Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8533 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T00:51:32.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8534 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T18:45:14.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10044
CVE ID: CVE-2014-8535 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T20:59:14.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10044
CVE ID: CVE-2014-8536 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10044 - http://www.securityfocus.com/bid/70840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98427
CVE ID: CVE-2014-8537 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70835 - https://kc.mcafee.com/corporate/index?page=content&id=SB10044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98430
CVE ID: CVE-2014-8538 State: PUBLISHED Published: 2014-10-29T18:00:00Z Last Updated: 2024-09-17T00:25:36.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/200313 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-8539 State: PUBLISHED Published: 2014-11-21T15:00:00 Last Updated: 2024-08-06T13:18:48.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the mod_simpleemailform_field2_1 parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23241 - http://packetstormsecurity.com/files/129171/Joomla-Simple-Email-Form-1.8.5-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534017/100/0/threaded - http://www.securityfocus.com/bid/71131
CVE ID: CVE-2014-8540 State: PUBLISHED Published: 2018-01-05T16:00:00 Last Updated: 2024-08-06T13:18:48.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98449 - http://www.securityfocus.com/bid/70841 - http://www.openwall.com/lists/oss-security/2014/10/31/2 - https://gitlab.com/gitlab-org/gitlab-ce/commit/a2dfff418bf2532ebb5aee88414107929b17eefd - https://about.gitlab.com/2014/10/30/gitlab-7-
com/gitlab-org/gitlab-ce/commit/a2dfff418bf2532ebb5aee88414107929b17eefd - https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/
CVE ID: CVE-2014-8541 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2944-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=5c378d6a6df8243f06c87962b873bd563e58cd39 - http://www.ff
N-2944-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=5c378d6a6df8243f06c87962b873bd563e58cd39 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8542 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=105654e376a736d243aef4a1d121abebce912e6b - http://www.ubuntu.com/usn/USN-2534-1 - https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html - http://www.ffmpeg.
/www.ubuntu.com/usn/USN-2534-1 - https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8543 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MM video data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2534-1 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8b0e96e1f21b76
.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8b0e96e1f21b761ca15dbb470cd619a1ebf86c3e
CVE ID: CVE-2014-8544 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted TIFF data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e1c0cfaa419aa5d320540d5a1b3f8fd9b82ab7e5 - http://www.ubuntu.com/usn/USN-2534-1 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8545 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3e2b745020c2dbf0201fe7df3dad9e7e0b2e1bb6
CVE ID: CVE-2014-8546 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e7e5114c506957f40aafd794e06de1a7e341e9d5 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8547 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8f1457864be8fb9653643519dea1c6492f1dde57 - http://www.ubuntu.com/usn/USN-2534-1 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8548 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c727401aa9d62335e89d118a5b4e202edf39d905 - http://www.ubuntu.com/usn/USN-2534-1 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2014-8549 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2024-08-06T13:18:48.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=550f3e9df3410b3dd975e590042c0d83e20a8da3
CVE ID: CVE-2014-8551 State: PUBLISHED Published: 2014-11-26T11:00:00 Last Updated: 2024-08-06T13:18:48.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf
CVE ID: CVE-2014-8552 State: PUBLISHED Published: 2014-11-26T11:00:00 Last Updated: 2024-08-06T13:18:48.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf
CVE ID: CVE-2014-8553 State: PUBLISHED Published: 2014-12-17T19:00:00 Last Updated: 2024-08-06T13:18:48.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18 allows remote attackers to obtain sensitive information via a (1) mc_project_get_users, (2) mc_issue_get, (3) mc_filter_get_issues, or (4) mc_project_get_issues SOAP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99257 - https://bugzilla.redhat.com/show_bug.cgi?id=1171783 - http://seclists.org/oss-sec/2014/q4/955 - https://github.com/mantisbt/mantisbt/
lla.redhat.com/show_bug.cgi?id=1171783 - http://seclists.org/oss-sec/2014/q4/955 - https://github.com/mantisbt/mantisbt/commit/f779e3d4394a0638d822849863c4098421d911c5 - http://secunia.com/advisories/62101 - https://www.mantisbt.org/bugs/changelog_page.php?version_id=191 - https://www.mantisbt.org/bugs/view.php?id=17243 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-8554 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:18:48.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the project_id parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/487 - http://www.mantisbt.org/bugs/view.php?id=17812 - http://www.securityfocus.com/bid/70856 - http://seclists.org/oss-sec/2014/q4/479
w.mantisbt.org/bugs/view.php?id=17812 - http://www.securityfocus.com/bid/70856 - http://seclists.org/oss-sec/2014/q4/479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98457 - http://secunia.com/advisories/62101 - http://www.mantisbt.org/bugs/view.php?id=16880 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-8555 State: PUBLISHED Published: 2014-11-12T16:00:00 Last Updated: 2024-08-06T13:18:48.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the selection parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35127 - https://www.xlabs.com.br/blog/?p=256 - http://www.exploit-db.com/exploits/35207 - http://packetstormsecurity.com/files/129052/Progress-OpenEdge-11.2-Directory-Traversal.html
