Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0968 - http://packetstormsecurity.com/files/140258/Microsoft-Internet-Explorer-11-MSHTML-CPasteCommand-ConvertBitmaptoPng-Buffer-Overflow.html - https://www.exploit-db.com/exploits/40960/ - http://www.securitytracker.com/id/1031018 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056 - http://blog.skylined.nl/20161221001.html
CVE ID: CVE-2014-4139 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4140 State: PUBLISHED Published: 2014-10-15T10:00:00 Last Updated: 2024-08-06T11:04:28.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70325 - http://secunia.com/advisories/60968 - http://www.securitytracker.com/id/1031018 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056
CVE ID: CVE-2014-4141 State: PUBLISHED Published: 2014-10-15T10:00:00 Last Updated: 2024-08-06T11:04:28.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40685/ - http://www.securityfocus.com/bid/70342 - http://secunia.com/advisories/60968 - http://www.securitytracker.com/id/1031018 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-
tp://www.securitytracker.com/id/1031018 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056
CVE ID: CVE-2014-4142 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4143 State: PUBLISHED Published: 2014-11-11T22:00:00 Last Updated: 2024-08-06T11:04:28.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-6341. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031185 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-065
CVE ID: CVE-2014-4144 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4145 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T11:04:28.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-8985. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE ID: CVE-2014-4146 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4147 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-4148 State: PUBLISHED Published: 2014-10-15T10:00:00.000Z Last Updated: 2025-10-22T00:05:35.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet
ability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx - http://secunia.com/advisories/60970 - http://www.securityfocus.com/bid/70429 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96995
CVE ID: CVE-2014-4149 State: PUBLISHED Published: 2014-11-11T22:00:00 Last Updated: 2024-08-06T11:04:28.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031188 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-072 - http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remotin
ecurity-updates/securitybulletins/2014/ms14-072 - http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remoting-elevation-of-privilege-vulnerability.aspx
CVE ID: CVE-2014-4150 State: PUBLISHED Published: 2018-07-20T17:00:00 Last Updated: 2024-08-06T11:04:28.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=748766 - http://www.s48.org/cgi-bin/hgwebdir.cgi/s48/rev/a44624256297 - http://www.openwall.com/lists/oss-security/2014/06/13/5 - http://www.securityfocus.com/bid/67654
CVE ID: CVE-2014-4151 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T11:04:28.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request. Additional Analyst Notes: - CVE Program Container: References: - http://forums.alienvault.com/discussion/2806 - http://www.zerodayinitiative.com/advisories/ZDI-14-205/ - http://secunia.com/advisories/59112
CVE ID: CVE-2014-4152 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T11:04:28.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key. Additional Analyst Notes: - CVE Program Container: References: - http://forums.alienvault.com/discussion/2806 - http://www.zerodayinitiative.com/advisories/ZDI-14-206/ - http://secunia.com/advisories/59112
CVE ID: CVE-2014-4153 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T11:04:28.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request. Additional Analyst Notes: - CVE Program Container: References: - http://forums.alienvault.com/discussion/2806 - http://www.zerodayinitiative.com/advisories/ZDI-14-207/ - http://secunia.com/advisories/59112
CVE ID: CVE-2014-4154 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T11:04:28.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html - https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities/ - http://www.exploit-db.com/exploits/33803
CVE ID: CVE-2014-4155 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T11:04:28.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1. Additional Analyst Notes: - CVE Program Container: References: - https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities - http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html - http://www.exploit-db.com/
s - http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html - http://www.exploit-db.com/exploits/33803
CVE ID: CVE-2014-4156 State: PUBLISHED Published: 2020-01-27T14:13:50 Last Updated: 2024-08-06T11:04:28.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68028 - http://www.openwall.com/lists/oss-security/2014/06/17/16
CVE ID: CVE-2014-4157 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T11:04:28.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/06/17/17 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8 - http://git.kernel.org/?p=linux/ke
ecurity/2014/06/17/17 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=137f7df8cead00688524c82360930845396b8a21 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751417 - http://openwall.com/lists/oss-security/2014/06/16/1 - https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21
CVE ID: CVE-2014-4158 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T11:04:28.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68195 - http://osvdb.org/show/osvdb/70808 - http://www.exploit-db.com/exploits/33027 - http://osvdb.org/show/osvdb/108090 - http://www.exploit-db.com/exploits/34059 - http://packetstormsecurity.com/files/126332/Kolibri-2.0-Stack-Buffer-Overflow.html
CVE ID: CVE-2014-4159 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T11:04:28.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1946420 - http://blog.emaze.net/2014/05/sap-multiple-vulnerabilities.html - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/67997
