Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8307 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-17T00:37:12.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter in the "drop down TOP menu (with path)" section or (2) print_this_page variable in the footer_content_block section, as demonstrated by the QUERY_STRING to (a) index.php, (b) checkout.php, (c) contact.php, (d) detail.php, (e) distro.php, (f) newsletter.php, (g) page.php, (h) profile.php, (i) search.php, (j) sitemap.php, (k) ta
) detail.php, (e) distro.php, (f) newsletter.php, (g) page.php, (h) profile.php, (i) search.php, (j) sitemap.php, (k) task.php, or (l) tell.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect - http://seclists.org/fulldisclosure/2014/Sep/55
CVE ID: CVE-2014-8308 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1941562 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-032 - http://seclists.org/fulldisclosure/2014/Oct/41 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96873 - http://scn.sap.com/docs/DOC-8218 - h
sclosure/2014/Oct/41 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96873 - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/archive/1/533649/100/0/threaded - http://www.securityfocus.com/bid/70290 - http://packetstormsecurity.com/files/128602/SAP-BusinessObjects-Persistent-Cross-Site-Scripting.html
CVE ID: CVE-2014-8309 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames via SecEnterprise authentication requests to the Session web service. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/2001109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96874 - http://www.securityfocus.com/archiv
support/notes/2001109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96874 - http://www.securityfocus.com/archive/1/533647/100/0/threaded - http://seclists.org/fulldisclosure/2014/Oct/42 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-029 - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/70304
CVE ID: CVE-2014-8310 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted OSCAFactory::Session ORB message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96875 - http://seclists.org/fulldisclosure/2014/Oct/40 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-030 - http://www.securityfocus.com/archive/1/533646/100/0/threaded - http://s
m/resources/get.php?resid=adv_onapsis-2014-030 - http://www.securityfocus.com/archive/1/533646/100/0/threaded - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/2001106 - http://packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html
CVE ID: CVE-2014-8311 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA listener. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96876 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-031 - http://www.securityfocus.com/archive/1/533648/100/0/threaded - http://seclists.org/fulldisclosure/2014/Oct/39 - https://service.sap.com/sap/support/notes/1998990 - http://packetstormsecurity.com/files/128601
disclosure/2014/Oct/39 - https://service.sap.com/sap/support/notes/1998990 - http://packetstormsecurity.com/files/128601/SAP-Business-Objects-Information-Disclosure-Via-CORBA.html
CVE ID: CVE-2014-8312 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDU_CCMS_GET_PROFILE_PARAM RFC function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533645/100/0/threaded - http://www.securityfocus.com/bid/70292 - http://packetstormsecurity.com/files/128603/SAP-Business-Warehouse-Missing-Authorization-Check.html - http://seclists.org/fulldisclosure/2014/Oct/38 - http://secunia.com/advisories
ehouse-Missing-Authorization-Check.html - http://seclists.org/fulldisclosure/2014/Oct/38 - http://secunia.com/advisories/61101 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1967780 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96877
CVE ID: CVE-2014-8313 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execute arbitrary XSJX code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533643/100/0/threaded - http://www.securityfocus.com/bid/70293 - http://packetstormsecurity.com/files/128597/SAP-HANA-Web-based-Development-Workbench-Code-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96879 - http://seclists.org/fulldisc
orkbench-Code-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96879 - http://seclists.org/fulldisclosure/2014/Oct/36 - http://scn.sap.com/docs/DOC-55451 - https://service.sap.com/sap/support/notes/2015446 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-028
CVE ID: CVE-2014-8314 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) epm/admin/DataGen.xsjs or (2) epm/services/multiply.xsjs in the democontent. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/37 - http://www.securityfocus.com/archive/1/533644/100/0/threaded - https://service.sap.com/sap/support/notes/2009696 - http://www.securityfocus.com/bid/70307
