Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7957 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:03:27.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the toggled parameter in a toggle action in the pods-components page to wp-admin/admin.php, (2) delete a pod in a delete action in the pods page to wp-admin/admin.php, (3) reset pod settings and data via the pods_reset parameter in the pod-settings page to wp-admin/admin.php, (4) deactivat
) reset pod settings and data via the pods_reset parameter in the pod-settings page to wp-admin/admin.php, (4) deactivate and reset pod data via the pods_reset_deactivate parameter in the pod-settings page to wp-admin/admin.php, (5) delete the admin role via the id parameter in a delete action in the pods-component-roles-and-capabilities page to wp-admin/admin.php, or (6) enable "roles and capabilities" in a toggle action in the pods-components page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71996 - http://seclists.org/fulldisclosure/2015/Jan/26 - https://wordpress.org/plugins/pods/changelog/ - http://packetstormse
- http://seclists.org/fulldisclosure/2015/Jan/26 - https://wordpress.org/plugins/pods/changelog/ - http://packetstormsecurity.com/files/129890/WordPress-Pods-2.4.3-CSRF-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534437/100/0/threaded
CVE ID: CVE-2014-7958 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:03:27.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html - http://www.securityfocus.com/archive/1/533904/100/0/threaded - https://wordpress.org/plugins/bulletproof-security/changelog/ - http://
urityfocus.com/archive/1/533904/100/0/threaded - https://wordpress.org/plugins/bulletproof-security/changelog/ - http://www.securityfocus.com/bid/70916
CVE ID: CVE-2014-7959 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:03:27.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html - http://www.securityfocus.com/bid/70918 - http://www.securityfocus.com/archive/1/533904/100/0/threaded - https://wordpress.org/plugins/bul
tyfocus.com/bid/70918 - http://www.securityfocus.com/archive/1/533904/100/0/threaded - https://wordpress.org/plugins/bulletproof-security/changelog/
CVE ID: CVE-2014-7960 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T13:03:27.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html - http://www.openwall.com/lists/oss-security/2014/10/08/7 - https://bugs.launchpad.net/swift/+bug/1365350 - http://rhn.redhat.com/errata/RHSA-2015-1495.html - http://rhn.redhat.com/err
s://bugs.launchpad.net/swift/+bug/1365350 - http://rhn.redhat.com/errata/RHSA-2015-1495.html - http://rhn.redhat.com/errata/RHSA-2015-0835.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96901 - http://www.openwall.com/lists/oss-security/2014/10/07/39 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.ubuntu.com/usn/USN-2704-1 - http://www.securityfocus.com/bid/70279 - http://rhn.redhat.com/errata/RHSA-2015-0836.html
CVE ID: CVE-2014-7967 State: PUBLISHED Published: 2014-10-08T10:00:00 Last Updated: 2024-08-06T13:03:27.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html
CVE ID: CVE-2014-7968 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T13:03:27.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/08/16 - http://www.openwall.com/lists/oss-security/2014/10/08/18 - http://www.openwall.com/lists/oss-security/2014/10/08/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1150812
CVE ID: CVE-2014-7969 State: REJECTED Published: 2020-02-11T17:56:49 Last Updated: 2020-02-11T17:56:49 Description: No description available.
