE ID: CVE-2014-1914 State: PUBLISHED Published: 2014-02-07T15:00:00 Last Updated: 2024-08-06T09:58:15.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arbitrary web script or HTML via the (1) topic parameter to sw/add_topic.php or (2) nick parameter to sw/chat/message.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101891 - http://osvdb.org/101892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90179 - http://www.securityfocus.com/bid/
m/vulnerabilities/90178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90179 - http://www.securityfocus.com/bid/64707 - http://packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.html
CVE ID: CVE-2014-1915 State: PUBLISHED Published: 2014-02-07T15:00:00 Last Updated: 2024-08-06T09:58:16.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of (1) administrators for requests that change the administrator password via an update action to sw/admin_change_password.php or (2) unspecified victims for requests that add a topic or blog entry to sw/add_topic.php. NOTE: vector 2 can be leveraged to bypass the authentication requirements for exploiting vector 1 in CVE-2014-1914. Additional Analyst Notes: - CVE Pr
d to bypass the authentication requirements for exploiting vector 1 in CVE-2014-1914. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101889 - http://www.securityfocus.com/bid/64707 - http://osvdb.org/101890 - http://packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.html
CVE ID: CVE-2014-1916 State: PUBLISHED Published: 2014-02-08T00:00:00Z Last Updated: 2024-09-17T03:13:28.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d and Mumble for iOS 1.1 through 1.2.2 do not properly check the return value of the copyDataBlock method, which allow remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted length prefix value in an Opus voice packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102957 - http://mumble
s voice packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102957 - http://mumble.info/security/Mumble-SA-2014-003.txt
CVE ID: CVE-2014-1921 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:16.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://gaffer.ptitcanardnoir.org/intrigeri/files/parcimonie/App-Parcimonie-0.8.1.tar.gz - http://seclists.org/oss-sec/2014/q1/308 - http://www.debian.org/security/2014/dsa-2860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91118 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bu
dsa-2860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91118 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738134 - http://www.securityfocus.com/bid/65505 - http://seclists.org/oss-sec/2014/q1/305
CVE ID: CVE-2014-1922 State: PUBLISHED Published: 2020-01-24T16:42:45 Last Updated: 2024-08-06T09:58:15.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11660 - http://koha-community.org/security-release-february-2014/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10/3
CVE ID: CVE-2014-1923 State: PUBLISHED Published: 2020-01-24T16:42:42 Last Updated: 2024-08-06T09:58:15.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allow remote attackers to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://koha-community.org/security-release-february-2014/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10
2014/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10/3 - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11662
CVE ID: CVE-2014-1924 State: PUBLISHED Published: 2020-01-24T16:42:48 Last Updated: 2024-08-06T09:58:15.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://koha-community.org/security-release-february-2014/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10/3
4/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10/3 - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11666
CVE ID: CVE-2014-1925 State: PUBLISHED Published: 2020-01-24T16:42:51 Last Updated: 2024-08-06T09:58:15.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged by remote attackers using CVE-2014-1924. Additional Analyst Notes: - CVE Program Container: References: - http://koha-community.org/security-release-february-2014/ - http://www.openwall.com/lists/oss-security/
r: References: - http://koha-community.org/security-release-february-2014/ - http://www.openwall.com/lists/oss-security/2014/02/07/10 - http://www.openwall.com/lists/oss-security/2014/02/10/3 - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11666
CVE ID: CVE-2014-1926 State: REJECTED Published: 2022-07-07T15:58:15 Last Updated: 2022-07-07T15:58:15 Description: No description available.