ve/1/533644/100/0/threaded - https://service.sap.com/sap/support/notes/2009696 - http://www.securityfocus.com/bid/70307 - http://packetstormsecurity.com/files/128598/SAP-HANA-Reflective-Cross-Site-Scripting.html - http://scn.sap.com/docs/DOC-55451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96878 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-027
CVE ID: CVE-2014-8315 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1908562 - http://seclists.org/fulldisclosure/2014/Oct/48 - http://www.csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt - http://www.sec
- http://www.csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt - http://www.securityfocus.com/bid/70382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96935 - http://www.securityfocus.com/archive/1/533672/100/0/threaded
CVE ID: CVE-2014-8316 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/50 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96933 - http://scn.sap.com/docs/DOC-55451 - http://packetstormsecurity.com/files/128633/SAP-BusinessObjects-Explorer-14.0.5-XXE-Injection.h
sap.com/docs/DOC-55451 - http://packetstormsecurity.com/files/128633/SAP-BusinessObjects-Explorer-14.0.5-XXE-Injection.html - http://www.csnc.ch/misc/files/advisories/CSNC-2013-018_SAP_BusinessObjects_Explorer_XXE.txt - http://www.securityfocus.com/archive/1/533673/100/0/threaded - http://www.securityfocus.com/bid/70384 - https://service.sap.com/sap/support/notes/1908531
CVE ID: CVE-2014-8317 State: PUBLISHED Published: 2014-10-17T14:00:00 Last Updated: 2024-08-06T13:10:51.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name text. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2194013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91134 - http://www.securityfocus.com/bid/65525 - http://secunia.com/advisories/56882 - https://www.drupal.org/node/2
ies/91134 - http://www.securityfocus.com/bid/65525 - http://secunia.com/advisories/56882 - https://www.drupal.org/node/2194011 - https://drupal.org/node/2194621
CVE ID: CVE-2014-8318 State: PUBLISHED Published: 2014-10-17T14:00:00 Last Updated: 2024-08-06T13:10:50.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x before 7.x-3.20, and 7.x-4.x before 7.x-4.0-beta2 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a field label title, when two fields have the same form_key. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2194175 - http://osvdb.org/103262 - http://secunia.com/advisories/56860 - https://exchange.xforce.ibmcloud.com/vulnerab
/2194175 - http://osvdb.org/103262 - http://secunia.com/advisories/56860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91156 - https://www.drupal.org/node/2194183 - https://www.drupal.org/node/2194181 - http://www.securityfocus.com/bid/65528 - https://drupal.org/node/2194671
CVE ID: CVE-2014-8319 State: PUBLISHED Published: 2014-10-17T14:00:00 Last Updated: 2024-08-06T13:10:51.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the easy_social_admin_summary function in the Easy Social module 7.x-2.x before 7.x-2.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a block title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56857 - https://drupal.org/node/2194809 - https://www.drupal.org/node/2194401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91157 - http://osvdb.org/103264 - http://ww
upal.org/node/2194401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91157 - http://osvdb.org/103264 - http://www.securityfocus.com/bid/65527
CVE ID: CVE-2014-8320 State: PUBLISHED Published: 2014-10-17T14:00:00 Last Updated: 2024-08-06T13:10:51.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the "Label text" field to the results configuration page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57373 - https://drupal.org/node/2231665 - https://www.drupal.org/node/2231531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92347 - http
g/node/2231665 - https://www.drupal.org/node/2231531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92347 - http://seclists.org/fulldisclosure/2014/Apr/41 - https://www.drupal.org/node/2231533
CVE ID: CVE-2014-8321 State: PUBLISHED Published: 2020-01-31T21:21:21 Last Updated: 2024-08-06T13:10:50.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local users to execute arbitrary code or gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html - http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html - https://github.com/aircrack-ng/aircrack-ng/commit/ff70494dd389ba570dbdbf36f217c28d4381c6b5/ - https
ode-Execution.html - https://github.com/aircrack-ng/aircrack-ng/commit/ff70494dd389ba570dbdbf36f217c28d4381c6b5/ - https://github.com/aircrack-ng/aircrack-ng/pull/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98458
CVE ID: CVE-2014-8322 State: PUBLISHED Published: 2020-01-31T21:21:25 Last Updated: 2024-08-06T13:10:51.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbitrary code via a crafted length parameter value. Additional Analyst Notes: - CVE Program Container: References: - http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html - http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html - https://github.com/aircrack-ng/aircrack-ng/commit/091b153f294b9b695b0b2831e65936438b550d7b - http://www
