Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4021 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T11:04:27.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135071.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://secunia.com/advisories/60471 - http://secunia.com/advisories/60027 - http://linux.oracle.com/errata/ELSA-2014-0926.html - http
a.com/advisories/60471 - http://secunia.com/advisories/60027 - http://linux.oracle.com/errata/ELSA-2014-0926.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://linux.oracle.com/errata/ELSA-2014-0926-1.html - http://support.citrix.com/article/CTX140984 - http://www.securitytracker.com/id/1030442 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://xenbits.xen.org/xsa/advisory-100.html - http://secunia.com/advisories/60130 - http://www.debian.org/security/2014/dsa-3006 - http://www.securityfocus.com/bid/68070 - http://secunia.com/advisories/59208 - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135068.html
CVE ID: CVE-2014-4022 State: PUBLISHED Published: 2014-07-09T14:00:00 Last Updated: 2024-08-06T11:04:27.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM platform, does not properly initialize the structure containing the grant table pages for a domain, which allows local guest administrators to obtain sensitive information via the GNTTABOP_setup_table subhypercall. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68184 - http://secunia.com/advisories/59523 - http://www.securitytracker.com/id/1030471 - http://xenbits.xen.org/xsa/advisory-10
http://secunia.com/advisories/59523 - http://www.securitytracker.com/id/1030471 - http://xenbits.xen.org/xsa/advisory-101.html
CVE ID: CVE-2014-4023 State: PUBLISHED Published: 2014-10-28T14:00:00 Last Updated: 2024-08-06T11:04:27.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0 through 11.4.1 and 10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inje
10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140828-F5_BIG-IP_Reflected_XSS_v10.txt - https://support.f5.com/kb/en-us/solutions/public/15000/500/sol15532.html - http://www.securitytracker.com/id/1030776
CVE ID: CVE-2014-4024 State: PUBLISHED Published: 2018-03-19T21:00:00 Last Updated: 2024-08-06T11:04:28.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used with third-party Secure Sockets Layer (SSL) accelerator cards, might allow remote attackers to have unspecified impact via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95834 - https://support.f5.com/csp/article/K15500
CVE ID: CVE-2014-4027 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T11:04:27.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://secunia.com/advisories/59134 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html
06.html - http://secunia.com/advisories/59134 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html - https://bugzilla.redhat.com/show_bug.cgi?id=1108744 - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - https://github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc - http://secunia.com/advisories/59777 - http://secunia.com/advisories/61310 - http://www.openwall.com/lists/oss-security/2014
p://secunia.com/advisories/59777 - http://secunia.com/advisories/61310 - http://www.openwall.com/lists/oss-security/2014/06/11/1 - http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618
CVE ID: CVE-2014-4030 State: PUBLISHED Published: 2014-06-25T20:00:00 Last Updated: 2024-08-06T11:04:28.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/jw-player-for-flash-html5-video/ - http://wordpress.org/plugins/jw-player-plugin-for-wordpress/changelog - http://secunia.com/advisories/59173 - http://seclists.org/fulldisclosure/2014/
w-player-plugin-for-wordpress/changelog - http://secunia.com/advisories/59173 - http://seclists.org/fulldisclosure/2014/Jun/64
CVE ID: CVE-2014-4031 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T11:04:27.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-07032014.txt - http://secunia.com/advisories/58936
CVE ID: CVE-2014-4032 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T11:04:27.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58833 - http://www.securityfocus.com/bid/67729 - http://packetstormsecurity.com/files/126856/Fiyo-CMS-1.5.7-Cross-Site-Scripting.html
CVE ID: CVE-2014-4033 State: PUBLISHED Published: 2014-06-11T14:00:00Z Last Updated: 2024-09-17T00:16:17.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67946 - http://packetstormsecurity.com/files/127006/eFront-3.6.14.4-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/33697 - https://github.com/epignosis/efront_open_source/issues/5
CVE ID: CVE-2014-4034 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T11:04:27.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67953 - http://packetstormsecurity.com/files/130192/ZeroCMS-1.3.3-SQL-Injection.html - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5186.php - http://seclists.org/oss-sec/2015/q1/379 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-14.html - htt
/seclists.org/oss-sec/2015/q1/379 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-14.html - http://secunia.com/advisories/59182 - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-13.html - http://www.exploit-db.com/exploits/33702 - http://seclists.org/oss-sec/2015/q1/380 - http://seclists.org/fulldisclosure/2015/Feb/4 - http://sroesemann.blogspot.de/2015/02/addition-for-advisory-sroeadv-2015-14.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100588 - http://packetstormsecurity.com/files/127005/ZeroCMS-1.0-SQL-Injection.html
CVE ID: CVE-2014-4035 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T11:04:28.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126949/BSI-Advance-Hotel-Booking-System-2.0-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/67914 - http://packetstormsecurity.com/files/154024/BSI-Advance-Hotel-Booking-System-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2014-4036 State: PUBLISHED Published: 2014-06-11T14:00:00Z Last Updated: 2024-09-16T19:05:04.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a listimg action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126909/ImpressCMS-1.3.6.1-Cross-Site-Scripting.html
CVE ID: CVE-2014-4037 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T11:04:28.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array key in the textinputs[] parameter, a different issue than CVE-2012-4000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030413 - http://packetstormsecurity.com/files/126902/FCKeditor-2.6.10-Cross-Site-Scripting.html - http://ckeditor.com/blog/F
13 - http://packetstormsecurity.com/files/126902/FCKeditor-2.6.10-Cross-Site-Scripting.html - http://ckeditor.com/blog/FCKeditor-2.6.11-Released
CVE ID: CVE-2014-4038 State: PUBLISHED Published: 2014-06-17T15:00:00 Last Updated: 2024-08-06T11:04:28.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1320.html - http://openwall.com/lists/oss-security/2014/06/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1109371 - http://rhn.redhat.com/errata/RHSA-2015-0383.h
