Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8238 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8239 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8240 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T13:10:51.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1151307 - http://seclists.org/oss-sec/2014/q4/278 - https://security.gentoo.org/glsa/201612-36 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-271
https://security.gentoo.org/glsa/201612-36 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96947 - http://www.securityfocus.com/bid/70391 - http://seclists.org/oss-sec/2014/q4/300 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8241 State: PUBLISHED Published: 2016-12-14T22:00:00 Last Updated: 2024-08-06T13:10:51.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/278 - https://rhn.redhat.com/errata/RHSA-2015-2233.html - https://bugzilla.redhat.com/show_bug.cgi?id=1151312 - http://www.securityfocus.com/bid/70390 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - ht
w.securityfocus.com/bid/70390 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://seclists.org/oss-sec/2014/q4/300 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8242 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T13:10:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html - http://www.openwall.com/lists/oss-security/2014/08/05/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html - http://www.ope
ecurity/2014/08/05/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html - http://www.openwall.com/lists/oss-security/2014/07/28/1 - https://security.gentoo.org/glsa/201605-04 - https://github.com/librsync/librsync/issues/5 - http://www.openwall.com/lists/oss-security/2014/10/13/2 - https://www.miknet.net/security/optimizing-birthday-attack/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html - https://github.com/librsync/librsync/releases/tag/v1.0.0 - https://bugzilla.redhat.com/show_bug.cgi?id=1126712
CVE ID: CVE-2014-8243 State: PUBLISHED Published: 2014-11-01T10:00:00 Last Updated: 2024-08-06T13:10:50.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/447516
CVE ID: CVE-2014-8244 State: PUBLISHED Published: 2014-11-01T10:00:00 Last Updated: 2024-08-06T13:10:51.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/447516
CVE ID: CVE-2014-8246 State: PUBLISHED Published: 2014-12-16T23:00:00 Last Updated: 2024-08-06T13:10:51.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org
ity-notice-for-ca-lisa-release-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org/vuls/id/343060 - http://www.securityfocus.com/archive/1/534246/100/0/threaded - http://securitytracker.com/id?1031375
CVE ID: CVE-2014-8247 State: PUBLISHED Published: 2014-12-16T23:00:00 Last Updated: 2024-08-06T13:10:51.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org/vuls/id/343060
a-lisa-release-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org/vuls/id/343060 - http://www.securityfocus.com/archive/1/534246/100/0/threaded - http://securitytracker.com/id?1031375
CVE ID: CVE-2014-8248 State: PUBLISHED Published: 2014-12-16T23:00:00 Last Updated: 2024-08-06T13:10:51.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org/vuls/id/343060 - http://www
se-automation.aspx - http://seclists.org/fulldisclosure/2014/Dec/55 - http://www.kb.cert.org/vuls/id/343060 - http://www.securityfocus.com/archive/1/534246/100/0/threaded - http://securitytracker.com/id?1031375
CVE ID: CVE-2014-8266 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T13:10:51.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/546340
CVE ID: CVE-2014-8267 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T13:10:51.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/546340
CVE ID: CVE-2014-8268 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T13:10:51.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/546340
CVE ID: CVE-2014-8269 State: PUBLISHED Published: 2014-12-13T00:00:00 Last Updated: 2024-08-06T13:10:51.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) HWOPOSScale.ocx and (2) HWOPOSSCANNER.ocx in Honeywell OPOS Suite before 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-423/ - http://www.kb.cert.org/vuls/id/659684 - http://www.zerodayinitiative.com/advisories/ZDI-14-424/
CVE ID: CVE-2014-8270 State: PUBLISHED Published: 2014-12-12T11:00:00 Last Updated: 2024-08-06T13:10:51.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-419/ - http://support.numarasoftware.com/support/articles.asp?how=%20AND%20&mode=detail&kcriteria=7508&ID=7654
CVE ID: CVE-2014-8271 State: PUBLISHED Published: 2020-02-06T14:03:57 Last Updated: 2024-08-06T13:10:51.117Z Vendors: Tianocore Products: EDK2 Problem Types: Buffer Overflow Description: Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/edk2/code/16280/ - http://www.kb.cert.org/vuls/id/533140
CVE ID: CVE-2014-8272 State: PUBLISHED Published: 2014-12-19T11:00:00 Last Updated: 2024-08-06T13:10:50.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-9RDQHM - http://www.exploit-db.com/exploits/35770 - http://www.kb.cert.org/vuls/id/843044
CVE ID: CVE-2014-8275 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T13:10:50.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.
al Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2
/www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://www.openssl.org/news/secadv_20150108.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 - http://www.oracle.com/technetwork/security-advisory/cpuoct201
kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - https://github.com/openssl/openssl/commit/cb62ab4b17818fe66d2fed0a7fe71969131c811b - http://rhn.redhat.com/errata/RHSA-2015-0066.html - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opens
rity-announce/2015-03/msg00027.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/71935 - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://marc.info/?l=bugtraq&m=142496179803395&w=2 - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq
com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125 - https://github.com/openssl/openssl/commit/684400ce192dac51df3d3e92b61830a6ef90be3e
CVE ID: CVE-2014-8276 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8277 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8278 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8279 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8280 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8281 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8282 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8283 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8284 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8285 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8286 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8287 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8288 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8289 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8290 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8291 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8292 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8293 State: PUBLISHED Published: 2014-10-15T14:00:00Z Last Updated: 2024-09-16T16:42:47.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMG_signin_topic parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html
CVE ID: CVE-2014-8294 State: PUBLISHED Published: 2014-10-15T14:00:00Z Last Updated: 2024-09-16T22:56:56.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html
CVE ID: CVE-2014-8295 State: PUBLISHED Published: 2014-10-15T14:00:00Z Last Updated: 2024-09-16T20:26:45.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/112418 - http://packetstormsecurity.com/files/128480/Bacula-web-5.2.10-SQL-Injection.html - http://www.exploit-db.com/exploits/34851
CVE ID: CVE-2014-8296 State: PUBLISHED Published: 2014-10-16T14:00:00 Last Updated: 2024-08-06T13:10:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Modal Frame API module 6.x-1.x before 6.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2191765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90972 - http://osvdb.org/102909 - https://www.drupal.org/node/2189751
CVE ID: CVE-2014-8298 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:51.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40 allows remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code via a crafted GLX indirect rendering protocol request. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/3610 -
ditional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/3610 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
CVE ID: CVE-2014-8301 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-16T20:32:08.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAANHS
CVE ID: CVE-2014-8302 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-16T16:43:09.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030994 - http://www.splunk.com/view/SP-CAAANHS
CVE ID: CVE-2014-8303 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-16T19:51:38.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to event parsing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030994 - http://www.splunk.com/view/SP-CAAANHS
CVE ID: CVE-2014-8304 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-17T04:20:37.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the next_template parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Sep/54 - http://websecurity.com.ua/7276
CVE ID: CVE-2014-8305 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-17T00:56:43.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to (1) index.php, (2) cart.php, (3) msg.php, or (4) page.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Sep/55 - http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/
CVE ID: CVE-2014-8306 State: PUBLISHED Published: 2014-10-16T19:00:00Z Last Updated: 2024-09-16T17:33:08.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitrary SQL commands via the item_id variable, as demonstrated by the (1) item_id[0] or (2) item_id[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect - http://seclists.org/fulldisclosure/2014/Sep/55