Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68797 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a - http://support.oleumtech.com/
CVE ID: CVE-2014-2362 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2025-10-06T17:33:48.282Z Severity: N/A (CVSS 7.8 AV:N/AC:M/Au:N/C:C/I:P/A:N) Vendors: OleumTech Products: WIO DH2 Wireless Gateway, Sensor Wireless I/O Modules Problem Types: CWE-338 Description: OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68797 - https://www.cisa.gov/news-events/ics-advisories/ic
ram Container: References: - http://www.securityfocus.com/bid/68797 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a - http://support.oleumtech.com/
CVE ID: CVE-2014-2363 State: PUBLISHED Published: 2014-07-26T10:00:00 Last Updated: 2025-10-06T17:38:25.519Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Morpho Products: Itemiser 3 Problem Types: CWE-259 Description: Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-205-01
CVE ID: CVE-2014-2364 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2025-10-06T17:52:36.174Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Advantech Products: WebAccess Problem Types: CWE-121 Description: Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. Additional Analyst Notes: - CVE Program Container: R
ctiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02 - http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html - http://www.securityfocus.com/bid/68714 - http://webaccess.advantech.com/
CVE ID: CVE-2014-2365 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2025-10-06T17:51:28.289Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Advantech Products: WebAccess Problem Types: CWE-284 Description: Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02 - http://webaccess.advantech.com/
CVE ID: CVE-2014-2366 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2025-10-06T17:50:01.014Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Advantech Products: WebAccess Problem Types: CWE-316 Description: upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02 - http://webaccess.advantech.com/
CVE ID: CVE-2014-2367 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2025-10-06T17:48:24.247Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Advantech Products: WebAccess Problem Types: CWE-592 Description: The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02 - http://webaccess.advantech.com/
CVE ID: CVE-2014-2368 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2025-10-06T17:46:06.036Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Advantech Products: WebAccess Problem Types: CWE-623 Description: The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02 - http://webaccess.advantech.com/
CVE ID: CVE-2014-2369 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2025-10-06T17:59:20.171Z Severity: N/A (CVSS 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P) Vendors: Omron Products: NS15, NS12, NS10, NS8, NS5 Problem Types: CWE-352 Description: Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-203-01 - https://automation.omron.com/en/us/products/
CVE ID: CVE-2014-2370 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2025-10-06T18:01:21.608Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Omron Products: NS15, NS12, NS10, NS8, NS5 Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-203-01 - https://automation.omron.com/en/us/products/
CVE ID: CVE-2014-2373 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2025-10-13T22:39:34.813Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Accuenergy Products: Accuenergy Acuvim II AXN-NET Ethernet module Problem Types: CWE-602 Description: The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.accuenergy.com/firmware-update-axm-net - https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02
CVE ID: CVE-2014-2374 State: PUBLISHED Published: 2014-11-05T11:00:00 Last Updated: 2025-10-13T22:40:16.562Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Accuenergy Products: Accuenergy Acuvim II AXN-NET Ethernet module Problem Types: CWE-602 Description: The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.accuenergy.com/firmware-update-axm-net - https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02
CVE ID: CVE-2014-2375 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2025-10-13T22:44:18.843Z Severity: N/A (CVSS 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C) Vendors: Ecava Products: IntegraXor SCADA Server Problem Types: CWE-73 Description: Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
CVE ID: CVE-2014-2376 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2025-10-13T22:46:29.711Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Ecava Products: IntegraXor SCADA Server Problem Types: CWE-89 Description: SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
CVE ID: CVE-2014-2377 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2025-10-13T22:48:15.434Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Ecava Products: IntegraXor SCADA Server Problem Types: CWE-526 Description: Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
CVE ID: CVE-2014-2378 State: PUBLISHED Published: 2014-09-05T17:00:00 Last Updated: 2025-10-13T23:00:45.632Z Severity: N/A (CVSS 6.5 AV:A/AC:H/Au:N/C:C/I:C/A:P) Vendors: Sensys Networks Products: VSN240-F, VSN240-T Problem Types: CWE-494 Description: Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-247-01a - http://www.sensysnetworks.com/resources-by-category/#sw - http://www.sensysnetworks.com/dis
advisories/icsa-14-247-01a - http://www.sensysnetworks.com/resources-by-category/#sw - http://www.sensysnetworks.com/distributors/
CVE ID: CVE-2014-2379 State: PUBLISHED Published: 2014-09-05T17:00:00 Last Updated: 2025-10-13T23:02:57.689Z Severity: N/A (CVSS 4.3 AV:A/AC:H/Au:N/C:P/I:P/A:P) Vendors: Sensys Networks Products: VSN240-F, VSN240-T Problem Types: CWE-311 Description: Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-247-01a - http://www.sensysnetworks.com/resources-by-category/#sw - http://www.sensysnetworks.com/
cs-advisories/icsa-14-247-01a - http://www.sensysnetworks.com/resources-by-category/#sw - http://www.sensysnetworks.com/distributors/
CVE ID: CVE-2014-2380 State: PUBLISHED Published: 2014-08-28T01:00:00 Last Updated: 2025-10-31T23:11:04.615Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N) Vendors: Schneider Electric Products: Wonderware Information Server Portal Problem Types: CWE-326 Description: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json