urity/2014/06/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1109371 - http://rhn.redhat.com/errata/RHSA-2015-0383.html - http://secunia.com/advisories/60616 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00018.html - https://bugzilla.novell.com/show_bug.cgi?id=882667 - http://www.securityfocus.com/bid/68049
CVE ID: CVE-2014-4039 State: PUBLISHED Published: 2014-06-17T15:00:00 Last Updated: 2024-08-06T11:04:27.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1320.html - http://openwall.com/lists/oss-security/2014/06/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1109371 - http://rhn.redhat.com/
nwall.com/lists/oss-security/2014/06/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1109371 - http://rhn.redhat.com/errata/RHSA-2015-0383.html - http://secunia.com/advisories/60616 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00018.html - http://www.securityfocus.com/bid/68086
CVE ID: CVE-2014-4040 State: PUBLISHED Published: 2014-06-17T15:00:00 Last Updated: 2024-08-06T11:04:27.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/06/17/1 - http://rhn.redhat.com/errata/RHSA-2015-0384.html
CVE ID: CVE-2014-4043 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T11:04:28.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=blobdiff%3Bf=ChangeLog%3Bh=3020b9ac232315df362521aeaf85f21cb9926db8%3Bhp=d86e73963dd9fb5e21b1a28326630337226812aa%3Bhb=89e435f3559c53084498e9baad22172b64429362%3Bhpb=c3a2ebe1f7541cc35937
8%3Bhp=d86e73963dd9fb5e21b1a28326630337226812aa%3Bhb=89e435f3559c53084498e9baad22172b64429362%3Bhpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845 - http://www.securityfocus.com/bid/68006 - https://sourceware.org/bugzilla/show_bug.cgi?id=17048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93784 - https://bugzilla.redhat.com/show_bug.cgi?id=1109263 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=89e435f3559c53084498e9baad22172b64429362 - https://security.gentoo.org/glsa/201503-04 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:152 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00012.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=blobdi
suse.org/opensuse-security-announce/2015-08/msg00012.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=blobdiff%3Bf=posix/spawn_faction_addopen.c%3Bh=40800b8e6e81341501c0fb8a91009529e2048dec%3Bhp=47f62425b696a4fdd511b2a057746322eb6518db%3Bhb=89e435f3559c53084498e9baad22172b64429362%3Bhpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/C
.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2014-4044 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:27.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access and crash) via unspecified vectors related to TMAY requests. Additional Analyst Notes: - CVE Program Container: References: - http://gerrit.openafs.org/#change%2C11283 - http://www.openwall.com/lists/oss-security/2014/06/13/3 - http://www.securityfocus.com/bid/68003 - http://www.openwall.com/lists/oss-security/2014/06/12/1
CVE ID: CVE-2014-4045 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:28.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to cause a denial of service (assertion failure and crash) via an unsubscribe request when not subscribed to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532414/100/0/threaded - http://packetstormsecurity.com/files/127087/Asterisk-Project-Security-Advisory-AST-2014-005.html - http://downloads.ast
http://packetstormsecurity.com/files/127087/Asterisk-Project-Security-Advisory-AST-2014-005.html - http://downloads.asterisk.org/pub/security/AST-2014-005.html
CVE ID: CVE-2014-4046 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:27.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532419/100/0/threaded - http://packetstormsecurity.com/files/127088/Asterisk-Project-Security-Advisory-AST-2014-006.html - http://downloads.asterisk.org/pub/security/AST-2014-006.html
CVE ID: CVE-2014-4047 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:28.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532415/100/0/threaded - http://packetstormsecurity.com/files/127089/Asterisk-Project-Security-Advisory-AST-2014-00
ive/1/532415/100/0/threaded - http://packetstormsecurity.com/files/127089/Asterisk-Project-Security-Advisory-AST-2014-007.html - http://downloads.asterisk.org/pub/security/AST-2014-007.html
CVE ID: CVE-2014-4048 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T11:04:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532416/100/0/threaded - http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html - http://downloads.asterisk.org/pub/security/AST-2014-008.html
CVE ID: CVE-2014-4049 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T11:04:28.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59329 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html - http://secunia.com/advisories/59418 - https://support.apple.com/HT204659 - http:
curity-announce/2014-07/msg00001.html - http://secunia.com/advisories/59418 - https://support.apple.com/HT204659 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - http://secunia.com/advisories/59496 - http://www.securitytracker.com/id/1030435 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://secunia.com/advisories/59652 - http://www.securityfocus.com/bid/68007 - http://secunia.com/advisories/59513 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html - http://secunia.com/advisories/60998 - http://secunia.com/advisories/59270 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.ht
ies/60998 - http://secunia.com/advisories/59270 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html - https://bugzilla.redhat.com/show_bug.cgi?id=1108447 - http://www.debian.org/security/2014/dsa-2961 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468 - http://www.openwall.com/lists/oss-security/2014/06/13/4 - http://lists.opensuse.org/opensuse-updates/2014
c8d101c18468 - http://www.openwall.com/lists/oss-security/2014/06/13/4 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html
CVE ID: CVE-2014-4050 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T11:04:28.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4055, and CVE-2014-4067. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secu
tracker.com/id/1030715 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670 - http://www.securityfocus.com/bid/69125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94984
CVE ID: CVE-2014-4051 State: PUBLISHED Published: 2014-08-12T21:00:00 Last Updated: 2024-08-06T11:04:27.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2784. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69126 - http://www.securitytracker.com/id/1030715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94985 - https://docs.microsoft.com/en-us/security-updates/secu
15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94985 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051 - http://secunia.com/advisories/60670