Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ugreport.cgi?bug=742768 - http://www.securityfocus.com/archive/1/531588 - http://secunia.com/advisories/59203 - http://bugs.cacti.net/view.php?id=2431 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html - http://www.securityfocus.com/bid/66390 - http://secunia.com/advisories/57647 - http://www.debian.org/security/2014/dsa-2970 - http://packetstormsecurity.com/files/125849/Deutsche-Telekom-CERT-Advisory-DTC-A-20140324-001.html - https://security.gentoo.org/glsa/201509-03
CVE ID: CVE-2014-2327 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T10:14:25.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55076671/index.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html - http://www.secu
ian.org/cgi-bin/bugreport.cgi?bug=742768 - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html - http://www.securityfocus.com/archive/1/531588 - http://secunia.com/advisories/59203 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - http://www.securityfocus.com/bid/66392 - http://www.debian.org/security/2014/dsa-2970 - https://security.gentoo.org/glsa/201509-03
CVE ID: CVE-2014-2328 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T10:14:25.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131821.html - http://bugs.cacti.net/view.php?id=2433 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 - http://svn.cacti.net/viewvc?view=rev&revision=7442 - http://www.securityfocus.com/archive/1/531588 - http://secun
2768 - http://svn.cacti.net/viewvc?view=rev&revision=7442 - http://www.securityfocus.com/archive/1/531588 - http://secunia.com/advisories/59203 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html - http://www.debian.org/security/2014/dsa-2970 - https://security.gentoo.org/glsa/201509-03 - http://www.securityfocus.com/bid/66387
CVE ID: CVE-2014-2329 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T10:14:25.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allow remote authenticated users to inject arbitrary web script or HTML via the (1) agent string for a check_mk agent, a (2) crafted request to a monitored host, which is not properly handled by the logwatch module, or other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531656 - http://www.securityfocus.com/archive/1/531594
CVE ID: CVE-2014-2330 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T10:14:25.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Multisite GUI in Check_MK before 1.2.5i2 allow remote attackers to hijack the authentication of users for requests that (1) upload arbitrary snapshots, (2) delete arbitrary files, or possibly have other unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mathias-kettner.de/check_mk_werks.php?werk_id=0766 - http://www.securityfocus.com/archive/1/531594 - http://www.securityfocus.com/bid/66389
CVE ID: CVE-2014-2331 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T10:14:25.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531656 - http://www.securityfocus.com/archive/1/531594
CVE ID: CVE-2014-2332 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T10:14:25.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531656 - http://www.securityfocus.com/archive/1/531594
CVE ID: CVE-2014-2333 State: PUBLISHED Published: 2014-04-11T14:00:00 Last Updated: 2024-08-06T10:14:25.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57746 - http://www.securityfocus.com/bid/66756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92598 - http://wordpress.org/plugins/lazyest-gallery/changelog
CVE ID: CVE-2014-2334 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T10:14:25.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-033/ - http://secunia.com/advisories/61309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98477 - http://www.securityfocus.com/bid/70887
CVE ID: CVE-2014-2335 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T10:14:25.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-033/ - http://secunia.com/advisories/61309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98478
CVE ID: CVE-2014-2336 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T10:14:25.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-033/ - http://www.securityfocus.com/bid/70889 - http://secunia.com/advisories/61309 - https://exchange.xforce.ibmcloud.com/vu
- http://www.securityfocus.com/bid/70889 - http://secunia.com/advisories/61309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98479
CVE ID: CVE-2014-2338 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-06T10:14:25.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html - http://www.debian.org/security/2014/dsa-
00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html - http://www.debian.org/security/2014/dsa-2903 - http://secunia.com/advisories/57823 - http://www.securityfocus.com/bid/66815 - http://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html
CVE ID: CVE-2014-2339 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T10:14:25.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) subject or (2) content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66228 - http://seclists.org/fulldisclosure/2014/Mar/299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91814
CVE ID: CVE-2014-2340 State: PUBLISHED Published: 2014-04-03T15:00:00 Last Updated: 2024-08-06T10:14:25.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32701 - http://www.securityfocus.com/bid/66280 - https://www.htbridge.com/advisory/HTB23206 - http://secunia.com/advisories/57362 - http://www.securityfocus.com/archive/1/531712/100/0/
ridge.com/advisory/HTB23206 - http://secunia.com/advisories/57362 - http://www.securityfocus.com/archive/1/531712/100/0/threaded - http://wordpress.org/plugins/xcloner-backup-and-restore/changelog/
CVE ID: CVE-2014-2341 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T10:14:25.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57856 - http://www.securityfocus.com/bid/66805 - http://forums.cubecart.com/topic/48427-cubecart-529-relased/ - http://www.osvdb.org/105784 - http://www.securitytracker.com/id/1030086 - http://www.exploit-db.com/exploits/32830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92526
CVE ID: CVE-2014-2342 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2025-10-02T22:17:05.858Z Severity: N/A (CVSS 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P) Vendors: Triangle MicroWorks Products: SCADA Data Gateway Problem Types: CWE-400 Description: Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-01
CVE ID: CVE-2014-2343 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2025-10-02T22:19:28.957Z Severity: N/A (CVSS 1.2 AV:L/AC:H/Au:N/C:N/I:N/A:P) Vendors: Triangle MicroWorks Products: SCADA Data Gateway Problem Types: CWE-400 Description: Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-01
