Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6235 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69563 - http://typo3.org/extensions/repository/view/ke_dompdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/95706 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
CVE ID: CVE-2014-6236 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95707 - http://www.securityfocus.com/bid/69569 - http://typo3.org/extensions/repository/view/lumophpinclude - http://secunia.com/advisories/60873 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/ty
hpinclude - http://secunia.com/advisories/60873 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
CVE ID: CVE-2014-6237 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95708 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
CVE ID: CVE-2014-6238 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Akronymmanager (aka SB Folderdownload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95709 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - http://www.securityfocus.com/bid/69570
CVE ID: CVE-2014-6239 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69564 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - http://typo3.org/extensions/repository/view/st_address_map
CVE ID: CVE-2014-6240 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69571 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
CVE ID: CVE-2014-6241 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:10:12.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the wt_directory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69568 - http://secunia.com/advisories/60867 - http://typo3.org/extensions/repository/view/wt_directory - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95713
CVE ID: CVE-2014-6242 State: PUBLISHED Published: 2014-10-02T14:00:00 Last Updated: 2024-08-06T12:10:12.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parameter in the aiowpsec page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128419/All-In-One-WP-Security-3.8.2-SQL-Injection.html - https
ainer: References: - http://packetstormsecurity.com/files/128419/All-In-One-WP-Security-3.8.2-SQL-Injection.html - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog - http://www.exploit-db.com/exploits/34781 - http://www.securityfocus.com/bid/70150 - https://www.htbridge.com/advisory/HTB23231 - http://www.securityfocus.com/archive/1/533519/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/96204
CVE ID: CVE-2014-6243 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T12:10:12.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the error parameter in the ewww-image-optimizer.php page to wp-admin/options-general.php, which is not properly handled in a pngout error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70190 - http://www.securityfocus.com/archive/1/533641/100/0/threaded - https://wordpress.org/plugins/ewww-image-optim
id/70190 - http://www.securityfocus.com/archive/1/533641/100/0/threaded - https://wordpress.org/plugins/ewww-image-optimizer/changelog - http://packetstormsecurity.com/files/128621/WordPress-EWWW-Image-Optimizer-2.0.1-Cross-Site-Scripting.html - https://www.htbridge.com/advisory/HTB23234
CVE ID: CVE-2014-6251 State: PUBLISHED Published: 2014-10-25T00:00:00 Last Updated: 2024-08-06T12:10:13.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/29
CVE ID: CVE-2014-6252 State: PUBLISHED Published: 2014-09-05T14:00:00 Last Updated: 2024-08-06T12:10:12.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of service or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/2018221 - https://erpscan.io/advisories/erpscan-14-011-sap-netweaver-dispatcher-buffer-overflow-rce-dos/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/96196 - http://scn.sap.com/doc
ispatcher-buffer-overflow-rce-dos/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/96196 - http://scn.sap.com/docs/DOC-8218 - http://secunia.com/advisories/60496
CVE ID: CVE-2014-6253 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:13.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hijack the authentication of arbitrary users, aka ZEN-12653. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6254 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to inject arbitrary web script or HTML via an attribute in a (1) device name, (2) device detail, (3) report name, (4) report detail, or (5) portlet name, or (6) a string to a helper method, aka ZEN-15381 and ZEN-15410. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6255 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from parameter, aka ZEN-11998. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6256 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public (1) read or (2) execute access via a move action, aka ZEN-15386. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6257 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6258 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consumption) by triggering an arbitrary regular-expression match attempt, aka ZEN-15411. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6259 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka ZEN-15414, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6260 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:12.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, which allows remote attackers to execute arbitrary commands or cause a denial of service (paging outage) by leveraging an unattended workstation, aka ZEN-15412. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6261 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:10:13.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers to execute arbitrary code by (1) spoofing the callhome server or (2) deploying a crafted web site that is visited during a login session, aka ZEN-12657. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/449452 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
CVE ID: CVE-2014-6262 State: PUBLISHED Published: 2020-02-12T01:30:20 Last Updated: 2024-08-06T12:10:13.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function, aka ZEN-15415, a related issue to CVE-2013-2131. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing - http://www.kb.cert.org/vuls/i
.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing - http://www.kb.cert.org/vuls/id/449452 - https://www.securityfocus.com/bid/71540 - https://github.com/oetiker/rrdtool-1.x/pull/532 - https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec - https://github.com/oetiker/rrdtool-1.x/commit/85261a013112e278c90224033f5b0592ee387786 - https://lists.debian.org/debian-lts-announce/2020/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00003.html
CVE ID: CVE-2014-6268 State: PUBLISHED Published: 2015-01-12T15:00:00 Last Updated: 2024-08-06T12:10:13.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030829 - http://xenbits.xen.org/xsa/advisory-107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95837 - http://www.securityfocus.com/bid/69753
CVE ID: CVE-2014-6269 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T12:10:13.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.comp.web.haproxy/17726 - http://secunia.com/advisories/61507 - http://secunia.com/advisories/59936 - http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commitdiff%3Bh=b4d0509
ories/61507 - http://secunia.com/advisories/59936 - http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commitdiff%3Bh=b4d05093bc89f71377230228007e69a1434c1a0c - http://article.gmane.org/gmane.comp.web.haproxy/18097 - http://www.openwall.com/lists/oss-security/2014/09/09/23 - http://rhn.redhat.com/errata/RHSA-2014-1292.html
CVE ID: CVE-2014-6270 State: PUBLISHED Published: 2014-09-12T14:00:00 Last Updated: 2024-08-06T12:10:13.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95873 - https://security.gentoo.org/glsa/201607-01 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.
