Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1985 State: PUBLISHED Published: 2014-04-11T14:00:00 Last Updated: 2024-08-06T09:58:15.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url (back_url parameter). Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000041.html - http://www.redmine.org/projects/redmine/wiki/Changelog - http://jvn.jp/en/jp/JVN93004610/index.html -
014-000041.html - http://www.redmine.org/projects/redmine/wiki/Changelog - http://jvn.jp/en/jp/JVN93004610/index.html - https://github.com/redmine/redmine/commit/7567c3d8b21fe67e5f04e6839c1fce061600f2f3 - http://seclists.org/oss-sec/2014/q2/84 - http://www.securityfocus.com/bid/66674 - http://www.redmine.org/projects/redmine/wiki/Security_Advisories - http://secunia.com/advisories/57524 - http://www.redmine.org/projects/redmine/wiki/Changelog_2_4
CVE ID: CVE-2014-1986 State: PUBLISHED Published: 2014-04-15T20:00:00 Last Updated: 2024-08-06T09:58:16.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55438786/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000036 - https://play.google.com/store/apps/details?id=jp.co.kokuyost.CamiApp
CVE ID: CVE-2014-1987 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000073 - http://cs.cybozu.co.jp/information/gr20140421news01.php - http://jvn.jp/en/jp/JVN42024228/index.html
CVE ID: CVE-2014-1988 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T09:58:15.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000042 - https://support.cybozu.com/ja-jp/article/8105 - http://jvn.jp/en/jp/JVN90519014/index.html
CVE ID: CVE-2014-1989 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T09:58:15.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja/article/5264 - http://jvn.jp/en/jp/JVN31230946/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000043
CVE ID: CVE-2014-1990 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T09:58:15.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.toshibatec.co.jp/page.jsp?id=4224 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000038 - http://jvn.jp/en/jp/JVN13313061/index.html
CVE ID: CVE-2014-1991 State: PUBLISHED Published: 2014-05-09T10:00:00 Last Updated: 2024-08-06T09:58:16.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in WebPlatform / AppFramework 6.0 through 7.2 in NTT DATA INTRAMART intra-mart allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN68340046/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000044 - http://jvn.jp/en/jp/JVN68340046/278948/index.html
CVE ID: CVE-2014-1992 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/gr20140714up05.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000078 - http://jvn.jp/en/jp/JVN94838679/index.html
CVE ID: CVE-2014-1993 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/gr20140714up04.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000077 - http://jvn.jp/en/jp/JVN75990997/index.html
CVE ID: CVE-2014-1994 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80583739/index.html - http://cs.cybozu.co.jp/information/gr20140714up04.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000076
CVE ID: CVE-2014-1995 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/gr20140714up02.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000075 - http://jvn.jp/en/jp/JVN97558950/index.html
CVE ID: CVE-2014-1996 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000074 - http://jvn.jp/en/jp/JVN31082531/index.html - http://cs.cybozu.co.jp/information/gr20140714up01.php
CVE ID: CVE-2014-1997 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T09:58:16.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67816 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000046 - http://jvn.jp/en/jp/JVN78136804/index.html
CVE ID: CVE-2014-1998 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T09:58:16.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN54650130/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000047
CVE ID: CVE-2014-1999 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://fuelphp.com/security-advisories - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000082 - http://jvn.jp/en/jp/JVN94791545/index.html
CVE ID: CVE-2014-2000 State: PUBLISHED Published: 2014-06-18T16:00:00 Last Updated: 2024-08-06T09:58:16.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000049 - http://jvn.jp/en/jp/JVN07677464/index.html - http://jvn.jp/en/jp/JVN07677464/995558/index.html
