Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://security.gentoo.org/glsa/201701-53 - http://www.openwall.com/lists/oss-security/2014/08/27/2 - http://www.securityfocus.com/bid/69342 - http://secunia.com/advisories/59890 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:144 - http://www.debian.org/security/2014/dsa-3016 - http://www.openwall.com/lists/oss-security/2014/08/21/1 - http://secunia.com/advisories/60869 - http://www.debian.org/security/2014/dsa-3015 - http://secunia.com/advisories/61411 - http://www.lua.org/bugs.html#5.2.2-1 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.html - http://advisories.mageia.org/MGASA-2014-0414.html - https://security.gentoo.org/glsa/202305-23
CVE ID: CVE-2014-5462 State: PUBLISHED Published: 2014-12-08T16:00:00 Last Updated: 2024-08-06T11:48:49.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) layout_id parameter to interface/super/edit_layout.php; (2) form_patient_id, (3) form_drug_name, or (4) form_lot_number parameter to interface/reports/prescriptions_report.php; (5) payment_id parameter to interface/billing/edit_payment.php; (6) id parameter to interface/forms_admin/forms_admin.php; (7) form_pid or (8) form_encounter parameter to interface/billing/sl_eob_se
er to interface/forms_admin/forms_admin.php; (7) form_pid or (8) form_encounter parameter to interface/billing/sl_eob_search.php; (9) sortby parameter to interface/logview/logview.php; form_facility parameter to (10) procedure_stats.php, (11) pending_followup.php, or (12) pending_orders.php in interface/orders/; (13) patient, (14) encounterid, (15) formid, or (16) issue parameter to interface/patient_file/deleter.php; (17) search_term parameter to interface/patient_file/encounter/coding_popup.php; (18) text parameter to interface/patient_file/encounter/search_code.php; (19) form_addr1, (20) form_addr2, (21) form_attn, (22) form_country, (23) form_freeb_type, (24) form_partner, (25) form_name
form_addr1, (20) form_addr2, (21) form_attn, (22) form_country, (23) form_freeb_type, (24) form_partner, (25) form_name, (26) form_zip, (27) form_state, (28) form_city, or (29) form_cms_id parameter to interface/practice/ins_search.php; (30) form_pid parameter to interface/patient_file/problem_encounter.php; (31) patient, (32) form_provider, (33) form_apptstatus, or (34) form_facility parameter to interface/reports/appointments_report.php; (35) db_id parameter to interface/patient_file/summary/demographics_save.php; (36) p parameter to interface/fax/fax_dispatch_newpid.php; or (37) patient_id parameter to interface/patient_file/reminder/patient_reminders.php. Additional Analyst Notes: - CVE
; or (37) patient_id parameter to interface/patient_file/reminder/patient_reminders.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/24 - http://packetstormsecurity.com/files/129403/OpenEMR-4.1.2-7-SQL-Injection.html - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5462/ - https://github.com/openemr/openemr/issues/1782
CVE ID: CVE-2014-5464 State: PUBLISHED Published: 2014-09-08T14:00:00 Last Updated: 2024-08-06T11:48:49.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533332/100/0/threaded - http://packetstormsecurity.com/files/127995/ntopng-1.2.0-Cross-Site-Scripting.html - http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ - http://seclists.org/fulldisclosure/2014/Sep/28
.html - http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ - http://seclists.org/fulldisclosure/2014/Sep/28 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95461 - http://secunia.com/advisories/60096 - http://osvdb.org/show/osvdb/110437 - http://seclists.org/fulldisclosure/2014/Aug/65 - http://seclists.org/fulldisclosure/2014/Sep/22 - http://www.exploit-db.com/exploits/34419 - http://www.securityfocus.com/bid/69385 - http://www.securityfocus.com/archive/1/533222/100/0/threaded
CVE ID: CVE-2014-5465 State: PUBLISHED Published: 2014-09-03T19:00:00 Last Updated: 2024-08-06T11:48:48.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34436 - http://www.securityfocus.com/bid/69440 - http://wordpress.org/support/topic/vulnerability-5 - http://packetstormsecurity.com/files/128024/WordPress-ShortCode-1.1-Local-File-Inclusion.html - http://wordpress.org/pl
http://packetstormsecurity.com/files/128024/WordPress-ShortCode-1.1-Local-File-Inclusion.html - http://wordpress.org/plugins/download-shortcode/changelog/ - http://wordpress.org/support/topic/plugin-download-shortcode-security-issue
CVE ID: CVE-2014-5466 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T11:48:49.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAANST
CVE ID: CVE-2014-5468 State: PUBLISHED Published: 2020-02-07T16:04:28 Last Updated: 2024-08-06T11:48:48.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128234/Railo-4.2.1-Remote-File-Inclusion.html - http://www.exploit-db.com/exploits/34669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95959 - https://www.securityfocus.c
exploit-db.com/exploits/34669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95959 - https://www.securityfocus.com/bid/69761 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2014-5468