CVE ID: CVE-2014-4160 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T11:04:28.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67995 - http://blog.emaze.net/2014/05/sap-multiple-vulnerabilities.html - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1932505
CVE ID: CVE-2014-4161 State: PUBLISHED Published: 2014-06-13T14:00:00Z Last Updated: 2024-09-17T02:27:31.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58889 - https://service.sap.com/sap/support/notes/1946420 - http://blog.emaze.net/2014/05/sap-multiple-vulnerabilities.html - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-4162 State: PUBLISHED Published: 2014-06-16T18:00:00 Last Updated: 2024-08-06T11:04:28.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33518 - http://packetstormsecurity.com/files/126812/Zyxel-P-660HW-T1-Cross-Site-Request-Forgery.html - http://secunia.com/advisories/58513 - http://osvdb.org/sh
iles/126812/Zyxel-P-660HW-T1-Cross-Site-Request-Forgery.html - http://secunia.com/advisories/58513 - http://osvdb.org/show/osvdb/107449
CVE ID: CVE-2014-4163 State: PUBLISHED Published: 2014-06-16T18:00:00Z Last Updated: 2024-09-16T17:03:46.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/62
CVE ID: CVE-2014-4164 State: PUBLISHED Published: 2014-06-16T18:00:00 Last Updated: 2024-08-06T11:04:28.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127001/AlogoSec-FireFlow-6.3-Cross-Site-Scripting.html
CVE ID: CVE-2014-4165 State: PUBLISHED Published: 2014-06-16T18:00:00 Last Updated: 2024-08-06T11:04:29.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-04/msg00029.html - http://www.securitytracker.com/id/1030437 - http://packetstormsecurity.com/files/127043/ntop-xss.txt - http://www.securityfocus.com/bid/68002 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:216 - http://advisori
tp://www.securityfocus.com/bid/68002 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:216 - http://advisories.mageia.org/MGASA-2015-0168.html
CVE ID: CVE-2014-4166 State: PUBLISHED Published: 2014-06-16T18:00:00Z Last Updated: 2024-09-16T16:18:14.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the mp3 title field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/108052 - http://www.exploit-db.com/exploits/33714 - http://www.securityfocus.com/bid/68019 - http://packetstormsecurity.com/files/127074/SHOUTcast-DNAS-2.2.1-Cross-Site-Scripting.html
CVE ID: CVE-2014-4167 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T11:04:28.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/neutron/+bug/1309195 - http://seclists.org/oss-sec/2014/q2/572 - http://secunia.com/advisories/59533 - http://www.ubuntu.com/usn/USN-2255-1
CVE ID: CVE-2014-4168 State: PUBLISHED Published: 2014-07-03T17:00:00 Last Updated: 2024-08-06T11:04:28.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59417 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834 - http://www.openwall.com/lists/oss-security/2014/06/18/1 - http://www.openwall.com/lists/oss-security/2014/06/16/5 - https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG - h
ss-security/2014/06/16/5 - https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG - http://www.debian.org/security/2014/dsa-2964
CVE ID: CVE-2014-4170 State: PUBLISHED Published: 2020-02-13T18:47:30 Last Updated: 2024-08-06T11:04:28.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain access or modify or delete database information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127701/Free-Reprintables-ArticleFR-11.06.2014-Improper-Access-Control.html - http://www.exploit-db.com/exploits/34245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95051 - htt
ntrol.html - http://www.exploit-db.com/exploits/34245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95051 - https://www.securityfocus.com/bid/68980
CVE ID: CVE-2014-4171 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T11:04:28.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-mm-commits&m=1403037454
call. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-mm-commits&m=140303745420549&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1318.html - https://bugzilla.redhat.com/show_bug.cgi?id=1111180 - http://www.securityfocus.com/bid/68157 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://ozlabs.org/~akpm/mmots/broken-out/shmem-fix-faulting-into-a-hole-while-its-punched.patch - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - http://secunia.com/advisories/59777 - http://www.secur
nce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - http://secunia.com/advisories/59777 - http://www.securitytracker.com/id/1030450 - http://www.openwall.com/lists/oss-security/2014/06/18/11 - http://rhn.redhat.com/errata/RHSA-2015-0102.html
CVE ID: CVE-2014-4172 State: PUBLISHED Published: 2020-01-24T18:29:32 Last Updated: 2024-08-06T11:04:28.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?
lidator.java. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1131350 - https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718 - https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d - https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814 - https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog - https://github.com/Jasig/phpCAS/pull/125 - https://issues.jasig.org/browse/CASC-228 - https://www.debian.org/security/2014/dsa-3017.en.html - http://lists.fedoraproject.org/pipermail/package-
wse/CASC-228 - https://www.debian.org/security/2014/dsa-3017.en.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95673
CVE ID: CVE-2014-4174 State: PUBLISHED Published: 2014-06-18T16:00:00 Last Updated: 2024-08-06T11:04:29.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=53123 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8808 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9753 - http://www.wireshark
hark.org/bugzilla/show_bug.cgi?id=8808 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9753 - http://www.wireshark.org/security/wnpa-sec-2014-05.html - http://anonsvn.wireshark.org/viewvc/trunk-1.10/wiretap/libpcap.c?r1=53123&r2=53122&pathrev=53123 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9390
CVE ID: CVE-2014-4187 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:28.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127098/ClipBucket-CMS-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/532432/100/0/threaded