Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2559 State: PUBLISHED Published: 2014-10-17T22:00:00 Last Updated: 2024-08-06T10:21:35.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/twitget/changelog - http://secunia.com/advisories/57892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92391 - http://packetstormsecurity.
/secunia.com/advisories/57892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92391 - http://packetstormsecurity.com/files/126134 - http://seclists.org/fulldisclosure/2014/Apr/172 - https://security.dxw.com/advisories/csrfxss-vulnerability-in-twitget-3-3-1
CVE ID: CVE-2014-2560 State: PUBLISHED Published: 2020-02-12T13:28:54 Last Updated: 2024-08-06T10:21:35.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2014/Mar/185
CVE ID: CVE-2014-2565 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:21:34.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection." Additional Analyst Notes: - CVE Program Container: References: - https://kb.bluecoat.com/index?page=content&id=SA78&actp=LIST
CVE ID: CVE-2014-2567 State: PUBLISHED Published: 2014-03-21T10:00:00 Last Updated: 2024-08-06T10:21:34.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jktjkt/trojita/commit/25fffa3e25cbad85bbca804193ad336b090a9ce1 - http://jkt.flaska.net/blog/Trojita_0_4_1__a_security_update_for_CVE_2014_2567.h
fffa3e25cbad85bbca804193ad336b090a9ce1 - http://jkt.flaska.net/blog/Trojita_0_4_1__a_security_update_for_CVE_2014_2567.html
CVE ID: CVE-2014-2568 State: PUBLISHED Published: 2014-03-24T10:00:00 Last Updated: 2024-08-06T10:21:35.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2014/3/20/421 - https://bugzilla.redhat.com/show_bug.cgi?id=1
CVE Program Container: References: - https://lkml.org/lkml/2014/3/20/421 - https://bugzilla.redhat.com/show_bug.cgi?id=1079012 - http://www.ubuntu.com/usn/USN-2240-1 - http://www.securityfocus.com/bid/66348 - http://secunia.com/advisories/59599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91922 - http://seclists.org/oss-sec/2014/q1/627 - http://www.openwall.com/lists/oss-security/2014/03/20/16
CVE ID: CVE-2014-2570 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T10:21:35.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PhenX/php-font-lib/commit/d13682b7e27d14a6323c441426f3dde1cd86c751 - http://osvdb.org/show/osvdb/104896 - https://github.com/PhenX/php-font-lib/releases/tag/0.3.1 - http://www.securityfocus.com/bid/66380 - http://codalabs.net/cla-2014-001 - http://www.securityfocus.co
ases/tag/0.3.1 - http://www.securityfocus.com/bid/66380 - http://codalabs.net/cla-2014-001 - http://www.securityfocus.com/archive/1/531587/100/0/threaded
CVE ID: CVE-2014-2571 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:21:34.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a quiz question. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43690 - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=25641
mit&s=MDL-43690 - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256416
CVE ID: CVE-2014-2572 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T10:21:35.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43468 - http://openwall.com/lists/oss-security/2014/03/17/1 - https://moodle.org/mod/forum/discuss.php?d=256425
CVE ID: CVE-2014-2573 State: PUBLISHED Published: 2014-03-25T15:00:00 Last Updated: 2024-08-06T10:21:35.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/21/2 - http://secunia.com/advisories/57498 - https://bugs.launchpad.net/nova/+bug/1269418 - http://www.openwall.