CVE ID: CVE-2014-5470 State: PUBLISHED Published: 2024-06-21T00:00:00 Last Updated: 2024-08-06T11:48:49.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vulmon.com/exploitdetails?qidtp=exploitdb&qid=35549 - https://www.exploit-db.com/exploits/35549
CVE ID: CVE-2014-5471 State: PUBLISHED Published: 2014-09-01T01:00:00 Last Updated: 2024-08-06T11:48:49.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1318.html - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://marc.info/?l=bugtraq&m=1427
t.com/errata/RHSA-2014-1318.html - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://www.openwall.com/lists/oss-security/2014/08/27/1 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.ubuntu.com/usn/USN-2356-1 - http://www.ubuntu.com/usn/USN-2355-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1134099 - http://www.ubuntu.com/usn/USN-2357-1 - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0803.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95481 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://lists.op
com/vulnerabilities/95481 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://seclists.org/oss-sec/2014/q3/450 - http://www.ubuntu.com/usn/USN-2359-1 - http://www.ubuntu.com/usn/USN-2354-1 - http://rhn.redhat.com/errata/RHSA-2015-0782.html - http://www.ubuntu.com/usn/USN-2358-1 - https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 - https://code.google.com/p/google-security-research/issues/detail?id=88 - http://www.securityfocus.com/bid/69396 - http://git.kernel.org/?p=linux/ke
oogle-security-research/issues/detail?id=88 - http://www.securityfocus.com/bid/69396 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 - http://rhn.redhat.com/errata/RHSA-2015-0102.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-5472 State: PUBLISHED Published: 2014-09-01T01:00:00 Last Updated: 2024-08-06T11:48:48.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95556 - http://www.securityfocus.com/bid/69428 - http://rhn.redhat.com/errata/RHSA-2014-1318.html - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://marc.info/?l=bugtraq
n.redhat.com/errata/RHSA-2014-1318.html - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://www.openwall.com/lists/oss-security/2014/08/27/1 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.ubuntu.com/usn/USN-2356-1 - http://www.ubuntu.com/usn/USN-2355-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1134099 - http://www.ubuntu.com/usn/USN-2357-1 - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0803.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010
opensuse-security-announce/2014-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2359-1 - http://www.ubuntu.com/usn/USN-2354-1 - http://rhn.redhat.com/errata/RHSA-2015-0782.html - http://www.ubuntu.com/usn/USN-2358-1 - https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 - https://code.google.com/p/google-security-research/issues/detail?id=88 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 - http://rhn.redhat.com/errata/RHSA-2015-0102.htm
/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 - http://rhn.redhat.com/errata/RHSA-2015-0102.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-5500 State: PUBLISHED Published: 2020-01-27T18:25:32 Last Updated: 2024-08-06T11:48:49.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synacor Zimbra Collaboration before 8.0.8 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE ID: CVE-2014-5501 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T11:48:49.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file. Additional Analyst Notes: - CVE Program Container: References: - http://kb.cyberoam.com/default.asp?id=3049 - http://www.zerodayinitiative.com/advisories/ZDI-14-334/
CVE ID: CVE-2014-5502 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T11:48:48.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-328/ - http://www.zerodayinitiative.com/advisories/ZDI-14-333/ - http://www.zerodayinitiative.com/advisories/ZDI-14-331/ - http://www.zerodayinitiative.com/advisories/ZDI-
ZDI-14-333/ - http://www.zerodayinitiative.com/advisories/ZDI-14-331/ - http://www.zerodayinitiative.com/advisories/ZDI-14-332/ - http://kb.cyberoam.com/default.asp?id=3049
CVE ID: CVE-2014-5503 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T11:48:49.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode. Additional Analyst Notes: - CVE Program Container: References: - http://kb.cyberoam.com/default.asp?id=3049 - http://www.zerodayinitiative.com/advisories/ZDI-14-329/
CVE ID: CVE-2014-5504 State: PUBLISHED Published: 2014-09-04T17:00:00 Last Updated: 2024-08-06T11:48:49.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-303/ - http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
