Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CVE Program Container: References: - http://secunia.com/advisories/62021 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1062876 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html - http://www.mozilla.org/security/announce/2014/mfsa2014-81.html - http://www.securitytracker.com/id/1031028 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html - http://www.ubuntu.com/usn/USN-2373-1 - https://security.gentoo.org/glsa/201504-01 - http
updates/2014-11/msg00002.html - http://www.ubuntu.com/usn/USN-2373-1 - https://security.gentoo.org/glsa/201504-01 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html - http://secunia.com/advisories/61387 - http://www.ubuntu.com/usn/USN-2372-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62022 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.securitytracker.com/id/1031030 - http://secunia.com/advisories/62023 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html - http://www.securityfocus.com/bid/70425 - http://www.debian.org/security/2014
rg/opensuse-updates/2014-11/msg00000.html - http://www.securityfocus.com/bid/70425 - http://www.debian.org/security/2014/dsa-3050 - http://www.debian.org/security/2014/dsa-3061
CVE ID: CVE-2014-1586 State: PUBLISHED Published: 2014-10-15T10:00:00 Last Updated: 2024-08-06T09:42:36.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62021 - http://lists.opensuse.org/opensuse-security-announce/2015-01
tainer: References: - http://secunia.com/advisories/62021 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html - http://www.mozilla.org/security/announce/2014/mfsa2014-81.html - http://www.securitytracker.com/id/1031028 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html - http://www.ubuntu.com/usn/USN-2373-1 - https://security.gentoo.org/glsa/201504-01 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
ecurity.gentoo.org/glsa/201504-01 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html - http://secunia.com/advisories/61387 - http://www.ubuntu.com/usn/USN-2372-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62022 - https://bugzilla.mozilla.org/show_bug.cgi?id=1062981 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.securitytracker.com/id/1031030 - http://secunia.com/advisories/62023 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html - http://www.debian.org/security/2014/dsa-3050 - http://www.securityfocus.com/bid/70427 - http://www.de
11/msg00000.html - http://www.debian.org/security/2014/dsa-3050 - http://www.securityfocus.com/bid/70427 - http://www.debian.org/security/2014/dsa-3061
CVE ID: CVE-2014-1587 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1080312 - http://www.mo
/opensuse-security-announce/2015-01/msg00024.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1080312 - http://www.mozilla.org/security/announce/2014/mfsa2014-83.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1042567 - http://www.securityfocus.com/bid/71391 - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=1079729 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2014/dsa-3090 - https://bugzilla.mozilla.org/show_bug.cgi?id=1072847 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1089207 - http://www.debian
nsuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1089207 - http://www.debian.org/security/2014/dsa-3092
CVE ID: CVE-2014-1588 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1086842 - http://www.mozilla.org/security/announce/2014/mfsa2014-83.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1073577 - https://bugzilla.mozilla.o
urity/announce/2014/mfsa2014-83.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1073577 - https://bugzilla.mozilla.org/show_bug.cgi?id=1064835 - https://bugzilla.mozilla.org/show_bug.cgi?id=1096026 - https://bugzilla.mozilla.org/show_bug.cgi?id=1037830 - https://bugzilla.mozilla.org/show_bug.cgi?id=1077687 - https://bugzilla.mozilla.org/show_bug.cgi?id=1023158 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1048517 - https://bugzilla.mozilla.org/show_bug.cgi?id=1075546 - https://bugzilla.mozilla.org/show_bug.cgi?id=1026037 - https://bugzilla.mozilla.org/show_bug.cg
how_bug.cgi?id=1075546 - https://bugzilla.mozilla.org/show_bug.cgi?id=1026037 - https://bugzilla.mozilla.org/show_bug.cgi?id=1013001
CVE ID: CVE-2014-1589 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-84.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1043787
CVE ID: CVE-2014-1590 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-85.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.moz
org/opensuse-security-announce/2015-01/msg00024.html - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=1087633 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.securityfocus.com/bid/71397 - http://www.debian.org/security/2014/dsa-3090 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2014/dsa-3092