CVE ID: CVE-2014-8557 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:18:48.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to inject arbitrary web script or HTML via the (1) usuario.nome variable in an editarUsuario action to usuario.do or (2) titulo.form variable in a novoChamado action to ticket.do. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98532 - http://www.securityfocus.com/bid/70967 - http://packetstormsecu
s://exchange.xforce.ibmcloud.com/vulnerabilities/98532 - http://www.securityfocus.com/bid/70967 - http://packetstormsecurity.com/files/129009/JExperts-Tecnologia-Channel-Software-Cross-Site-Scripting.html
CVE ID: CVE-2014-8558 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T13:18:48.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: JExperts Channel Platform 5.0.33_CCB allows remote authenticated users to bypass access restrictions via crafted action and key parameters. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/10 - http://packetstormsecurity.com/files/129010/JExperts-Tecnologia-Channel-Software-Privilege-Escalation.html
CVE ID: CVE-2014-8559 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:18:48.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2014/10/26/116 - http://www.ubuntu.com/usn/USN-2515-1 - https://lkml.org/lkml/2014/10/26/101 - http://www.debian.org/security/2015/dsa-3170 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg0001
01 - http://www.debian.org/security/2015/dsa-3170 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2492-1 - http://rhn.redhat.com/errata/RHSA-2015-1978.html - http://www.openwall.com/lists/oss-security/2014/10/30/7 - http://secunia.com/advisories/62801 - http://rhn.redhat.com/errata/RHSA-2015-1976.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html - https://lkml.org/lkml/2014/10/26/128 - http://www.securityfocus.com/bid/70854 - https://lkml.org/lkml/2014/10/25/179 - http://www.ubuntu.com/usn/USN-2518-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.
com/usn/USN-2518-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca5358ef75fc69fee5322a38a340f5739d997c10 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://lkml.org/lkml/2014/10/26/129 - http://www.ubuntu.com/usn/USN-2493-1 - http://www.securitytracker.com/id/1034051 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=946e51f2bf37f1656916eb75bd0742ba33983c28 - https://lkml.org/lkml/2014/10/25/180 - http://lists.opensuse.org/opensuse-securit
51f2bf37f1656916eb75bd0742ba33983c28 - https://lkml.org/lkml/2014/10/25/180 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://www.ubuntu.com/usn/USN-2517-1 - https://lkml.org/lkml/2014/10/25/171 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html - http://www.ubuntu.com/usn/USN-2516-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1159313 - https://support.f5.com/csp/article/K05211147
CVE ID: CVE-2014-8561 State: PUBLISHED Published: 2019-12-15T21:34:29 Last Updated: 2024-08-06T13:18:48.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: imagemagick 6.8.9.6 has remote DOS via infinite loop Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html - https://security-tracker.debian.org/tracker/CVE-2014-8561 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-8561 - http://seclists.org/fulldisclosure/2014/Nov/1 - http://www.openwall.com/lists/oss-security/2014/10/31/3
CVE ID: CVE-2014-8562 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T13:18:48.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70837 - https://int21.de/cve/CVE-2014-8562-ImageMagick-dcm-oob-heap-overflow.html - https://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html - https://bugzilla.redhat.com/show_bug.cgi?id=1159362
CVE ID: CVE-2014-8563 State: PUBLISHED Published: 2020-01-27T18:38:06 Last Updated: 2024-08-06T13:18:48.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://bugzilla.zimbra.com/show_bug.cgi?id=96105
CVE ID: CVE-2014-8564 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:18:48.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59991 - http://rhn.redhat.com/errata/RHSA-2014-1846.html - http://www.ubuntu.com/usn/USN-240
tp://secunia.com/advisories/59991 - http://rhn.redhat.com/errata/RHSA-2014-1846.html - http://www.ubuntu.com/usn/USN-2403-1 - http://secunia.com/advisories/62294 - https://bugzilla.redhat.com/show_bug.cgi?id=1161443 - http://secunia.com/advisories/62284 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html
CVE ID: CVE-2014-8565 State: REJECTED Published: 2014-11-15T21:00:00 Last Updated: 2014-11-15T20:57:01 Description: No description available.
CVE ID: CVE-2014-8566 State: PUBLISHED Published: 2014-11-15T21:00:00 Last Updated: 2024-08-06T13:18:48.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory." Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1803.html - http://rhn.redhat.com/errata/RHSA-2014-1803.html - https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.8.1 - http://secunia.com/advisories/62094 - http://secunia
- https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.8.1 - http://secunia.com/advisories/62094 - http://secunia.com/advisories/62125 - https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html
CVE ID: CVE-2014-8567 State: PUBLISHED Published: 2014-11-14T15:00:00 Last Updated: 2024-08-06T13:18:48.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1803.html - http://rhn.redhat.com/errata/RHSA-2014-1803.html - http://secunia.com/advisories/62094 - http://secunia.com/advisories/62125 - https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html - https://github.com/U
ia.com/advisories/62125 - https://postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html - https://github.com/UNINETT/mod_auth_mellon/commit/0f5b4fd860fa7e3a6c47201637aab05395f32647