CVE ID: CVE-2014-5505 State: PUBLISHED Published: 2014-09-04T17:00:00 Last Updated: 2024-08-06T11:48:49.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95740 - https://service.sap.com/sap/support/notes/1999142 - http://www.zerodayinitiative.com/advisories/ZDI-14-301/ - http://www.securityfocus.com/bid/69558 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-5506 State: PUBLISHED Published: 2014-09-04T17:00:00 Last Updated: 2024-08-06T11:48:48.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1999142 - http://www.zerodayinitiative.com/advisories/ZDI-14-302/ - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/69557 - http://secunia.com/advisories/61016
CVE ID: CVE-2014-5507 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T11:48:49.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: iBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe, which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35040 - http://www.securityfocus.com/bid/70724 - http://packetstormsecurity.com/files/128806/iBackup-10.0.0.32-Local-Privilege-Escalation.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97749
CVE ID: CVE-2014-5508 State: PUBLISHED Published: 2014-09-05T14:00:00 Last Updated: 2024-08-06T11:48:48.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service (infinite loop) via a large value in the EmptyInterval parameter or certain other interval configurations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/08/28/5 - http://www.securityfocus.com/bid/69454 - http://www.openwall.com/lists/oss-security/2014/08/30/1
CVE ID: CVE-2014-5509 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T11:48:49.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=98435 - http://www.openwall.com/lists/oss-security/2014/08/30/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1135624 - http://www.securityfocus.com/bid/69473
CVE ID: CVE-2014-5516 State: PUBLISHED Published: 2020-01-03T19:57:49 Last Updated: 2024-08-06T11:48:49.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128342/KonaKart-Storefront-Application-Cross-Site-Request-Forgery.html - http://www.christian-schneider.net/advisories/CVE-2014-5516.txt - http://www.konakart.c
ross-Site-Request-Forgery.html - http://www.christian-schneider.net/advisories/CVE-2014-5516.txt - http://www.konakart.com/downloads/ver-7-3-0-0-whats-new
CVE ID: CVE-2014-5519 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T11:48:49.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128031/PhpWiki-Ploticus-Command-Injection.html - http://seclists.org/oss-sec/2014/q3/465 - http://osvdb.org/show/osvdb/110576 - http://www.exploit-db.com/exploits/34451 - http://
clists.org/oss-sec/2014/q3/465 - http://osvdb.org/show/osvdb/110576 - http://www.exploit-db.com/exploits/34451 - http://seclists.org/oss-sec/2014/q3/456 - http://seclists.org/fulldisclosure/2014/Aug/77 - http://secunia.com/advisories/60293
CVE ID: CVE-2014-5520 State: PUBLISHED Published: 2014-10-26T20:00:00 Last Updated: 2024-08-06T11:48:49.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128030/XRMS-Blind-SQL-Injection-Command-Execution.html - http://www.securityfocus.com/bid/69446 - http://seclists.org/fulldisclosure/2014/Aug/78 - http://www.openwall.com/lists/oss-securit
securityfocus.com/bid/69446 - http://seclists.org/fulldisclosure/2014/Aug/78 - http://www.openwall.com/lists/oss-security/2014/08/27/4 - http://www.openwall.com/lists/oss-security/2014/08/29/1 - http://www.exploit-db.com/exploits/34452
CVE ID: CVE-2014-5521 State: PUBLISHED Published: 2014-09-02T14:00:00 Last Updated: 2024-08-06T11:48:49.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128030/XRMS-Blind-SQL-Injection-Command-Execution.html - http://seclists.org/fulldisclosure/2014/Aug/78 - http://www.openwall.com/lists/oss-security/2014/08/27/4 - http://www.openwall.com/lists/oss-security/2014/08/29/1 - http://www.exploit-db.com/exploit
/oss-security/2014/08/27/4 - http://www.openwall.com/lists/oss-security/2014/08/29/1 - http://www.exploit-db.com/exploits/34452
CVE ID: CVE-2014-5522 State: REJECTED Published: 2014-09-22T10:00:00 Last Updated: 2014-09-22T08:57:01 Description: No description available.
CVE ID: CVE-2014-5523 State: REJECTED Published: 2014-09-22T10:00:00 Last Updated: 2014-09-22T08:57:01 Description: No description available.
CVE ID: CVE-2014-5524 State: PUBLISHED Published: 2014-09-09T01:00:00 Last Updated: 2024-08-06T11:48:49.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adcolony library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/199345
CVE ID: CVE-2014-5525 State: PUBLISHED Published: 2014-09-09T01:00:00 Last Updated: 2024-08-06T11:48:49.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoMinis library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/935465
CVE ID: CVE-2014-5526 State: PUBLISHED Published: 2014-09-09T01:00:00 Last Updated: 2024-08-06T11:48:49.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Inmobi library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/571145 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-5527 State: PUBLISHED Published: 2014-09-09T01:00:00 Last Updated: 2024-08-06T11:48:49.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/123577 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing