Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8766 State: PUBLISHED Published: 2014-10-14T14:00:00 Last Updated: 2024-08-06T13:26:02.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128565/Allomani-Weblinks-1.0-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/70255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96843
CVE ID: CVE-2014-8767 State: PUBLISHED Published: 2014-11-20T17:00:00 Last Updated: 2024-08-06T13:26:02.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:240 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html - http://lists.opensuse.org/opensuse-updates
ketstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98765 - http://www.securityfocus.com/archive/1/534011/100/0/threaded - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://seclists.org/fulldisclosure/2014/Nov/47 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2433-1 - http://www.debian.org/security/2014/dsa-3086 - http://advisories.mageia.org/MGASA-2014-0503.html - http://www.securityfocus.com/bid/71150 - https://support.apple.com/kb/HT205031
CVE ID: CVE-2014-8768 State: PUBLISHED Published: 2014-11-20T17:00:00 Last Updated: 2024-08-06T13:26:02.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35359 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://packetstormsecurity.com/files
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://packetstormsecurity.com/files/129156/tcpdump-4.6.2-Geonet-Denial-Of-Service.html - http://www.ubuntu.com/usn/USN-2433-1 - http://seclists.org/fulldisclosure/2014/Nov/48 - http://www.securityfocus.com/bid/71155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98766 - http://www.securityfocus.com/archive/1/534010/100/0/threaded
CVE ID: CVE-2014-8769 State: PUBLISHED Published: 2014-11-20T17:00:00 Last Updated: 2024-08-06T13:26:02.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:240 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.ht
ww.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.securityfocus.com/bid/71153 - http://www.securityfocus.com/archive/1/534009/100/0/threaded - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98764 - http://www.ubuntu.com/usn/USN-2433-1 - http://www.debian.org/security/2014/dsa-3086 - http://advisories.mageia.org/MGASA-2014-0503.html - http://packetstormsecurity.com/files/129157/tcpdump-4.6.2-AOVD-Unreliable-Output.html - https://support.apple.com/kb
l - http://packetstormsecurity.com/files/129157/tcpdump-4.6.2-AOVD-Unreliable-Output.html - https://support.apple.com/kb/HT205031 - http://seclists.org/fulldisclosure/2014/Nov/49
CVE ID: CVE-2014-8770 State: PUBLISHED Published: 2014-11-13T15:00:00Z Last Updated: 2024-09-17T01:21:04.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file, then accessing the PHP file via a direct request to it in magmi/plugins/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/113848 - http://www.exploit-db.com/exploits/35052
CVE ID: CVE-2014-8771 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:26:02.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.x3cms.net/en/news/article/8bb9a4f84d956653b4daa19ee7c529fa/x3_cms_0.5.2 - http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/
CVE ID: CVE-2014-8772 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:26:02.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.x3cms.net/en/news/article/8bb9a4f84d956653b4daa19ee7c529fa/x3_cms_0.5.2 - http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/
CVE ID: CVE-2014-8773 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:26:02.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hacktivity.websecgeeks.com/modx-csrf-and-xss/ - http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE ID: CVE-2014-8774 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:26:02.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the context_key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hacktivity.websecgeeks.com/modx-csrf-and-xss/ - http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE ID: CVE-2014-8775 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:26:02.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://hacktivity.websecgeeks.com/modx-csrf-and-xss/ - http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE ID: CVE-2014-8778 State: PUBLISHED Published: 2015-09-16T18:00:00 Last Updated: 2024-08-06T13:26:02.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.Permissions.PermissionState.Unrestricted or (2) System.Security.Permissions.SecurityPermissionFlag.AllFlags permission. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133437/Checkmarx-CxQL-7.1.5-Sandbox-Bypass.html - http://www.securityfocus.com/archive/1/536387/100/0/threaded -
m/files/133437/Checkmarx-CxQL-7.1.5-Sandbox-Bypass.html - http://www.securityfocus.com/archive/1/536387/100/0/threaded - http://seclists.org/fulldisclosure/2015/Sep/17
CVE ID: CVE-2014-8779 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T13:26:02.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130174/Pexip-Infinity-Non-Unique-SSH-Host-Keys.html - http://www.securityfocus.com/archive/1/534576/100/0/threaded - http://www.securityfocus.com/bid/72359 - http://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2015
/threaded - http://www.securityfocus.com/bid/72359 - http://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2015-01-02.pdf
CVE ID: CVE-2014-8780 State: PUBLISHED Published: 2018-03-07T15:00:00 Last Updated: 2024-08-06T13:26:02.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a content section note. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534272/100/0/threaded - https://www.vulnerability-lab.com/get_content.php?id=1373
CVE ID: CVE-2014-8788 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:26:02.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/87 - http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx - http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html
CVE ID: CVE-2014-8789 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:26:02.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a crafted path in a zip archive, which is not properly handled during extraction. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/87 - http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx - http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html
CVE ID: CVE-2014-8790 State: PUBLISHED Published: 2015-01-20T15:00:00 Last Updated: 2024-08-06T13:26:02.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/135 - http://packetstormsecurity.com/files/129778/GetSimple-CMS-3.3.4-XML-External-Entity-Injection.html - http://get-simple.info/start/changelog/ - http://karmainsecurity.com/KIS-2014-17 - https://github
ntity-Injection.html - http://get-simple.info/start/changelog/ - http://karmainsecurity.com/KIS-2014-17 - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/944
