Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8035 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T13:10:50.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100662 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8035 - http://www.securityfocus.com/bid/71980
CVE ID: CVE-2014-8036 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T13:10:50.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100571 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8036 - http://secunia.com/advisories/60330
CVE ID: CVE-2014-8038 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8039 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8040 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8041 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8042 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8043 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8044 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8045 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8046 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8047 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8048 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8049 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8050 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8051 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8052 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8053 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8054 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8055 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8056 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8057 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8058 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8059 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8060 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8061 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8062 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8063 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8064 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8065 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8066 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8067 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8068 State: PUBLISHED Published: 2014-10-09T10:00:00 Last Updated: 2024-08-06T13:10:50.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Digital Editions (DE) 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97696 - http://the-digital-reader.com/2014/10/06/adobe-spying-users-collecting-data-ebook-libraries/ - http://twitter.com/AdobeSecurity/statuses/519826275008282624 - http://arste
ing-users-collecting-data-ebook-libraries/ - http://twitter.com/AdobeSecurity/statuses/519826275008282624 - http://arstechnica.com/security/2014/10/adobes-e-book-reader-sends-your-reading-logs-back-to-adobe-in-plain-text/ - http://secunia.com/advisories/61551
CVE ID: CVE-2014-8069 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T13:10:50.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to index.php/user or (2) PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128641/Pagekit-0.8.7-Cross-Site-Scripting-Open-Redirect.html
CVE ID: CVE-2014-8070 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T13:10:50.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128641/Pagekit-0.8.7-Cross-Site-Scripting-Open-Redirect.html
CVE ID: CVE-2014-8071 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T13:10:50.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the (1) givenName, (2) familyName, (3) address1, or (4) address2 parameter to registrationapp/registerPatient.page; the (5) comment parameter to allergyui/allergy.page; the (6) w10 parameter to htmlformentryui/htmlform/enterHtmlForm/submit.action; the (7) HTTP Referer Header to login.htm; the (8) returnUrl parameter to htmlformentryui/htmlform/enterHtmlFormWithStandardUi.page o
Referer Header to login.htm; the (8) returnUrl parameter to htmlformentryui/htmlform/enterHtmlFormWithStandardUi.page or (9) coreapps/mergeVisits.page; or the (10) visitId parameter to htmlformentryui/htmlform/enterHtmlFormWithSimpleUi.page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97690 - http://www.securityfocus.com/bid/70664
CVE ID: CVE-2014-8072 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T13:10:50.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97693 - http://www.securityfocus.com/bid/70664
CVE ID: CVE-2014-8073 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T13:10:50.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of administrators for requests that add a new user via a Save User action to admin/users/user.form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html - http://www.securityfocus.com/bid/70664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97692
CVE ID: CVE-2014-8074 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T13:10:50.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-22 - http://www.zerodayinitiative.com/advisories/ZDI-14-362/ - http://www.securityfocus.com/bid/70608
CVE ID: CVE-2014-8075 State: PUBLISHED Published: 2014-10-09T14:00:00 Last Updated: 2024-08-06T13:10:50.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Tribune module 6.x-1.x and 7.x-3.x for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90830 - https://www.drupal.org/node/2184845 - http://osvdb.org/102655
CVE ID: CVE-2014-8076 State: PUBLISHED Published: 2014-10-09T14:00:00 Last Updated: 2024-08-06T13:10:50.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to custom copyright information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92755 - http://secunia.com/advisories/58233 - http://drupal.org/node/2248145 - https://www.drupal.org/node/2248095
CVE ID: CVE-2014-8077 State: PUBLISHED Published: 2014-10-09T14:00:00 Last Updated: 2024-08-06T13:10:50.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NewsFlash theme 6.x-1.x before 6.x-1.7 and 7.x-1.x before 7.x-2.5 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to font family CSS property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91740 - https://www.drupal.org/node/2211381 - https://www.drupal.org/node/2210621 - https
e.ibmcloud.com/vulnerabilities/91740 - https://www.drupal.org/node/2211381 - https://www.drupal.org/node/2210621 - https://www.drupal.org/node/2210619 - http://www.securityfocus.com/bid/65998
CVE ID: CVE-2014-8078 State: PUBLISHED Published: 2014-10-09T14:00:00 Last Updated: 2024-08-06T13:10:50.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to nodes. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2231191 - http://secunia.com/advisories/57402 - https://www.drupal.org/node/2231197 - https://drupal.org/node/2231671 - http
191 - http://secunia.com/advisories/57402 - https://www.drupal.org/node/2231197 - https://drupal.org/node/2231671 - https://www.drupal.org/node/2231199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92349