CVE ID: CVE-2014-2001 State: PUBLISHED Published: 2014-06-19T10:00:00 Last Updated: 2024-08-06T09:58:16.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000050 - https://play.google.com/store/apps/details?id=jp.co.jreast - http://jvn.jp/en/jp/JVN10603428/index.html
CVE ID: CVE-2014-2002 State: PUBLISHED Published: 2014-06-14T10:00:00 Last Updated: 2024-08-06T09:58:16.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in C-BOARD Moyuku 1.01b6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58029817/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000051
CVE ID: CVE-2014-2003 State: PUBLISHED Published: 2014-06-16T14:00:00 Last Updated: 2024-08-06T09:58:16.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.justsystems.com/jp/info/js14002.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000053 - http://jvn.jp/en/jp/JVN50129191/index.html - http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html
CVE ID: CVE-2014-2004 State: PUBLISHED Published: 2014-06-16T14:00:00 Last Updated: 2024-08-06T09:58:16.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1.00 through 4.50, SEIL/X2 routers 1.00 through 4.50, SEIL/B1 routers 1.00 through 4.50, SEIL/Turbo routers 1.80 through 2.17, and SEIL/neu 2FE Plus routers 1.80 through 2.17 allows remote attackers to cause a denial of service (session termination or concentrator outage) via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.seil.jp/support/security/a01443.html - http://jvn.jp/en/jp/JV
t Notes: - CVE Program Container: References: - http://www.seil.jp/support/security/a01443.html - http://jvn.jp/en/jp/JVN10724763/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000055
CVE ID: CVE-2014-2005 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T09:58:16.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000061 - http://www.sophos.com/en-us/support/knowledgebase/121066.aspx - http://jvn.jp/en/jp/JVN63940326/index.html - http://www.securityfoc
sophos.com/en-us/support/knowledgebase/121066.aspx - http://jvn.jp/en/jp/JVN63940326/index.html - http://www.securityfocus.com/bid/68169
CVE ID: CVE-2014-2006 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T09:58:16.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80006084/995199/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000063 - http://jvn.jp/en/jp/JVN80006084/index.html
CVE ID: CVE-2014-2008 State: PUBLISHED Published: 2014-09-12T14:00:00 Last Updated: 2024-08-06T09:58:16.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128136/Mpay24-Payment-Module-1.5-Information-Disclosure-SQL-Injection.html - http://www.exploit-db.com/exploits/34586 - http://seclists.org/fulldisclosure/2014/Sep/23 - http://osvdb.org/show/osvdb/110737 - https://exchange.xforce.ibmcloud.com/vulnerab
ists.org/fulldisclosure/2014/Sep/23 - http://osvdb.org/show/osvdb/110737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95720 - http://www.securityfocus.com/bid/69560
CVE ID: CVE-2014-2009 State: PUBLISHED Published: 2014-09-12T14:00:00 Last Updated: 2024-08-06T09:58:16.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95721 - http://packetstormsecurity.com/files/128136/Mpay24-Payment-Module-1.5-Information-Disclosure-SQL-Injection.html - http://osvdb.org/show/osvdb/110738 - http://www.exploit-db.com/exploits/34586 - http://seclists.o
e-SQL-Injection.html - http://osvdb.org/show/osvdb/110738 - http://www.exploit-db.com/exploits/34586 - http://seclists.org/fulldisclosure/2014/Sep/23 - http://www.securityfocus.com/bid/69560
CVE ID: CVE-2014-2013 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T09:58:16.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/375 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00088.html - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=60dabde18d7fe12b19da8b509bdfee9cc886aafc - http
g00088.html - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=60dabde18d7fe12b19da8b509bdfee9cc886aafc - http://www.osvdb.org/102340 - http://www.hdwsec.fr/blog/mupdf.html - http://www.debian.org/security/2014/dsa-2951 - http://bugs.ghostscript.com/show_bug.cgi?id=694957 - http://seclists.org/fulldisclosure/2014/Jan/130 - http://secunia.com/advisories/58904 - http://www.securityfocus.com/bid/65036 - http://www.exploit-db.com/exploits/31090