CVE ID: CVE-2014-1591 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1069762 - http://www.mozilla.org/security/announce/2014/mfsa2014-86.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
CVE ID: CVE-2014-1592 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - http://www.securityfocus.com/bid/71398 - https://security.gentoo.org/glsa/201504-
urity-announce/2015-01/msg00024.html - http://www.securityfocus.com/bid/71398 - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=1088635 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2014/dsa-3090 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.mozilla.org/security/announce/2014/mfsa2014-87.html - http://www.debian.org/security/2014/dsa-3092
CVE ID: CVE-2014-1593 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:42:36.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1085175 - https://security.gentoo.org/glsa/201504-01 - http://www.securityfocus.c
//bugzilla.mozilla.org/show_bug.cgi?id=1085175 - https://security.gentoo.org/glsa/201504-01 - http://www.securityfocus.com/bid/71395 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.mozilla.org/security/announce/2014/mfsa2014-88.html - http://www.debian.org/security/2014/dsa-3090 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2014/dsa-3092
CVE ID: CVE-2014-1594 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:50:09.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - https://security.gentoo.org/glsa/201504-01 - http://www.securityfocus.com/bid/71396 - https://bugzilla.mozilla.org/show
https://security.gentoo.org/glsa/201504-01 - http://www.securityfocus.com/bid/71396 - https://bugzilla.mozilla.org/show_bug.cgi?id=1074280 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2014/dsa-3090 - http://www.mozilla.org/security/announce/2014/mfsa2014-89.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2014/dsa-3092
CVE ID: CVE-2014-1595 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T09:50:09.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1092855 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.
g/show_bug.cgi?id=1092855 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-90.html - http://support.apple.com/HT204244 - http://www.reddit.com/r/netsec/comments/2ocxac/apple_coregraphics_framework_on_os_x_1010_is/ - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-1596 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1597 State: PUBLISHED Published: 2014-02-27T15:00:00 Last Updated: 2024-08-06T09:50:09.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91269 - http://secunia.com/advisories/56931 - http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=141 - http://www.csnc.ch/misc/files/advisories/CVE-2014-1597_i-doit_SQL_Injection.tx
single-news/?tx_ttnews%5Btt_news%5D=141 - http://www.csnc.ch/misc/files/advisories/CVE-2014-1597_i-doit_SQL_Injection.txt - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0154.html - http://www.securityfocus.com/bid/65557
CVE ID: CVE-2014-1598 State: PUBLISHED Published: 2020-01-08T13:51:02 Last Updated: 2024-08-06T09:50:09.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: centurystar 7.12 ActiveX Control has a Stack Buffer Overflow Additional Analyst Notes: - CVE Program Container: References: - https://support.ixiacom.com/strikes/exploits/scada/cve_2014_1598_CenturyStar_ActiveX_Control_SetMyAddress_bo.xml
CVE ID: CVE-2014-1599 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T09:50:09.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) dns, (2) dhcp, (3) nat, (4) route, or (5) lan in network/; or (6) wifi/config. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65973 - http://www.securityfocus.com/archive/1/531349/100/0/threaded
CVE ID: CVE-2014-1603 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T09:50:09.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to admin/load.php or (2) user, (3) email, or (4) name parameter in a Save Settings action to admin/settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/May/53 - https://raw.githubusercontent.com/pedrib/PoC/master/getsimplecms-3.3.1.txt - http://www.securityfocus.com/bid/67337
CVE ID: CVE-2014-1604 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:50:09.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/17/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90593 - http://www.osvdb.org/102202 - http://secunia.com/advisories/56429 - https://github.com/alex/rply/commit/fc9bbcd25b0b4f09bbd6339f710ad24c129d5d7c -
- http://secunia.com/advisories/56429 - https://github.com/alex/rply/commit/fc9bbcd25b0b4f09bbd6339f710ad24c129d5d7c - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=735263 - http://www.openwall.com/lists/oss-security/2014/01/18/4