CVE ID: CVE-2014-2381 State: PUBLISHED Published: 2014-08-28T01:00:00 Last Updated: 2025-10-31T23:19:54.894Z Severity: N/A (CVSS 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N) Vendors: Schneider Electric Products: Wonderware Information Server Portal Problem Types: CWE-326 Description: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json
CVE ID: CVE-2014-2382 State: PUBLISHED Published: 2014-11-20T11:00:00 Last Updated: 2024-08-06T10:14:25.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129172/Faronics-Deep-Freeze-Arbitrary-Code-Execution.html - https://www.portcullis-security.com/security-research-and-downloads/security-ad
p-Freeze-Arbitrary-Code-Execution.html - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2382/ - http://seclists.org/fulldisclosure/2014/Nov/52
CVE ID: CVE-2014-2383 State: PUBLISHED Published: 2014-04-28T00:00:00 Last Updated: 2024-08-06T10:14:25.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/ - https://github.com/dompdf/dompdf/commit/23a
ity.com/security-research-and-downloads/security-advisories/cve-2014-2383/ - https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028 - http://seclists.org/fulldisclosure/2014/Apr/258 - http://www.securityfocus.com/archive/1/531912/100/0/threaded - https://explore.avertium.com/resource/lfi-rfi-escalation-to-rce
CVE ID: CVE-2014-2384 State: PUBLISHED Published: 2014-04-15T20:00:00 Last Updated: 2024-08-06T10:14:25.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/163 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2384/
CVE ID: CVE-2014-2385 State: PUBLISHED Published: 2014-07-22T14:00:00 Last Updated: 2024-08-06T10:14:25.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter to exclusion/configure or (4) text:EmailServer or (5) newListList:Email parameter to notification/configure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532558/100/0/threade
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532558/100/0/threaded - http://packetstormsecurity.com/files/127228/Sophos-Antivirus-9.5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2014/Jun/126 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2385/ - http://www.sophos.com/en-us/support/knowledgebase/121135.aspx - http://www.securitytracker.com/id/1030467
CVE ID: CVE-2014-2386 State: PUBLISHED Published: 2014-03-25T15:00:00 Last Updated: 2024-08-06T10:14:26.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function in cgi/cgiutils.c or (5) status_page_num_selector function in cgi/status.c, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://comments.gmane.org/gmane.comp.security.oss.general/12355 - http://lists.ope
CVE Program Container: References: - http://comments.gmane.org/gmane.comp.security.oss.general/12355 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00072.html - https://dev.icinga.org/issues/5663 - https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=73285093b71a5551abdaab0a042d3d6bae093b0d
CVE ID: CVE-2014-2387 State: PUBLISHED Published: 2019-12-13T13:12:51 Last Updated: 2024-08-06T10:14:25.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-2387 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-2387 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-2387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91992 - http://www.openwall.com/lists/oss-security/2014/03/13/5 - http://www.openwall.com/lists/oss-security/2014/03/14/2 - http://www.securityfocus.com/bid/66214
CVE ID: CVE-2014-2388 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T10:14:25.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via (1) a session over a Wi-Fi network or (2) a session over a USB connection in Development Mode. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127850/BlackBerry-Z10-Authentication-Bypass.html - http://packetstormsecurity.com/files/1278
cketstormsecurity.com/files/127850/BlackBerry-Z10-Authentication-Bypass.html - http://packetstormsecurity.com/files/127850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95262 - http://secunia.com/advisories/60156 - http://www.blackberry.com/btsc/KB36174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95263 - http://www.securityfocus.com/bid/69217 - http://www.modzero.ch/advisories/MZ-13-04-Blackberry_Z10-File-Exchange-Authentication-By-Pass.txt - http://www.securityfocus.com/archive/1/533118/100/0/threaded
CVE ID: CVE-2014-2389 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T10:14:26.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-04/0036.html
CVE ID: CVE-2014-2390 State: PUBLISHED Published: 2014-08-29T17:00:00 Last Updated: 2024-08-06T10:14:25.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10081 - http://www.securitytracker.com/id/1030674
CVE ID: CVE-2014-2391 State: PUBLISHED Published: 2014-04-17T20:00:00 Last Updated: 2024-08-06T10:14:25.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potentially useful password-pattern information by reading (1) a web-server access log, (2) a web-server Referer log, or (3) browser history that contains this string because of its presence in a GET request. Additional Analyst Notes: - C
or (3) browser history that contains this string because of its presence in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531762
CVE ID: CVE-2014-2392 State: PUBLISHED Published: 2014-04-17T20:00:00 Last Updated: 2024-08-06T10:14:25.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531762
CVE ID: CVE-2014-2393 State: PUBLISHED Published: 2014-04-17T20:00:00 Last Updated: 2024-08-06T10:14:25.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7.4.2 before 7.4.2-rev13 allows remote attackers to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an e-mail attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531762
CVE ID: CVE-2014-2397 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T10:14:26.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - https://access.redhat.com/errat
tp://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - https://access.redhat.com/errata/RHSA-2014:0413 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0685.html - http://www.debian.org/security/2014/dsa-2912 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/58415 - http://security.gentoo.org/glsa/glsa-201502-12.xml - http://www.securityfocus.com/bid/66893
CVE ID: CVE-2014-2398 State: PUBLISHED Published: 2014-04-16T01:00:00 Last Updated: 2024-08-06T10:14:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2187-1 - http://rhn.redhat.com/errata/RHSA-2014-0675.html - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.ubuntu.com/usn/USN-2191-1 - http://marc.info/?l=bug