Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/2014/01/10/3 - http://secunia.com/advisories/59017 - http://secunia.com/advisories/56287 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:096 - http://secunia.com/advisories/58783 - http://secunia.com/advisories/58918 - http://secunia.com/advisories/60738 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734747 - https://bugzilla.redhat.com/show_bug.cgi?id=1051421 - http://secunia.com/advisories/60770 - http://rhn.redhat.com/errata/RHSA-2014-0747.html - http://jinja.pocoo.org/docs/changelog/ - http://www.gentoo.org/security/en/glsa/glsa-201408-13.xml - http://openwall.com/lists/oss-security/2014/01/10/2 - http://advisories.mageia.org/MGASA-2014-0028.html - http://rhn.redhat.c
//openwall.com/lists/oss-security/2014/01/10/2 - http://advisories.mageia.org/MGASA-2014-0028.html - http://rhn.redhat.com/errata/RHSA-2014-0748.html
CVE ID: CVE-2014-1403 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T09:42:35.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Feb/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90876 - https://github.com/oyvindkinsey/easyXDM/commit/a3194d32c25a0d27a10a47304eb9c9be93ffbf13#diff-6489956f1e1f52236929b4d33cbeb2db - http://secunia.com/advisories/56634 - https://github.com/oy
47304eb9c9be93ffbf13#diff-6489956f1e1f52236929b4d33cbeb2db - http://secunia.com/advisories/56634 - https://github.com/oyvindkinsey/easyXDM/releases/tag/2.4.19 - http://blog.kotowicz.net/2014/01/xssing-with-shakespeare-name-calling.html - http://osvdb.org/102803 - http://www.securityfocus.com/bid/65291
CVE ID: CVE-2014-1405 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:42:35.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup. Additional Analyst Notes: - CVE Program Container: References: - http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf - http://osvdb.org/101916 - http://osvdb.org/101917
CVE ID: CVE-2014-1406 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:42:35.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter in a Refresh action. Additional Analyst Notes: - CVE Program Container: References: - http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
CVE ID: CVE-2014-1407 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:42:35.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101919 - http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf - http://osvdb.org/101921
CVE ID: CVE-2014-1408 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T09:42:35.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf - http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf
CVE ID: CVE-2014-1409 State: PUBLISHED Published: 2020-01-08T15:29:10 Last Updated: 2024-08-06T09:42:35.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92351 - https://packetstormsecurity.com/files/cve/CVE-2014-1409
CVE ID: CVE-2014-1418 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T09:42:35.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61281 - http://www.debian.org/security/2014/dsa-2934 - http://ubuntu.com/usn/usn-2212-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00
org/security/2014/dsa-2934 - http://ubuntu.com/usn/usn-2212-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.openwall.com/lists/oss-security/2014/05/15/3 - https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/ - http://www.openwall.com/lists/oss-security/2014/05/14/10
CVE ID: CVE-2014-1419 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T09:42:35.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/acpi-support/%2Bbug/1340812 - http://secunia.com/advisories/60319 - http://www.ubuntu.com/usn/USN-2297-1 - http://www.debian.org/security/2014/dsa-2984
CVE ID: CVE-2014-1420 State: PUBLISHED Published: 2020-09-10T23:55:14.770958Z Last Updated: 2024-09-16T17:08:12.605Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Canonical Products: ubuntu-ui-toolkit Problem Types: CWE-59 Description: On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1. Additional Analyst Notes: - CVE Program Co
hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1348241 - http://bazaar.launchpad.net/~ubuntu-sdk-team/ubuntu-ui-toolkit/staging/revision/1182
CVE ID: CVE-2014-1421 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T09:42:35.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2411-1
CVE ID: CVE-2014-1422 State: PUBLISHED Published: 2020-07-22T18:05:19.844858Z Last Updated: 2024-09-17T03:18:34.686Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Canonical Products: trust-store (Ubuntu), trust-store (Ubuntu RTM) Problem Types: CWE-275 Description: In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in src/core/trust/impl/sqlite3/store.cpp. Fixed in trust-store (Ubuntu) version 1.1.0+15.04.20150123-0ubuntu1 and trust-st
src/core/trust/impl/sqlite3/store.cpp. Fixed in trust-store (Ubuntu) version 1.1.0+15.04.20150123-0ubuntu1 and trust-store (Ubuntu RTM) version 1.1.0+15.04.20150123~rtm-0ubuntu1. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1387734 - https://bazaar.launchpad.net/~phablet-team/trust-store/trunk/revision/82
CVE ID: CVE-2014-1423 State: PUBLISHED Published: 2020-05-07T22:25:16.912816Z Last Updated: 2024-09-16T23:55:55.461Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Ubuntu Products: signon Problem Types: CWE-522 Description: signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oauth tokens for other applications, exposing sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar
ications, exposing sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~online-accounts/signon/upstream/revision/644 - http://bazaar.launchpad.net/~online-accounts/signon/upstream/revision/645 - https://bugs.launchpad.net/ubuntu/+source/signon/+bug/1392380
CVE ID: CVE-2014-1424 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T09:42:35.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2413-1
CVE ID: CVE-2014-1425 State: PUBLISHED Published: 2015-01-07T19:00:00 Last Updated: 2024-08-06T09:42:35.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgroups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2451-1
CVE ID: CVE-2014-1426 State: PUBLISHED Published: 2019-04-22T15:35:58.973609Z Last Updated: 2024-09-16T21:02:51.069Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Ubuntu Products: maas Problem Types: Missing access controls. Description: A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/maas/+milestone/1.9.2
CVE ID: CVE-2014-1427 State: PUBLISHED Published: 2019-04-22T15:35:59.055027Z Last Updated: 2024-09-16T17:27:52.597Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Ubuntu Products: MAAS Problem Types: Cross-site scripting Description: A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/maas/+milestone/1.9.2
