Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3399 State: PUBLISHED Published: 2014-10-07T10:00:00 Last Updated: 2024-08-06T10:43:05.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and consequently cause a denial of service (portal outage or system reload), via crafted HTTP requests, aka Bug ID CSCup54208. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert
54208. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=35989 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399
CVE ID: CVE-2014-3400 State: PUBLISHED Published: 2014-10-05T01:00:00 Last Updated: 2024-08-06T10:43:05.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3400
CVE ID: CVE-2014-3402 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:43:05.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36014 - http://tools.cisco.com/security
tainer: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36014 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3402
CVE ID: CVE-2014-3403 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:43:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3403
CVE ID: CVE-2014-3404 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:43:05.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3404
CVE ID: CVE-2014-3405 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T10:43:05.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks (aka RPL) on both the Autonomic Control Plane (ACP) and external Autonomic Networking Infrastructure (ANI) interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an ANI interface, aka Bug ID CSCuq22673. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3405
CVE ID: CVE-2014-3406 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36078 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3406
CVE ID: CVE-2014-3407 State: PUBLISHED Published: 2014-11-28T02:00:00 Last Updated: 2024-08-06T10:43:05.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=36542 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3407
CVE ID: CVE-2014-3408 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:43:05.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70594 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3408 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36099
CVE ID: CVE-2014-3409 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T10:43:05.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61799 - http://www.securitytracker.com/id/1031119 - http://www.securityfocus.com/bid/70715 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409 - https://
ecurityfocus.com/bid/70715 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97758 - http://tools.cisco.com/security/center/viewAlert.x?alertId=36184
CVE ID: CVE-2014-3410 State: PUBLISHED Published: 2014-12-20T00:00:00 Last Updated: 2024-08-06T10:43:05.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then (1) sniffing the network for a syslog message or (2) reading a syslog message in a file on a syslog server, aka Bug IDs CSCuq22357 and CSCur41860. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3410
CVE ID: CVE-2014-3411 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T10:43:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58684 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10625 - http://www.securitytracker.com/id/1030253 - http://www.securityfocus.com/bid/67445
CVE ID: CVE-2014-3412 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T10:43:05.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67454 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10626 - http://www.securitytracker.com/id/1030254
CVE ID: CVE-2014-3413 State: PUBLISHED Published: 2018-04-05T17:00:00 Last Updated: 2024-08-06T10:43:05.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2014-01 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10627
CVE ID: CVE-2014-3414 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T10:43:05.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authentication of administrators for requests that add administrative privileges to a user via the admin parameter to admin/administrators. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23214 - http://packetstormsecurity.com/files/126859/Sharetronix-3.3-Cross-Site-Request-Forgery-SQL-Injection.html
CVE ID: CVE-2014-3415 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T10:43:05.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the invite_users[] parameter to the /invite page for a group. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23214 - http://packetstormsecurity.com/files/126859/Sharetronix-3.3-Cross-Site-Request-Forgery-SQL-Injection.html - http://www.securityfocus.com/bid/67680
CVE ID: CVE-2014-3416 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T10:43:05.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to manage arbitrary portlets by leveraging the SUBSCRIBE permission for the portlet-admin portlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.jasig.org/uportal/download/uportal-4-0-13-1 - https://issues.jasig.org/browse/UP-4105
CVE ID: CVE-2014-3417 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T10:43:05.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.jasig.org/uportal/download/uportal-4-0-13-1 - https://issues.jasig.org/browse/UP-4106
CVE ID: CVE-2014-3418 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T10:43:05.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68471 - http://www.securityfocus.com/archive/1/532709/100/0/threaded - http://seclists.org/fulldisclosure/2014/Jul/35 - http://www.exploit-db.com/exploits/34030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94449 - https://github.com/depthsecurity/NetM
.com/exploits/34030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94449 - https://github.com/depthsecurity/NetMRI-2014-3418 - http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