CVE ID: CVE-2014-7970 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T13:03:27.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.securityfocus.com/bid/70319 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/l
2015-04/msg00015.html - http://www.securityfocus.com/bid/70319 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d - http://www.ubuntu.com/usn/USN-2419-1 - http://www.ubuntu.com/usn/USN-2514-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1151095 - http://secunia.com/advisories/60174 - http://www.openwall.com/lists/oss-security/2014/10/08/21 - http://www.ubuntu.com/usn/USN-2420-1 - https://access.redhat.com/errata/RHSA-2017:2077 - http://www.spinics.net/lists/linux-fsdevel/msg79153.html - https://access.redhat.com/errata/RHSA-2017:1842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96921 - http://www.ubuntu.com/usn/USN
t.com/errata/RHSA-2017:1842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96921 - http://www.ubuntu.com/usn/USN-2513-1 - http://secunia.com/advisories/61142 - http://www.securitytracker.com/id/1030991
CVE ID: CVE-2014-7975 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T13:03:27.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2418-1 - http://secunia.com/advisories/61145 - https://
E Program Container: References: - http://www.ubuntu.com/usn/USN-2418-1 - http://secunia.com/advisories/61145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96994 - http://www.ubuntu.com/usn/USN-2416-1 - http://www.ubuntu.com/usn/USN-2417-1 - http://www.ubuntu.com/usn/USN-2415-1 - http://www.ubuntu.com/usn/USN-2419-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ef3a56b1c466629cd0bf482b09c7b0e5a085bb5 - http://www.securitytracker.com/id/1031180 - http://secunia.com/advisories/60174 - http://www.ubuntu.com/usn/USN-2421-1 - http://www.ubuntu.com/usn/USN-2420-1 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1
untu.com/usn/USN-2420-1 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://secunia.com/advisories/62633 - http://www.openwall.com/lists/oss-security/2014/10/08/22 - http://secunia.com/advisories/62634 - http://thread.gmane.org/gmane.linux.kernel.stable/109312 - http://www.securityfocus.com/bid/70314 - https://bugzilla.redhat.com/show_bug.cgi?id=1151108
CVE ID: CVE-2014-7978 State: PUBLISHED Published: 2014-10-08T18:00:00 Last Updated: 2024-08-06T13:03:27.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2236797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92537 - http://www.securityfocus.com/bid/66782 - https://www.drupal.org/node/2236251 - http://secunia.com/advisories/57829
CVE ID: CVE-2014-7979 State: PUBLISHED Published: 2014-10-08T18:00:00 Last Updated: 2024-08-06T13:03:27.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2236811 - https://www.drupal.org/node/2236255 - http://www.securityfocus.com/bid/66768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92530 - http://secunia.com/advisories/57828
CVE ID: CVE-2014-7980 State: PUBLISHED Published: 2014-10-08T18:00:00Z Last Updated: 2024-09-16T23:36:15.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skip_link_text setting and unspecified other theme settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2254837 - http://www.securityfocus.com/bid/67175 - http://secunia.com/advisories/58318 - http://drupal.org/node/225
node/2254837 - http://www.securityfocus.com/bid/67175 - http://secunia.com/advisories/58318 - http://drupal.org/node/2254925 - https://www.drupal.org/node/2254835
CVE ID: CVE-2014-7981 State: PUBLISHED Published: 2014-10-08T19:00:00Z Last Updated: 2024-09-16T20:07:23.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/578-20140301-core-sql-injection.html
CVE ID: CVE-2014-7982 State: PUBLISHED Published: 2014-10-08T19:00:00Z Last Updated: 2024-09-16T22:02:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/580-20140303-core-xss-vulnerability.html
CVE ID: CVE-2014-7983 State: PUBLISHED Published: 2014-10-08T19:00:00Z Last Updated: 2024-09-17T00:26:00.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/579-20140302-core-xss-vulnerability.html
CVE ID: CVE-2014-7984 State: PUBLISHED Published: 2014-10-08T19:00:00Z Last Updated: 2024-09-16T19:40:25.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/581-20140304-core-unauthorised-logins.html
CVE ID: CVE-2014-7985 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:03:27.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter to install/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533844/100/0/threaded - http://blog.espocrm.com/news/espocrm-2-6-0-released - http://packetstormsecurity.com/files/128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html - http://www.securityfocus.com/bid/70809 - https://www.htbridge.com/advi
28888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html - http://www.securityfocus.com/bid/70809 - https://www.htbridge.com/advisory/HTB23238
CVE ID: CVE-2014-7986 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:03:27.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533844/100/0/threaded - http://blog.espocrm.com/news/espocrm-2-6-0-released - http://packetstormsecurity.com/files/128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html - http://www.securityfocus.com/bid/70811 - https://www.htbridge.com/advisory/HTB23238