CVE ID: CVE-2014-8791 State: PUBLISHED Published: 2014-12-02T01:00:00 Last Updated: 2024-08-06T13:26:02.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71335 - http://www.securityfocus.com/archive/1/534105/100/0/threaded - http://seclists.org/fulldisclosure/2014/Nov/101 - http://packetstormsecurity.com/files/129309/Tuleap-7.6-4-PHP-Object-Injection.html - http://
lldisclosure/2014/Nov/101 - http://packetstormsecurity.com/files/129309/Tuleap-7.6-4-PHP-Object-Injection.html - http://karmainsecurity.com/KIS-2014-13
CVE ID: CVE-2014-8793 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:26:02.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refresh_page parameter to www/admin/report-generate.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129621/Revive-Adserver-3.0.5-Cross-Site-Scripting-Denial-Of-Service.html - http://www.securityfocus.com/archive/1/534264/100/0/threaded - https://github.com/revive-adserver/revive-ad
rvice.html - http://www.securityfocus.com/archive/1/534264/100/0/threaded - https://github.com/revive-adserver/revive-adserver/commit/2be73f9 - http://packetstormsecurity.com/files/129622/Revive-Adserver-3.0.5-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534269/100/0/threaded - http://www.securityfocus.com/bid/71718 - http://www.revive-adserver.com/security/revive-sa-2014-002/ - https://www.htbridge.com/advisory/HTB23242
CVE ID: CVE-2014-8799 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:26:02.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter to lib/dp_image.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/dukapress/changelog/ - http://security.szurek.pl/dukapress-252-path-traversal.html - https://plugins.trac.wordpress.org/changeset/1024640/dukapress - http://www.exploit-db.com/exploits/3534
raversal.html - https://plugins.trac.wordpress.org/changeset/1024640/dukapress - http://www.exploit-db.com/exploits/35346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98943
CVE ID: CVE-2014-8800 State: PUBLISHED Published: 2014-12-05T15:00:00 Last Updated: 2024-08-06T13:26:02.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fb_login_button parameter in a newfb_update_options action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/115231 - http://security.szurek.pl/nextend-facebook-connect-1459-xss.html - https://wordpress.org/plugins/nextend-facebook-connect/changelog/ - http://www.exploit-db.co
ook-connect-1459-xss.html - https://wordpress.org/plugins/nextend-facebook-connect/changelog/ - http://www.exploit-db.com/exploits/35439
CVE ID: CVE-2014-8801 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:26:02.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the QUERY_STRING in a getfile action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.paidmembershipspro.com/2014/11/critical-security-update-pmpro-v1-7-15/ - http://packetstormsecurity.com/files/129189/Paid-Memberships-Pro-1.7.14.2-Path-Traversal.html - https://exchange.xforce.ibmclou
packetstormsecurity.com/files/129189/Paid-Memberships-Pro-1.7.14.2-Path-Traversal.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98805 - http://www.exploit-db.com/exploits/35303 - https://wordpress.org/plugins/paid-memberships-pro/changelog/ - http://security.szurek.pl/paid-memberships-pro-17142-path-traversal.html - http://www.securityfocus.com/bid/71293
CVE ID: CVE-2014-8802 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T13:26:02.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62351 - https://wordpress.org/plugins/pie-register/changelog/ - http://security.szurek.pl/pie-register-2013-privilege-escalation.html
CVE ID: CVE-2014-8809 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:26:02.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter in an addComment action to ajax/profile_functions.php, (2) compose_text parameter in a sendMail action to ajax/mail_functions.php, (3) comment parameter in an add_comment action to ajax/lounge_functions.php, or (4) name parameter in a create_album action to ajax/gallery_functions.php. Additional Analyst Notes: - CVE Program Container:
me parameter in a create_album action to ajax/gallery_functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html - http://www.wpsymposium.com/release-information-for-v14-11/
CVE ID: CVE-2014-8810 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-06T13:26:02.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action. Additional Analyst Notes: - CVE Program Container: References: - http://security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html - http://www.exploit-db.com/exploits/35505 - http://secunia.com/advisories/62643 - http://www.wpsymposium.com/2014/11/release-information-for-v14-11/
CVE ID: CVE-2014-8816 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100495
CVE ID: CVE-2014-8817 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: coresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that expected data types are present in XPC messages, which allows attackers to execute arbitrary code in a privileged context via a crafted app, as demonstrated by lack of verification of xpc_dictionary_get_value API return values during handling of a (1) match_mmap_archives, (2) delete_mmap_archives, (3) write_mmap_archive, or (4) read_mmap_archive command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityt
or (4) read_mmap_archive command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - https://code.google.com/p/google-security-research/issues/detail?id=80 - http://support.apple.com/HT204244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100496 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8818 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8819 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8820 and CVE-2014-8821. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100500 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8820 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8821. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100501
CVE ID: CVE-2014-8821 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8820. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100502 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
CVE ID: CVE-2014-8822 State: PUBLISHED Published: 2015-01-30T11:00:00 Last Updated: 2024-08-06T13:26:02.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOHIDFamily in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a kernel context or cause a denial of service (write to kernel memory) via a crafted app that calls an unspecified user-client method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100513 - http://www.securitytracker.com/id/1031650 - http://support.apple.com/HT204244 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html