73 - https://security.gentoo.org/glsa/201607-01 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - https://bugzilla.redhat.com/show_bug.cgi?id=1139967 - http://seclists.org/oss-sec/2014/q3/542 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - https://bugzilla.novell.com/show_bug.cgi?id=895773 - http://seclists.org/oss-sec/2014/q3/550 - http://www.ubuntu.com/usn/USN-2921-1 - http://www.securityfocus.com/bid/69686
CVE ID: CVE-2014-6271 State: PUBLISHED Published: 2014-09-24T18:00:00.000Z Last Updated: 2025-10-22T00:05:36.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the origin
which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/37816/ - http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com/support/docview.wss?uid=swg21685749 - http://marc.info/?
om/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com/support/docview.wss?uid=swg21685749 - http://marc.info/?l=bugtraq&m=141577137423233&w=2 - http://marc.info/?l=bugtraq&m=142719845423222&w=2 - https://www.exploit-db.com/exploits/39918/ - http://marc.info/?l=bugtraq&m=141216668515282&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1295.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html - https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts - http://marc.info/?l=
/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts - http://marc.info/?l=bugtraq&m=141383138121313&w=2 - http://marc.info/?l=bugtraq&m=142721162228379&w=2 - http://www.securityfocus.com/archive/1/533593/100/0/threaded - http://marc.info/?l=bugtraq&m=142358026505815&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686084 - http://www-01.ibm.com/support/docview.wss?uid=swg21686479 - http://marc.info/?l=bugtraq&m=142719845423222&w=2 - http://secunia.com/advisories/61188 - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://jvn.jp/en/jp/JVN55667175/index.html - http://secunia.com/advi
ulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://jvn.jp/en/jp/JVN55667175/index.html - http://secunia.com/advisories/61676 - https://www.exploit-db.com/exploits/40619/ - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html - http://secunia.com/advisories/60433 - https://www.exploit-db.com/exploits/38849/ - http://marc.info/?l=bugtraq&m=141383026420882&w=2 - http://marc.info/?l=bugtraq&m=141585637922673&w=2 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html - http://marc.info/?l=bugtraq&m=141576728022234&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21685541 - h
html - http://marc.info/?l=bugtraq&m=141576728022234&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21685541 - http://secunia.com/advisories/61715 - http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html - http://secunia.com/advisories/61816 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html - http://secunia.com/advisories/61442 - http://marc.info/?l=bugtraq&m=142358078406056&w=2 - http://marc.info/?l=bugtraq&m=142805027510172&w=2 - http://secunia.com/advisories/61283 - http://marc.info/?l=bugtraq&m=142113462216480&w=2 - http://www.ubuntu.com/usn/USN-2362-1 - https://kc.mcafee.com/corporate/index?page=content&id=SB10085 - http://lists.opensus
p://www.ubuntu.com/usn/USN-2362-1 - https://kc.mcafee.com/corporate/index?page=content&id=SB10085 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html - http://secunia.com/advisories/61654 - http://secunia.com/advisories/61542 - http://www.novell.com/support/kb/doc.php?id=7015701 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 - http://secunia.com/advisories/62312 - http://secunia.com/advisories/59272 - http://marc.info/?l=bugtraq&m=141319209015420&w=2 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21685604 - http://mar
tp://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21685604 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/61703 - http://support.apple.com/kb/HT6495 - http://www.kb.cert.org/vuls/id/252743 - http://secunia.com/advisories/61065 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html - http://marc.info/?l=bugtraq&m=141383196021590&w=2 - http://marc.info/?l=bugtraq&m=141383081521087&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686445 - http://www-01.ibm.com/support/docview.wss?uid=swg21686131 - http://www.securityfocus.com/bid/70103 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126
pport/docview.wss?uid=swg21686131 - http://www.securityfocus.com/bid/70103 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://www.us-cert.gov/ncas/alerts/TA14-268A - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html - http://secunia.com/advisories/61641 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 - https://access.redhat.com/node/1200223 - http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 - http://archi