CVE ID: CVE-2014-2014 State: PUBLISHED Published: 2014-04-18T19:00:00 Last Updated: 2024-08-06T09:58:16.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/378 - http://seclists.org/oss-sec/2014/q1/367 - https://lists.fedoraproject.org/pipermail/package-announce/2014-February/128293.html - http://www.linux-france.org/prj/imapsync_list/msg01910.html - http://www.linux-france
nounce/2014-February/128293.html - http://www.linux-france.org/prj/imapsync_list/msg01910.html - http://www.linux-france.org/prj/imapsync_list/msg01907.html - https://github.com/imapsync/imapsync/issues/15 - https://bugs.mageia.org/show_bug.cgi?id=12770 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:060
CVE ID: CVE-2014-2015 State: PUBLISHED Published: 2014-11-02T00:00:00 Last Updated: 2024-08-06T09:58:16.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000616.html - http://www.openwall.com/lists/oss-security/20
lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000616.html - http://www.openwall.com/lists/oss-security/2014/02/18/3 - http://rhn.redhat.com/errata/RHSA-2015-1287.html - http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000612.html - http://ubuntu.com/usn/usn-2122-1 - http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000610.html - http://www.securityfocus.com/bid/65581 - https://bugzilla.redhat.com/show_bug.cgi?id=1066761
CVE ID: CVE-2014-2016 State: PUBLISHED Published: 2014-03-25T14:00:00 Last Updated: 2024-08-06T09:58:16.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web script or HTML via the searchtag parameter to the getTag function in (1) application/controllers/details.php or (2) application/controllers/tag.php. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.oxidforge
application/controllers/tag.php. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.oxidforge.org/Security_bulletins/2014-001 - http://secunia.com/advisories/57438
CVE ID: CVE-2014-2017 State: PUBLISHED Published: 2018-01-18T14:00:00 Last Updated: 2024-08-06T09:58:16.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.oxid-esales.com/view.php?id=5635 - https://oxidforge.org/en/security-bulletin-2014-002.html
CVE ID: CVE-2014-2018 State: PUBLISHED Published: 2014-02-17T22:00:00 Last Updated: 2024-08-06T09:58:16.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029773 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html -
://www.securitytracker.com/id/1029773 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-14.html - https://bugzilla.mozilla.org/show_bug.cgi?id=875818 - http://www.kb.cert.org/vuls/id/863369 - http://www.vulnerability-lab.com/get_content.php?id=953 - http://www.securitytracker.com/id/1029774
CVE ID: CVE-2014-2019 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T09:58:16.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary iCloud Account Password value and a blank iCloud Account Description value. Additional Analyst Notes: - CVE Program Container: References: - http://news.softpedia.com/news/Major-iOS-7-Security-Flaw-Discovered-Video-425011.shtml - http://
ontainer: References: - http://news.softpedia.com/news/Major-iOS-7-Security-Flaw-Discovered-Video-425011.shtml - http://support.apple.com/kb/HT6162 - http://www.youtube.com/watch?v=QnPk4RRWjic
CVE ID: CVE-2014-2020 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T09:58:16.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string for the x dimension value, a different vulnerability than CVE-2013-7226. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01 - http://www.ubuntu.com/usn/USN-2126-1 - http
s://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01 - http://www.ubuntu.com/usn/USN-2126-1 - https://bugs.php.net/bug.php?id=66356
CVE ID: CVE-2014-2021 State: PUBLISHED Published: 2014-10-25T00:00:00 Last Updated: 2024-08-06T09:58:16.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier, and 5.0.x through 5.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted XMLRPC API request, as demonstrated using the client name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031000 - http://seclists.org/fulldisclosure/2014/Oct/63 - http://seclists.org/fulldisclosure/2014/Oct/55 - http://packetstormsecurity.com/files/128691/vBulletin-5.x-4.
4/Oct/63 - http://seclists.org/fulldisclosure/2014/Oct/55 - http://packetstormsecurity.com/files/128691/vBulletin-5.x-4.x-Persistent-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97026 - http://www.securityfocus.com/bid/70577 - https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2021