Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6584 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031594 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CVE ID: CVE-2014-6585 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html - http://www.debian.org/security/2015/dsa-3144 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.vmware.com/security/adviso
om/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://www.ubuntu.com/usn/USN-2487-1 - http://rhn.redhat.com/errata/RHSA-2015-0085.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - https://www-304.ibm.com/support
rity-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - http://www.debian.org/security/2015/dsa-3323 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://www.securityfocus.com/bid/72173 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securit
1.html - http://www.securityfocus.com/bid/72173 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/1031580 - http://www.debian.org/security/2015/dsa-3147
CVE ID: CVE-2014-6586 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031577 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CVE ID: CVE-2014-6587 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html - http://www.debian.org/security/2015/dsa-3144 - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/securi
9.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://www.ubuntu.com/usn/USN-2487-1 - http://rhn.redhat.com/errata/RHSA-2015-0085.html - http://rhn.redhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/2
://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - http://www.securityfocus.com/bid/72168 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/1031580 - http://www.debian.org/security/2015/dsa-3147
CVE ID: CVE-2014-6588 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-27 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/
/glsa/201612-27 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
CVE ID: CVE-2014-6589 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-27 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/
CVE ID: CVE-2014-6590 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6595, and CVE-2015-0427. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-27 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/
CVE ID: CVE-2014-6591 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html - http://www.debian.org/security/2015/dsa-3144 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.v
144 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://www.ubuntu.com/usn/USN-2487-1 - http://www.securityfocus.com/bid/72175 - http://rhn.redhat.com/errata/RHSA-2015-0085.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redha
entoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/103158
nce/2015-02/msg00001.html - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/1031580 - http://www.debian.org/security/2015/dsa-3147
CVE ID: CVE-2014-6592 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors related to SAML, a different vulnerability than CVE-2015-0389. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CVE ID: CVE-2014-6593 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html - http://www.debian.org/security/2015/dsa-3144 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - https://www.e
44 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://rhn.redhat.com/errata/RHSA-2015-0079.html - https://www.exploit-db.com/exploits/38641/ - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.securityfocus.com/bid/72169 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://www.ubuntu.com/usn/USN-2487-1 - http://packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html - http://rhn.redhat.com/errata/RHSA-2015-0085.html - http://rhn.redhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-s
edhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - https://kc.mcafee.com/corporate/index?page=content&id=SB10104 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-anno
ontent&id=SB10104 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/1031580 - http://www.debian.org/security/2015/dsa-3147
CVE ID: CVE-2014-6594 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securitytracker.com/id/1031589
CVE ID: CVE-2014-6595 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:17:24.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-27 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/
CVE ID: CVE-2014-6596 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:24:34.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securitytracker.com/id/1031578
CVE ID: CVE-2014-6597 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T12:24:35.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031577 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CVE ID: CVE-2014-6598 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T12:24:34.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securitytracker.com/id/1031590
CVE ID: CVE-2014-6599 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T12:24:34.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Email. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.securitytracker.com/id/1031578
CVE ID: CVE-2014-6600 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T12:24:34.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6570 and CVE-2015-0397. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031583 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CVE ID: CVE-2014-6601 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T12:24:34.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html - http://www.debian.org/security/2015/dsa-3144 - http://rhn.redhat.com/errata/RHSA-2015-0079.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/sec
0079.html - http://www.vmware.com/security/advisories/VMSA-2015-0003.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.ubuntu.com/usn/USN-2487-1 - http://www.securityfocus.com/bid/72132 - http://rhn.redhat.com/errata/RHSA-2015-0085.html - http://rhn.redhat.com/errata/RHSA-2015-0086.html - https://security.gentoo.org/glsa/201603-14 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://www.ubuntu.com/usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http:/
usn/USN-2486-1 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www.securitytracker.com/id/1031580 - http://www.debian.org/security/2015/dsa-3147
CVE ID: CVE-2014-6602 State: PUBLISHED Published: 2014-09-22T01:00:00 Last Updated: 2024-08-06T12:24:34.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128320/Nokia-Asha-501-Lock-Bypass.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96195
CVE ID: CVE-2014-6603 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:24:34.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70083 - http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html - http://lists.fedoraproject.org/pipermail/p
cketstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139821.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139630.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96157 - http://www.securityfocus.com/archive/1/533515/100/0/threaded - http://seclists.org/fulldisclosure/2014/Sep/79
CVE ID: CVE-2014-6604 State: PUBLISHED Published: 2018-03-29T18:00:00 Last Updated: 2024-08-06T12:24:34.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/993564/subscribe2 - http://barmat.io/blog/2014/10/01/stored-xss-vulnerability-in-the-wordpress-plugin-subscribe2/
CVE ID: CVE-2014-6607 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T12:24:34.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Sep/71 - http://www.exploit-db.com/exploits/34718 - http://packetstormsecurity.com/files/128321/M-Monit-3.2.2-Cross-Site-Request-Forgery.html
CVE ID: CVE-2014-6609 State: PUBLISHED Published: 2014-11-26T15:00:00 Last Updated: 2024-08-06T12:24:34.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP SUBSCRIBE request for an event package. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2014-009.html
CVE ID: CVE-2014-6610 State: PUBLISHED Published: 2014-11-26T15:00:00 Last Updated: 2024-08-06T12:24:34.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2014-010.html
CVE ID: CVE-2014-6611 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T12:24:35.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/kb36360 - http://secunia.com/advisories/61013
CVE ID: CVE-2014-6616 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T12:24:34.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmware FG-x00-PB_V2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICE_NAME parameter to cgi-bin/CFGhttp/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533903/100/0/threaded - http://packetstormsecurity.com/files/128975/Softing-FG-100-PB-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/70917