2014/03/21/2 - http://secunia.com/advisories/57498 - https://bugs.launchpad.net/nova/+bug/1269418 - http://www.openwall.com/lists/oss-security/2014/03/21/1
CVE ID: CVE-2014-2575 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T10:21:34.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUMENT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/107742 - http://security.devexpress.com/de7c4756/?id=ff8c1703126f4717993ac3608a65a2e2 - http://www.securityfocus.com/bid/67902 - http://packetstorms
express.com/de7c4756/?id=ff8c1703126f4717993ac3608a65a2e2 - http://www.securityfocus.com/bid/67902 - http://packetstormsecurity.com/files/126953/DevExpress-ASP.NET-File-Manager-13.2.8-Directory-Traversal.html - http://seclists.org/fulldisclosure/2014/Jun/24 - http://www.securityfocus.com/archive/1/532304/100/0/threaded - https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-006/-directory-traversal-in-devexpress-asp-net-file-manager - http://www.exploit-db.com/exploits/33700
CVE ID: CVE-2014-2576 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T10:21:34.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60422 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00015.html - http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3106 - http://seclists.org/oss-sec/2014/q1/636 - http://sourceforge
ewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3106 - http://seclists.org/oss-sec/2014/q1/636 - http://sourceforge.net/p/claws-mail/news/2014/05/claws-mail-3100-unleashed/
CVE ID: CVE-2014-2577 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T10:21:34.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 Patch 7 allow remote attackers to inject arbitrary web script or HTML via the (1) pn parameter to index.fsp/document.pdf, (2) db or (3) referer parameter to index.fsp/index.fsp, or (4) PATH_INFO to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/15 - http://www.pdf-archive.c
Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/15 - http://www.pdf-archive.com/2014/06/03/tf431patch8releasenotes/preview/page/9 - http://www.securityfocus.com/archive/1/532286/100/0/threaded - http://www.pdf-archive.com/2014/06/03/tf52patch7releasenotes/preview/page/14 - http://www.securityfocus.com/bid/67810 - http://packetstormsecurity.com/files/126907/Transform-Foundation-Server-4.3.1-5.2-Cross-Site-Scripting.html
CVE ID: CVE-2014-2578 State: PUBLISHED Published: 2014-04-02T14:00:00 Last Updated: 2024-08-06T10:21:35.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66453 - http://www.splunk.com/view/SP-CAAAKQX - http://www.securitytracker.com/id/1029966 - http://secunia.com/advisories/57554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92126
CVE ID: CVE-2014-2579 State: PUBLISHED Published: 2014-04-25T20:00:00 Last Updated: 2024-08-06T10:21:35.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrator password via the config task to index2.php or (2) when the enable_db_backup and sql_mem options are enabled, access the database backup functionality via the dbbackup_comp parameter in the generate action to index2.php. NOTE: vector 2 might be a duplicate of CVE-2014-2340, which is for the XCloner Wordpress plugin. N
action to index2.php. NOTE: vector 2 might be a duplicate of CVE-2014-2340, which is for the XCloner Wordpress plugin. NOTE: remote attackers can leverage CVE-2014-2996 with vector 2 to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23207 - http://www.exploit-db.com/exploits/32790 - http://www.securityfocus.com/bid/66751 - http://www.securityfocus.com/archive/1/531780/100/0/threaded
CVE ID: CVE-2014-2580 State: PUBLISHED Published: 2014-04-15T17:00:00 Last Updated: 2024-08-06T10:21:35.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-90.html - http://www.openwall.com/lists/oss-security/2014/03/24/8 - http://www.securityfocus.com/bid/66386 - http://
ory-90.html - http://www.openwall.com/lists/oss-security/2014/03/24/8 - http://www.securityfocus.com/bid/66386 - http://www.openwall.com/lists/oss-security/2014/03/24/6 - http://www.securitytracker.com/id/1029949
CVE ID: CVE-2014-2581 State: PUBLISHED Published: 2020-01-28T14:15:51 Last Updated: 2024-08-06T10:21:35.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/smb4k/files/1.1.1/ - http://www.openwall.com/lists/oss-security/2014/03/24/1 - http://www.openwall.com/lists/oss-security/2014/03/25/5 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/13390
rmail/package-announce/2014-June/133898.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.html - https://bugs.gentoo.org/505376
CVE ID: CVE-2014-2583 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T10:21:35.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAM_RUSER value to the get_ruser function or (2) PAM_TTY value to the check_tty function, which is used by the format_timestamp_name function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/24/5 - http://www.securityfocus.com/bid/664
Container: References: - http://www.openwall.com/lists/oss-security/2014/03/24/5 - http://www.securityfocus.com/bid/66493 - https://security.gentoo.org/glsa/201605-05 - http://secunia.com/advisories/57317 - http://www.ubuntu.com/usn/USN-2935-2 - http://www.openwall.com/lists/oss-security/2014/03/31/6 - http://www.ubuntu.com/usn/USN-2935-3 - http://www.ubuntu.com/usn/USN-2935-1 - https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=Linux-PAM-1_1_8-32-g9dcead8 - http://www.openwall.com/lists/oss-security/2014/03/26/10
CVE ID: CVE-2014-2585 State: PUBLISHED Published: 2014-03-23T16:00:00Z Last Updated: 2024-09-16T22:21:16.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2014-008/
CVE ID: CVE-2014-2586 State: PUBLISHED Published: 2014-03-23T18:00:00Z Last Updated: 2024-09-17T03:02:58.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted password. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html - http://www.securityfocus.com/bid/66302 - https://twitter.com/BrandonPrry/status/445969380656943104 - http://seclists.org/fulldisclosure/2014/Mar/325 - http://www.exploit-db.com/exploits/32
Prry/status/445969380656943104 - http://seclists.org/fulldisclosure/2014/Mar/325 - http://www.exploit-db.com/exploits/32368
CVE ID: CVE-2014-2587 State: PUBLISHED Published: 2014-03-23T18:00:00 Last Updated: 2024-08-06T10:21:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/91929 - http://www.securityfocus.com/bid/66302 - http://www.securitytracker.com/id/1029927 - http://www.osvdb.o
bilities/91929 - http://www.securityfocus.com/bid/66302 - http://www.securitytracker.com/id/1029927 - http://www.osvdb.org/104634 - http://seclists.org/fulldisclosure/2014/Mar/325 - http://www.exploit-db.com/exploits/32368
CVE ID: CVE-2014-2588 State: PUBLISHED Published: 2014-03-23T18:00:00 Last Updated: 2024-08-06T10:21:35.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html - http://www.osvdb.org/104633 - http://www.securityfocus.com/bid/66302 - http://www.securitytracker.com/id/1029927 - http://seclists.org/fulldisclosure/2014/Mar/325 - http://www.expl
id/66302 - http://www.securitytracker.com/id/1029927 - http://seclists.org/fulldisclosure/2014/Mar/325 - http://www.exploit-db.com/exploits/32368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91930
CVE ID: CVE-2014-2589 State: PUBLISHED Published: 2014-03-23T18:00:00 Last Updated: 2024-08-06T10:21:35.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91766 - http://www.securityfocus.com/archive/1/531364/100/0/threaded - http://secunia.com/advisories/57275 - http://www.securityfocus.com/
.securityfocus.com/archive/1/531364/100/0/threaded - http://secunia.com/advisories/57275 - http://www.securityfocus.com/bid/66042 - http://www.vulnerability-lab.com/get_content.php?id=1100 - http://www.osvdb.org/104089
CVE ID: CVE-2014-2590 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T10:21:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted HTTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-087-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-831997.pdf
CVE ID: CVE-2014-2591 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T10:21:35.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2591/ - http://seclists.org/fulldisclosure/2014/Apr/199
CVE ID: CVE-2014-2592 State: PUBLISHED Published: 2018-03-09T20:00:00 Last Updated: 2024-08-06T10:21:35.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2592/
CVE ID: CVE-2014-2593 State: PUBLISHED Published: 2014-08-29T14:00:00 Last Updated: 2024-08-06T10:21:35.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/109662 - http://www.arubanetworks.com/support/alerts/aid-050214.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/95491 - https://www.portcullis-security.c
t/alerts/aid-050214.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/95491 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593 - http://www.securityfocus.com/bid/69391
CVE ID: CVE-2014-2595 State: PUBLISHED Published: 2020-02-12T00:45:21 Last Updated: 2024-08-06T10:21:35.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/ - http://seclists.org/fulldisclosure/2014/Aug/5 - http://www.osvdb.org/109782 - https://vulners.com/
ries/cve-2014-2595/ - http://seclists.org/fulldisclosure/2014/Aug/5 - http://www.osvdb.org/109782 - https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004 - https://www.securityfocus.com/bid/69028 - https://www.exploit-db.com/exploits/39278
CVE ID: CVE-2014-2597 State: PUBLISHED Published: 2014-04-18T19:00:00 Last Updated: 2024-08-06T10:21:35.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/221 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/ - http://secunia.com/advisories/58090
CVE ID: CVE-2014-2598 State: PUBLISHED Published: 2015-01-05T20:00:00 Last Updated: 2024-08-06T10:21:35.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/105708 - https://security.dxw.com/advisories/csrf-and-stored-xss-in-quick-pagepost-redirect-p