Execution.html - https://github.com/aircrack-ng/aircrack-ng/commit/091b153f294b9b695b0b2831e65936438b550d7b - http://www.exploit-db.com/exploits/35018 - https://github.com/aircrack-ng/aircrack-ng/pull/14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98459
CVE ID: CVE-2014-8323 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:10:51.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter. Additional Analyst Notes: - CVE Program Container: References: - http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html - http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html - http://security.gentoo.org/glsa/glsa-201411-08.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/1
/security.gentoo.org/glsa/glsa-201411-08.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.html - https://github.com/aircrack-ng/aircrack-ng/commit/da087238963c1239fdabd47dc1b65279605aca70 - http://www.securityfocus.com/archive/1/533869/100/0/threaded - http://www.securityfocus.com/bid/71085 - https://bugzilla.redhat.com/show_bug.cgi?id=1159812
CVE ID: CVE-2014-8324 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:10:51.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter. Additional Analyst Notes: - CVE Program Container: References: - http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html - http://packetstormsecurity.com/files/128943/Aircrack-ng-1.2-Beta-3-DoS-Code-Execution.html - http://security.gentoo.org/glsa/glsa-201411-08.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/14
security.gentoo.org/glsa/glsa-201411-08.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.html - https://github.com/aircrack-ng/aircrack-ng/commit/88702a3ce4c28a973bf69023cd0312f412f6193e - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143606.html - http://www.securityfocus.com/archive/1/533869/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=1159812
CVE ID: CVE-2014-8325 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T13:10:51.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service (resource consumption) via vectors related to the PHP PCRE library. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/17/11 - http://www.securityfocus.com/bid/70645 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-013/ - http://typo3.org/extensions/repository/view/cal
CVE ID: CVE-2014-8326 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:10:51.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1beeef79d237e8bfda44690834012a76 - https://github.com/phpmyadmin/phpmyadmin/commit/7b8962dede7631298c81e2c1cd267b81f1e08a8c - http://www.securityfocus.com/bid/70731 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00004.html - http://www.phpmyadmin.net/home_page/security/PMASA-2014-12.php
CVE ID: CVE-2014-8327 State: PUBLISHED Published: 2014-10-27T15:00:00 Last Updated: 2024-08-06T13:18:47.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-014/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/97668 - http://typo3.org/extensions/repository/view/fal_sftp
CVE ID: CVE-2014-8328 State: PUBLISHED Published: 2020-02-03T13:34:30 Last Updated: 2024-08-06T13:18:48.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-015/ - http://typo3.org/extensions/repository/view/dce - https://exchange.xforce.ibmcloud.com/vulnerabilities/97673
CVE ID: CVE-2014-8329 State: PUBLISHED Published: 2014-10-20T15:00:00Z Last Updated: 2024-09-16T17:08:39.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain access data for the ftp and telnet services via a direct request for ZTPUsrDtls.txt. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/40 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10
fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt
CVE ID: CVE-2014-8330 State: PUBLISHED Published: 2014-10-20T16:00:00Z Last Updated: 2024-09-17T00:31:39.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127827/Espo-CRM-Cross-Site-Scripting.html
CVE ID: CVE-2014-8331 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T13:18:46.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settings or (2) use device functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/secur
l Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-360246.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/95198 - http://osvdb.org/show/osvdb/109885
CVE ID: CVE-2014-8333 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:18:46.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance in the resize state. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60531 - https://bugs.launchpad.net/nova/+bug/1359138 - http://rhn.redhat.com/errata/RHSA-2015-0844.html - http://lists.openstack.org/pipermail/openstack-announce/2014-October/000298.html - http://rhn.redhat.com/errata/RHSA-2015-0843.html