CVE ID: CVE-2014-1428 State: PUBLISHED Published: 2019-04-22T15:35:59.093282Z Last Updated: 2024-09-16T18:28:21.706Z Severity: LOW (CVSS 2 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Ubuntu Products: MAAS Problem Types: Insufficient randomness in generated filenames. Description: A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/maas/+milestone/1.9.2
CVE ID: CVE-2014-1429 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1430 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1431 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1432 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1433 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1434 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1435 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1436 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1437 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1438 State: PUBLISHED Published: 2014-01-18T22:00:00 Last Updated: 2024-08-06T09:42:35.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubun
buntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1052914 - http://www.openwall.com/lists/oss-security/2014/01/14/1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.securityfocus.com/bid/64781 - http://www.ubuntu.com/usn/USN-2139-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26bef1318adc1b3a530ecc807ef99346db2aa8b0 - http://www.ubuntu.com/usn/USN-2134-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - http://www.mand
- http://www.ubuntu.com/usn/USN-2134-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:038 - http://www.ubuntu.com/usn/USN-2117-1 - https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0 - http://www.ubuntu.com/usn/USN-2133-1 - http://www.securitytracker.com/id/1029592 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html - https://lkml.org/lkml/2014/1/9/637 - http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/
CVE ID: CVE-2014-1439 State: PUBLISHED Published: 2014-02-05T19:00:00 Last Updated: 2024-08-06T09:42:35.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90979 - https://github.com/facebook/hhvm/commit/95f96e7287effe2fcdfb9a5338d1a7e4f55b083b - http://www.hhvm.com/blog/3287/hhvm-2-4-0
CVE ID: CVE-2014-1441 State: PUBLISHED Published: 2014-05-02T01:00:00 Last Updated: 2024-08-06T09:42:35.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html - http://www.osvdb.org/102966 - http://coreftp.com/forums/viewtopic.php?t=2985707 - http://secunia.com/advisories/56850 - http://seclists.org/fulldisclosure/
//coreftp.com/forums/viewtopic.php?t=2985707 - http://secunia.com/advisories/56850 - http://seclists.org/fulldisclosure/2014/Feb/39
CVE ID: CVE-2014-1442 State: PUBLISHED Published: 2014-05-02T01:00:00 Last Updated: 2024-08-06T09:42:35.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html - http://www.osvdb.org/102967 - http://coreftp.com/forums/viewtopic.php?t=2985707 - http://secunia.com/advisories/56850 - http://seclists.org/fulldisclosure/2014/Feb/39
CVE ID: CVE-2014-1443 State: PUBLISHED Published: 2014-05-02T01:00:00 Last Updated: 2024-08-06T09:42:35.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html - http://www.osvdb.org/102968 - http://coreftp.com/forums/viewtopic.php?t=2985707 - http://secunia.com/advisories/56850 - http://seclists.org/fulldiscl
http://coreftp.com/forums/viewtopic.php?t=2985707 - http://secunia.com/advisories/56850 - http://seclists.org/fulldisclosure/2014/Feb/39
CVE ID: CVE-2014-1444 State: PUBLISHED Published: 2014-01-18T22:00:00 Last Updated: 2024-08-06T09:42:35.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fst_get_iface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCWANDEV ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 - http://www.securityfocus.com/bid
ntu.com/usn/USN-2128-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 - http://www.securityfocus.com/bid/64952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90443 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=96b340406724d87e4621284ebac5e059d67b2194 - http://www.openwall.com/lists/oss-security/2014/01/15/3 - https://github.com/torvalds/linux/commit/96b340406724d87e4621284ebac5e059d67b2194 - https://bugzilla.redhat.com/show_bug.cgi?id=1053610
CVE ID: CVE-2014-1445 State: PUBLISHED Published: 2014-01-18T22:00:00 Last Updated: 2024-08-06T09:42:35.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b13d06c95
ernel/v3.x/ChangeLog-3.11.7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b13d06c9584b4eb773f1e80bbaedab9a1c344e1 - https://bugzilla.redhat.com/show_bug.cgi?id=1053613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90444 - http://www.openwall.com/lists/oss-security/2014/01/15/3 - https://github.com/torvalds/linux/commit/2b13d06c9584b4eb773f1e80bbaedab9a1c344e1 - http://www.securityfocus.com/bid/64953
CVE ID: CVE-2014-1446 State: PUBLISHED Published: 2014-01-18T22:00:00 Last Updated: 2024-08-06T09:42:35.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/
sn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.securityfocus.com/bid/64954 - http://www.ubuntu.com/usn/USN-2139-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html - http://www.ubuntu.com/usn/USN-2134-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:038 - http://www.ubuntu.com/usn/USN-2117-1 - http://www.ubuntu.com/usn/USN-2133-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90445 - http://lists.fedo
- http://www.ubuntu.com/usn/USN-2133-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90445 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html - http://www.openwall.com/lists/oss-security/2014/01/15/3 - https://github.com/torvalds/linux/commit/8e3fbf870481eb53b2d3a322d1fc395ad8b367ed - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8e3fbf870481eb53b2d3a322d1fc395ad8b367ed - https://bugzilla.redhat.com/show_bug.cgi?id=1053620
CVE ID: CVE-2014-1447 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T09:42:35.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2093-1 - http://secunia.com/advisories/56446 - http://www.debian.org/security/2014/dsa-2846 - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - ht
://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://secunia.com/advisories/56321 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html - http://www.securitytracker.com/id/1029695 - http://rhn.redhat.com/errata/RHSA-2014-0103.html - https://bugzilla.redhat.com/show_bug.cgi?id=1047577 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html