CVE ID: CVE-2014-1927 State: PUBLISHED Published: 2014-10-25T21:00:00 Last Updated: 2024-08-06T09:58:15.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56616 - http://www.debian.org/security/2014/dsa-2946 - h
Program Container: References: - http://secunia.com/advisories/56616 - http://www.debian.org/security/2014/dsa-2946 - http://seclists.org/oss-sec/2014/q1/245 - https://code.google.com/p/python-gnupg/issues/detail?id=98 - https://code.google.com/p/python-gnupg/ - http://seclists.org/oss-sec/2014/q1/294 - http://secunia.com/advisories/59031
CVE ID: CVE-2014-1928 State: PUBLISHED Published: 2014-10-25T21:00:00 Last Updated: 2024-08-06T09:58:15.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56616 - http://seclists.org/o
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56616 - http://seclists.org/oss-sec/2014/q1/246 - http://www.debian.org/security/2014/dsa-2946 - https://code.google.com/p/python-gnupg/issues/detail?id=98 - https://code.google.com/p/python-gnupg/ - http://seclists.org/oss-sec/2014/q1/294 - http://secunia.com/advisories/59031
CVE ID: CVE-2014-1929 State: PUBLISHED Published: 2014-10-25T21:00:00 Last Updated: 2024-08-06T09:58:15.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2946 - http://seclists.org/oss-sec/2014/q1/245 - http://seclists.org/oss-sec/2014/q1/335 - http://secunia.com/advisories/59031
CVE ID: CVE-2014-1930 State: PUBLISHED Published: 2014-02-10T22:00:00 Last Updated: 2024-08-06T09:58:15.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/566894 - http://osvdb.org/102814 - http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=relea
.org/vuls/id/566894 - http://osvdb.org/102814 - http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details - http://jvn.jp/vu/JVNVU97441356/index.html - http://www.securityfocus.com/bid/65305 - http://osvdb.org/102815
CVE ID: CVE-2014-1931 State: PUBLISHED Published: 2014-02-10T22:00:00 Last Updated: 2024-08-06T09:58:16.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65564 - http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details
CVE ID: CVE-2014-1932 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:58:14.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=7
le. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059 - https://security.gentoo.org/glsa/201612-52 - https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7 - http://www.openwall.com/lists/oss-security/2014/02/11/1 - http://www.ubuntu.com/usn/USN-2168-1 - http://www.securityfocus.com/bid/65511 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.html
CVE ID: CVE-2014-1933 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:58:15.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-52 - http://www.openwall.com/lists/oss-security/2014/02/10/15 - https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e1
/lists/oss-security/2014/02/10/15 - https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7 - http://www.openwall.com/lists/oss-security/2014/02/11/1 - http://www.ubuntu.com/usn/USN-2168-1 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.html - http://www.securityfocus.com/bid/65513
CVE ID: CVE-2014-1934 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:58:16.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737062 - https://bugzilla.redhat.com/show_bug.cgi?id=1063671 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00027.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00028.html
CVE ID: CVE-2014-1935 State: PUBLISHED Published: 2019-11-21T14:13:31 Last Updated: 2024-08-06T09:58:15.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: 9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-1935 - http://www.openwall.com/lists/oss-security/2014/02/11/1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737206
CVE ID: CVE-2014-1936 State: PUBLISHED Published: 2019-11-21T14:17:46 Last Updated: 2024-08-06T09:58:15.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: rc before 1.7.1-5 insecurely creates temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/11/1 - https://security-tracker.debian.org/tracker/CVE-2014-1936 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737125
CVE ID: CVE-2014-1937 State: PUBLISHED Published: 2019-11-21T14:20:26 Last Updated: 2024-08-06T09:58:15.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gamera before 3.4.1 insecurely creates temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/11/1 - https://security-tracker.debian.org/tracker/CVE-2014-1937 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737324
CVE ID: CVE-2014-1938 State: PUBLISHED Published: 2019-11-21T14:23:51 Last Updated: 2024-08-06T09:58:15.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-rply before 0.7.4 insecurely creates temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/11/1 - https://security-tracker.debian.org/tracker/CVE-2014-1938 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737627
CVE ID: CVE-2014-1939 State: PUBLISHED Published: 2014-03-03T02:00:00 Last Updated: 2024-08-06T09:58:15.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels. Additional Analyst Notes: - CVE Program Container: References: - http://blog.chromium.org/2013/11/introducing-chromium-powered-android.html - http://openwall.com/lists/oss-security/2014/02/11/2 - https://support.lenovo.com/us
cing-chromium-powered-android.html - http://openwall.com/lists/oss-security/2014/02/11/2 - https://support.lenovo.com/us/en/product_security/len_6421
CVE ID: CVE-2014-1942 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T09:58:15.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/163188
CVE ID: CVE-2014-1943 State: PUBLISHED Published: 2014-02-18T19:00:00 Last Updated: 2024-08-06T09:58:15.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html - http://mx.gw.com/pipermail/file/2014/001330.html - http://mx.gw.com/pipermail/file/2014/001327.html - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001337.html - http://lis
le/2014/001327.html - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001337.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html - http://support.apple.com/kb/HT6443 - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://mx.gw.com/pipermail/file/2014/001334.html - http://www.ubuntu.com/usn/USN-2126-1 - https://github.com/glensc/file/blob/FILE5_17/ChangeLog - http://www.debian.org/security/2014/dsa-2868 - http://www.ubuntu.com/usn/USN-2123-1 - http://www.debian.org/security/2014/dsa-2861
CVE ID: CVE-2014-1944 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T09:58:15.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91538 - http://www.exploit-db.com/exploits/32076 - https://www.htbridge.com/advisory/HTB23203 - https://github.com/IlchCMS/Ilch-2.0/commit/381e15f39d07d3cdf6aaaa25c0f2321f817935f7 - http://www.securityfocus.com/archive/1
s://github.com/IlchCMS/Ilch-2.0/commit/381e15f39d07d3cdf6aaaa25c0f2321f817935f7 - http://www.securityfocus.com/archive/1/531350/100/0/threaded
CVE ID: CVE-2014-1945 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T09:58:15.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.opendocman.com/opendocman-v1-2-7-1-release - http://www.securityfocus.com/bid/65775 - http://secunia.com/advisories/56189 - http://www.opendocman.com/opendocman-v1-2-7-2-released - https://www.htbridge.com/advisory/HTB23202