CVE ID: CVE-2014-1607 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T09:50:09.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EventCalendar module for Drupal 7.14 allows remote attackers to inject arbitrary web script or HTML via the year parameter to eventcalander/. NOTE: this issue has been disputed by the Drupal Security Team; it may be site-specific. If so, then this CVE will be REJECTed in the future Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530876/100/0/threaded - http://osvdb.org/102574 - https://groups.drupal.org/node/402023
CVE ID: CVE-2014-1608 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T09:50:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a mc_issue_attachment_get SOAP request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1063111 - http://osvdb.org/103118 - http://www.ocert.org/advisories/ocert-2014-001.html - http://www.debian.org/security/2014/dsa-3030 - http://www.securityfocus.com/bid/65445 - https:
ies/ocert-2014-001.html - http://www.debian.org/security/2014/dsa-3030 - http://www.securityfocus.com/bid/65445 - https://github.com/mantisbt/mantisbt/commit/00b4c17088fa56594d85fe46b6c6057bb3421102 - http://www.mantisbt.org/bugs/view.php?id=16879 - http://secunia.com/advisories/61432
CVE ID: CVE-2014-1609 State: PUBLISHED Published: 2014-03-20T16:00:00 Last Updated: 2024-08-06T09:50:09.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the (1) mc_project_get_attachments function in api/soap/mc_project_api.php; the (2) news_get_limited_rows function in core/news_api.php; the (3) summary_print_by_enum, (4) summary_print_by_age, (5) summary_print_by_developer, (6) summary_print_by_reporter, or (7) summary_print_by_category function in core/summary_api.php; the (8) create_bug_enum_summary or (9) enum_bug_group fu
(7) summary_print_by_category function in core/summary_api.php; the (8) create_bug_enum_summary or (9) enum_bug_group function in plugins/MantisGraph/core/graph_api.php; (10) bug_graph_bycategory.php or (11) bug_graph_bystatus.php in plugins/MantisGraph/pages/; or (12) proj_doc_page.php, related to use of the db_query function, a different vulnerability than CVE-2014-1608. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65461 - https://bugzilla.redhat.com/show_bug.cgi?id=1063111 - http://www.ocert.org/advisories/ocert-2014-001.html - http://www.debian.org/security/2014/dsa-3030 - https://github.com/mantisbt/mantisbt/commit/7efe0175f0853e18ebf
01.html - http://www.debian.org/security/2014/dsa-3030 - https://github.com/mantisbt/mantisbt/commit/7efe0175f0853e18ebfacedfd2374c4179028b3f - http://secunia.com/advisories/61432 - http://www.mantisbt.org/bugs/view.php?id=16880
CVE ID: CVE-2014-1610 State: PUBLISHED Published: 2014-01-30T23:00:00 Last Updated: 2024-08-06T09:50:09.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php. Additional Analyst Notes: - CVE Program C
tors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/31329/ - http://www.checkpoint.com/threatcloud-central/articles/2014-01-28-tc-researchers-discover.html - http://www.checkpoint.com/defense/advisories/public/2014/cpai-26-jan.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=60339 - http://secunia.com/advisories/57472 - https://gerrit.wikimedia.org/r/#/c/110215/ - http://www.debian.org/security/2014/dsa-2891 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000140.html - http://www.securitytracker.com/id/1029707 - http://www.securityfocus.co
il/mediawiki-announce/2014-January/000140.html - http://www.securitytracker.com/id/1029707 - http://www.securityfocus.com/bid/65223 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127942.html - https://gerrit.wikimedia.org/r/#/c/110069/2/includes/media/Bitmap.php - http://www.osvdb.org/102631 - https://bugzilla.wikimedia.org/attachment.cgi?id=14361&action=diff - https://bugzilla.wikimedia.org/attachment.cgi?id=14384&action=diff - http://secunia.com/advisories/56695 - https://gerrit.wikimedia.org/r/#/c/110069/ - http://osvdb.org/102630 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html
CVE ID: CVE-2014-1611 State: PUBLISHED Published: 2014-01-30T18:00:00 Last Updated: 2024-08-06T09:50:09.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the contact name field. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2173321 - http://packetstormsecurity.com/files/124803/Drupal-Anonymous-Posting-7.x-Cross-Site-Scripting.html - http://secunia.com/advisories/56476 - http://osvdb.org/102126 - http://seclists.org/fulldisclosure/2014/Jan/77 - https://exchange.xforce.
m/advisories/56476 - http://osvdb.org/102126 - http://seclists.org/fulldisclosure/2014/Jan/77 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90526 - https://drupal.org/node/2173437