CVE ID: CVE-2014-2344 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-2345 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2025-10-02T22:28:23.701Z Severity: N/A (CVSS 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C) Vendors: COPA-DATA Products: zenon DNP3 NG driver (DNP3 master), zenon DNP3 Process Gateway (DNP3 outstation) Problem Types: CWE-20 Description: COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.copadata.com/no_cac
ed DNP3 packet over TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=814&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase - https://www.cisa.gov/news-events/ics-advisories/icsa-14-154-01 - http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=813&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase
CVE ID: CVE-2014-2346 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2025-10-02T22:27:22.187Z Severity: N/A (CVSS 4 AV:L/AC:H/Au:N/C:N/I:N/A:C) Vendors: COPA-DATA Products: zenon DNP3 NG driver (DNP3 master), zenon DNP3 Process Gateway (DNP3 outstation) Problem Types: CWE-20 Description: COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service (infinite loop and process crash) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://www.copadata.com
afted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=814&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase - https://www.cisa.gov/news-events/ics-advisories/icsa-14-154-01 - http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=813&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase
CVE ID: CVE-2014-2347 State: PUBLISHED Published: 2014-05-06T10:00:00 Last Updated: 2025-10-02T22:36:07.818Z Severity: N/A (CVSS 7 AV:N/AC:M/Au:S/C:C/I:P/A:N) Vendors: AMTELCO Products: miSecureMessages Problem Types: CWE-200 Description: Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-121-01 - https://service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf
CVE ID: CVE-2014-2349 State: PUBLISHED Published: 2014-05-22T20:00:00 Last Updated: 2025-10-31T22:56:34.809Z Severity: N/A (CVSS 6.2 AV:L/AC:L/Au:S/C:N/I:C/A:C) Vendors: Emerson Products: DeltaV Problem Types: CWE-285 Description: Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-133-02
CVE ID: CVE-2014-2350 State: PUBLISHED Published: 2014-05-22T20:00:00 Last Updated: 2025-10-31T22:55:07.498Z Severity: N/A (CVSS 2.4 AV:L/AC:H/Au:S/C:N/I:P/A:P) Vendors: Emerson Products: DeltaV Problem Types: CWE-798 Description: Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-133-02
CVE ID: CVE-2014-2351 State: PUBLISHED Published: 2014-05-20T10:00:00 Last Updated: 2025-10-03T16:17:47.843Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CSWorks Products: CSWorks Problem Types: CWE-89 Description: SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-135-01 - http://www.controlsystemworks.com/blogengine/post/2014/05/08/Important-CSWorks-security-release-2552330 - http://www.securityfocus.com/b
olsystemworks.com/blogengine/post/2014/05/08/Important-CSWorks-security-release-2552330 - http://www.securityfocus.com/bid/67427
CVE ID: CVE-2014-2352 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2025-10-03T16:31:41.797Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N) Vendors: Cogent Products: DataHub Problem Types: CWE-22 Description: The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an attacker to cause the web server component to enter a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02 -
l Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02 - http://cogentdatahub.com/Download_Software.html
CVE ID: CVE-2014-2353 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2025-10-03T16:30:38.263Z Severity: N/A (CVSS 7.1 AV:N/AC:M/Au:N/C:C/I:N/A:N) Vendors: Cogent Products: DataHub Problem Types: CWE-80 Description: Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02 - http://cogentdatahub.com/Download_Software.html
CVE ID: CVE-2014-2354 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2025-10-03T16:34:03.154Z Severity: N/A (CVSS 6 AV:L/AC:H/Au:S/C:C/I:C/A:C) Vendors: Cogent Products: DataHub Problem Types: CWE-916 Description: Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02 - http://cogentdatahub.com/Download_Software.html
CVE ID: CVE-2014-2355 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-10-03T17:01:02.978Z Severity: N/A (CVSS 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C) Vendors: GE Products: Proficy HMI/SCADA–CIMPLICITY Problem Types: CWE-119 Description: The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-289-02
CVE ID: CVE-2014-2356 State: PUBLISHED Published: 2014-07-30T14:00:00 Last Updated: 2025-10-03T17:08:22.828Z Severity: N/A (CVSS 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N) Vendors: Innominate Products: mGuard Problem Types: CWE-200 Description: Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02
CVE ID: CVE-2014-2357 State: PUBLISHED Published: 2014-08-11T22:00:00 Last Updated: 2025-10-03T17:14:03.235Z Severity: N/A (CVSS 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C) Vendors: SUBNET Products: SubSTATION Server 2 Telegyr 8979 Master Protocol Problem Types: CWE-20 Description: The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service (persistent service crash) via a long RTU-to-Master message. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-196-01
CVE ID: CVE-2014-2358 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2025-10-03T17:19:27.344Z Severity: N/A (CVSS 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P) Vendors: Fox-IT Products: DataDiode Appliance Problem Types: CWE-352 Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/
sions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-269-02
CVE ID: CVE-2014-2359 State: PUBLISHED Published: 2018-04-06T16:00:00 Last Updated: 2024-08-06T10:14:25.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94788 - https://ioactive.com/pdfs/IOActive_Advisory_OleumTech.pdf
CVE ID: CVE-2014-2360 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2025-10-06T17:29:09.954Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:N/A:P) Vendors: OleumTech Products: WIO DH2 Wireless Gateway, Sensor Wireless I/O Modules Problem Types: CWE-20 Description: OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68797 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a - http://support.oleumtech.com/
CVE ID: CVE-2014-2361 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2025-10-06T17:31:55.409Z Severity: N/A (CVSS 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C) Vendors: OleumTech Products: WIO DH2 Wireless Gateway, Sensor Wireless I/O Modules Problem Types: CWE-320 Description: OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68797 - https://www.ci