CVE ID: CVE-2014-8079 State: PUBLISHED Published: 2014-10-09T14:00:00 Last Updated: 2024-08-06T13:10:49.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to header background setting. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2194135 - http://osvdb.org/103261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91154 - https://www.drupal.org/node/2193987 - http://www.securityfocus.com/bid/65523 - http://secu
d.com/vulnerabilities/91154 - https://www.drupal.org/node/2193987 - http://www.securityfocus.com/bid/65523 - http://secunia.com/advisories/56876
CVE ID: CVE-2014-8080 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T13:10:50.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61607 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00035.html - http://advisories.mageia.org/MGASA-2014-0443.html - http://rhn.redhat.com/errata/RHSA-2014-1912.html - http://www.debian
http://advisories.mageia.org/MGASA-2014-0443.html - http://rhn.redhat.com/errata/RHSA-2014-1912.html - http://www.debian.org/security/2015/dsa-3159 - http://secunia.com/advisories/62050 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2014-1913.html - https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/ - https://support.apple.com/HT205267 - http://rhn.redhat.com/errata/RHSA-2014-1911.html - http://www.securityfocus.com/bid/70935 - http://www.debian.org/security/2015/dsa-3157 - http://www.ubuntu.com/usn/USN-2397-1 - http://secuni
ocus.com/bid/70935 - http://www.debian.org/security/2015/dsa-3157 - http://www.ubuntu.com/usn/USN-2397-1 - http://secunia.com/advisories/62748 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00004.html - http://rhn.redhat.com/errata/RHSA-2014-1914.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00000.html
CVE ID: CVE-2014-8081 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:10:50.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter_result_result parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/105 - https://gitorious.org/testlink-ga/testlink-code/commit/a519da3a45d80077e4eab957eb793b03652f57dc - http://karmainsecurity.com/KIS-2014-11 - http://mantis.testlink.org/view.php?id=6651 - http://www.securityfocus.com/bid/70711 -
karmainsecurity.com/KIS-2014-11 - http://mantis.testlink.org/view.php?id=6651 - http://www.securityfocus.com/bid/70711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97727 - http://www.securityfocus.com/archive/1/533798/100/0/threaded
CVE ID: CVE-2014-8082 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:10:49.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/106 - http://packetstormsecurity.com/files/128824/TestLink-1.9.12-Path-Disclosure.html - http://karmainsecurity.com/KIS-2014-12 - http://www.securityfocus.com/archive/1/533799/100/0/threaded - http://mantis.testlink.org/view.p
urity.com/KIS-2014-12 - http://www.securityfocus.com/archive/1/533799/100/0/threaded - http://mantis.testlink.org/view.php?id=6651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97728 - http://www.securityfocus.com/bid/70713 - https://gitorious.org/testlink-ga/testlink-code/commit/c943e7a397f03e1f60b096c7e6eb94fdefd8a569
CVE ID: CVE-2014-8083 State: PUBLISHED Published: 2015-01-05T20:00:00 Last Updated: 2024-08-06T13:10:49.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Search::setJsonAlert method in OSClass before 3.4.3 allows remote attackers to execute arbitrary SQL commands via the alert parameter in a search alert subscription action. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2014-14 - http://seclists.org/fulldisclosure/2014/Dec/132 - http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-download/ - http://www.securityfocus.com/archive/1/534359/100/0/threaded - http://www.securityfocus.com/bid/71840
-ready-download/ - http://www.securityfocus.com/archive/1/534359/100/0/threaded - http://www.securityfocus.com/bid/71840 - http://packetstormsecurity.com/files/129775/Osclass-3.4.2-SQL-Injection.html
CVE ID: CVE-2014-8084 State: PUBLISHED Published: 2015-01-05T20:00:00 Last Updated: 2024-08-06T13:10:50.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ajaxfile parameter in a custom action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534360/100/0/threaded - http://www.securityfocus.com/bid/71841 - http://karmainsecurity.com/KIS-2014-15 - http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-download/ - http://packetstormse
armainsecurity.com/KIS-2014-15 - http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-download/ - http://packetstormsecurity.com/files/129776/Osclass-3.4.2-Local-File-Inclusion.html - http://seclists.org/fulldisclosure/2014/Dec/133
CVE ID: CVE-2014-8085 State: PUBLISHED Published: 2015-01-05T20:00:00 Last Updated: 2024-08-06T13:10:50.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the CWebContact::doModel method in oc-includes/osclass/controller/contact.php in OSClass before 3.4.3 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129777/Osclass-3.4.2-Shell-Upload.html - http://www.securityfocus.com/bid/71842 - http://karmainsecurity.com/K
com/files/129777/Osclass-3.4.2-Shell-Upload.html - http://www.securityfocus.com/bid/71842 - http://karmainsecurity.com/KIS-2014-16 - http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-download/ - http://www.securityfocus.com/archive/1/534361/100/0/threaded - http://seclists.org/fulldisclosure/2014/Dec/134
CVE ID: CVE-2014-8086 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T13:10:50.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2014/10/8/545 - http://www.securityfocus.com/bid/70376 - http://www.spinics.net/lists/linux-ext4/msg45685.html - https://bugzilla.redhat.com/show_bug.cgi?id=1151353 - http://www.spin
//www.spinics.net/lists/linux-ext4/msg45685.html - https://bugzilla.redhat.com/show_bug.cgi?id=1151353 - http://www.spinics.net/lists/linux-ext4/msg45683.html - http://rhn.redhat.com/errata/RHSA-2015-0694.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96922 - https://lkml.org/lkml/2014/10/9/129 - http://www.openwall.com/lists/oss-security/2014/10/09/25
CVE ID: CVE-2014-8087 State: PUBLISHED Published: 2017-10-16T15:00:00 Last Updated: 2024-08-06T13:10:50.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/post-highlights/#developers - https://g0blin.co.uk/cve-2014-8087/ - https://wpvulndb.com/vulnerabilities/8240
CVE ID: CVE-2014-8088 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T13:10:50.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Zend_Ldap class in Zend before 1.12.9 and (2) Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141070.html - http://www.openwall.com/lists/oss-security/2014/10/10/5 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/
w.openwall.com/lists/oss-security/2014/10/10/5 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141106.html - http://www.securityfocus.com/bid/70378 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2015/dsa-3265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97038