CVE ID: CVE-2014-3419 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T10:43:05.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68473 - http://packetstormsecurity.com/files/127410/Infoblox-6.8.4.x-Weak-MySQL-Password.html - http://www.securityfocus.com/archive/1/532710/100/0/threaded - http://www.securitytracker.com/id/1030542 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
/532710/100/0/threaded - http://www.securitytracker.com/id/1030542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94450 - https://github.com/depthsecurity/NetMRI-2014-3418 - http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
CVE ID: CVE-2014-3421 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:05.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00055.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:117 - http://advisories.mageia.org/MGASA-2014-0250.html - http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8
CVE ID: CVE-2014-3422 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:05.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:117 - http://advisories.mageia.org/MGASA-2014-0250.html - http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00056.html
CVE ID: CVE-2014-3423 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:06.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00057.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:117 - http://advisories.mageia.org/MGASA-2014-0250.html - http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8
CVE ID: CVE-2014-3424 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:05.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00060.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:117 - http://advisories.mageia.org/MGASA-2014-0250.html - http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8
CVE ID: CVE-2014-3425 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:05.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/xmosaic.pid file for every possible PID. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00057.html
CVE ID: CVE-2014-3426 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T10:43:06.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/Mosaic.pid file for every possible PID. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/07/7 - http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00057.html
CVE ID: CVE-2014-3427 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T10:43:05.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127081/Yealink-VoIP-Phones-XSS-CRLF-Injection.html - http://seclists.org/fulldisclosure/2014/Jun/74 - http://www.securityfocus.com/archive/1/532410/100/0/threaded
CVE ID: CVE-2014-3428 State: PUBLISHED Published: 2014-06-16T18:00:00 Last Updated: 2024-08-06T10:43:05.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68023 - http://packetstormsecurity.com/files/127081/Yealink-VoIP-Phones-XSS-CRLF-Injection.html - http://seclists.org/fulldisclosure/2014/Jun/74 - http://www.securityfocus.com/archive/1/532410/100/0/threaded
CVE ID: CVE-2014-3429 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:43:05.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00039.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94497 - https://github.com/ipython/ipython/pull/4845 - https://bugzilla.redhat.com/show_bug.cgi?id=1119890 - http://advisories.mageia
://github.com/ipython/ipython/pull/4845 - https://bugzilla.redhat.com/show_bug.cgi?id=1119890 - http://advisories.mageia.org/MGASA-2014-0320.html - http://lambdaops.com/cross-origin-websocket-hijacking-of-ipython - http://seclists.org/oss-sec/2014/q3/152 - http://permalink.gmane.org/gmane.comp.python.ipython.devel/13198 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:160
CVE ID: CVE-2014-3430 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T10:43:06.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/09/4 - http://secunia.com/advisories/59051 - http://www.openwall.com/lists/oss-security/2014/05/09/8 - http://secunia.com/advisories/59537 - http
/advisories/59051 - http://www.openwall.com/lists/oss-security/2014/05/09/8 - http://secunia.com/advisories/59537 - http://advisories.mageia.org/MGASA-2014-0223.html - http://permalink.gmane.org/gmane.mail.imap.dovecot/77499 - http://www.debian.org/security/2014/dsa-2954 - http://secunia.com/advisories/59552 - http://www.ubuntu.com/usn/USN-2213-1 - http://www.securityfocus.com/bid/67306 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:113 - http://rhn.redhat.com/errata/RHSA-2014-0790.html - http://linux.oracle.com/errata/ELSA-2014-0790.html - http://dovecot.org/pipermail/dovecot-news/2014-May/000273.html
CVE ID: CVE-2014-3431 State: PUBLISHED Published: 2014-06-21T15:00:00 Last Updated: 2024-08-06T10:43:05.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030454 - http://www.securityfocus.com/bid/68077 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advi
www.securityfocus.com/bid/68077 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140620_00 - http://secunia.com/advisories/59421
CVE ID: CVE-2014-3432 State: PUBLISHED Published: 2014-06-27T14:00:00 Last Updated: 2024-08-06T10:43:06.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68160 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 - http://secunia.com/advisories/59561 - http://secunia.com/advisories/59538 - ht
ecurity_advisory&year=&suid=20140625_00 - http://secunia.com/advisories/59561 - http://secunia.com/advisories/59538 - http://www.securitytracker.com/id/1030472
CVE ID: CVE-2014-3433 State: PUBLISHED Published: 2014-06-27T14:00:00 Last Updated: 2024-08-06T10:43:05.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68161 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 - http://www.securitytracker.com/id
dates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 - http://www.securitytracker.com/id/1030472
CVE ID: CVE-2014-3434 State: PUBLISHED Published: 2014-08-06T19:00:00 Last Updated: 2024-08-06T10:43:06.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00 - http://www.osvdb.org/109663 - http://www.securityfocus.com/bid/68946 -