CVE ID: CVE-2014-7987 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:03:27.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533844/100/0/threaded - http://blog.espocrm.com/news/espocrm-2-6-0-released - http://packetstormsecurity.com/files/128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html - http://www.securityfocus.com/bid/70806 - https://www.htbridge.com/adv
128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html - http://www.securityfocus.com/bid/70806 - https://www.htbridge.com/advisory/HTB23238
CVE ID: CVE-2014-7988 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T13:03:27.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36340 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988 - http://secunia.com/advisories/62106 - http://www.securitytracker.com/id/1031177 - https://exchange.xforce.ibmcloud.com/vulnerab
secunia.com/advisories/62106 - http://www.securitytracker.com/id/1031177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98493
CVE ID: CVE-2014-7989 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T13:03:27.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70969 - http://www.securitytracker.com/id/1031178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98530 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7989
CVE ID: CVE-2014-7990 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T13:03:27.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7990 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9
ttp://tools.cisco.com/security/center/viewAlert.x?alertId=36351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98529 - http://www.securityfocus.com/bid/70968 - http://www.securitytracker.com/id/1031179
CVE ID: CVE-2014-7991 State: PUBLISHED Published: 2014-11-14T00:00:00 Last Updated: 2024-08-06T13:03:27.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and earlier does not properly validate the Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof VCS core devices via a crafted certificate issued by a legitimate Certification Authority, aka Bug ID CSCuq86376. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98574 - http:
rences: - http://www.securitytracker.com/id/1031181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98574 - http://secunia.com/advisories/62267 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36381 - http://www.securityfocus.com/bid/71013 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7991
CVE ID: CVE-2014-7992 State: PUBLISHED Published: 2014-11-18T01:00:00 Last Updated: 2024-08-06T13:03:27.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031220 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7992 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36453 - https://exchange.xforce.ibmcloud.com/vulnerabilities
http://tools.cisco.com/security/center/viewAlert.x?alertId=36453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98724 - http://www.securityfocus.com/bid/71145
CVE ID: CVE-2014-7993 State: PUBLISHED Published: 2014-12-24T00:00:00 Last Updated: 2024-08-06T13:03:27.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36797 - https://dashboard.meraki.com/firmware_security
CVE ID: CVE-2014-7994 State: PUBLISHED Published: 2014-12-24T00:00:00 Last Updated: 2024-08-06T13:03:27.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID 00301991. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36798 - https://dashboard.meraki.com/firmware_security
CVE ID: CVE-2014-7995 State: PUBLISHED Published: 2014-12-24T00:00:00 Last Updated: 2024-08-06T13:03:27.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36799 - https://dashboard.meraki.com/firmware_security
CVE ID: CVE-2014-7996 State: PUBLISHED Published: 2014-11-18T23:00:00 Last Updated: 2024-08-06T13:03:27.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98769 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36456 - http://www.securityfocus.com/bid/71171 - http://secunia.com/advisories/62565 - http://tools.cisco.
ert.x?alertId=36456 - http://www.securityfocus.com/bid/71171 - http://secunia.com/advisories/62565 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996
CVE ID: CVE-2014-7997 State: PUBLISHED Published: 2014-11-15T02:00:00 Last Updated: 2024-08-06T13:03:27.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows remote attackers to cause a denial of service (device restart) by triggering a transition into a recovery state that was intended to involve a network-interface restart but actually involves a full device restart, aka Bug ID CSCtn16281. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9
Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98691 - http://www.securitytracker.com/id/1031218 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7997
CVE ID: CVE-2014-7998 State: PUBLISHED Published: 2014-11-15T02:00:00 Last Updated: 2024-08-06T13:10:49.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of service via a malformed EAP packet, aka Bug ID CSCul15509. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98692 - http://www.securitytracker.com/id/1031219 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7998