Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0143 State: PUBLISHED Published: 2017-08-10T15:00:00 Last Updated: 2024-08-06T09:05:38.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in block/parallels.c or (2) bochs_open function in bochs.c, a large L1 table in the (3) qcow2_snapshot_load_tmp in qcow2-snapshot.c or (4) qcow2_grow_l1_table function in qcow2-cluster.c, (5) a large request in the bdrv_check_byte_request function in block.c and other block drivers, (6) crafted cluster indexes in the get_refcount fun
bdrv_check_byte_request function in block.c and other block drivers, (6) crafted cluster indexes in the get_refcount function in qcow2-refcount.c, or (7) a large number of blocks in the cloop_open function in cloop.c, which trigger buffer overflows, memory corruption, large memory allocations and out-of-bounds read and writes. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1079140 - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-0421.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6a83f8b5bec6f59e56cc49bd49e4c3f8f805d56f - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e3737b820b45e
t%3Ba=commit%3Bh=6a83f8b5bec6f59e56cc49bd49e4c3f8f805d56f - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e3737b820b45e54b059656dc3f914f895ac7a88b - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=afbcc40bee4ef51731102d7d4b499ee12fc182e1 - http://www.debian.org/security/2014/dsa-3044 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=509a41bab5306181044b5fff02eadf96d9c8676a - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8f4754ede56e3f9ea3fd7207f4a7c4453e59285b - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=db8a31d11d6a60f48d6817530640d75aa72a9a2f - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cab60de930684c33f67d4e32c7509b567f8c445b
CVE ID: CVE-2014-0144 State: PUBLISHED Published: 2020-02-11T02:13:14 Last Updated: 2024-08-06T09:05:38.961Z Vendors: n/a Products: n/a Problem Types: Buffer Overflow Description: QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privileges of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=24342f2cae47d03911e346fe1e520b00dc2818e0 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3B
.org/?p=qemu.git%3Ba=commit%3Bh=24342f2cae47d03911e346fe1e520b00dc2818e0 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2d51c32c4b511db8bb9e58208f1e2c25e4c06c85 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=5dab2faddc8eaa1fb1abdbe2f502001fc13a1b21 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=63fa06dc978f3669dbfd9443b33cde9e2a7f4b41 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6d4b9e55fc625514a38d27cff4b9933f617fa7dc - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7b103b36d6ef3b11827c203d3a793bf7da50ecd6 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=97f1c45c6f456572e5b504b8614e4a69e23b8e3a - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a1b3955c9415b1e767c130a2f59fee6aa28e57
6f456572e5b504b8614e4a69e23b8e3a - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a1b3955c9415b1e767c130a2f59fee6aa28e575b - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ce48f2f441ca98885267af6fd636a7cb804ee646 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d65f97a82c4ed48374a764c769d4ba1ea9724e97 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f56b9bc3ae20fc93815b34aa022be919941406ce - https://bugzilla.redhat.com/show_bug.cgi?id=1079240 - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-0421.html - https://www.vulnerabilitycenter.com/#%21vul=44767
CVE ID: CVE-2014-0145 State: PUBLISHED Published: 2017-08-10T15:00:00 Last Updated: 2024-08-06T09:05:38.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_snapshot_load_tmp in the QCOW 2 block driver (block/qcow2-snapshot.c) or (2) uncompressed chunk, (3) chunk length, or (4) number of sectors in the DMG block driver (block/dmg.c). Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://git.qemu.org/?p=qemu.git%3Ba=comm
ram Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f0dce23475b5af5da6b17b97c1765271307734b6 - http://rhn.redhat.com/errata/RHSA-2014-0421.html - https://lists.gnu.org/archive/html/qemu-devel/2014-03/msg04994.html - http://www.debian.org/security/2014/dsa-3044 - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=c165f7758009a4f793c1fc19ebb69cf55313450b - https://bugzilla.redhat.com/show_bug.cgi?id=1078885 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c05e4667be91b46ab42b5a11babf8e84d476cc6b - http://www.openwall.com/lists/oss-security/2014/03/26/8
CVE ID: CVE-2014-0146 State: PUBLISHED Published: 2017-08-10T15:00:00 Last Updated: 2024-08-06T09:05:38.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an error, related to the initialization of the snapshot_offset and nb_snapshots fields. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=11b128f4062dd7f89b14abc8877ff20d41b28be9 - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-04
89b14abc8877ff20d41b28be9 - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-0421.html - https://bugzilla.redhat.com/show_bug.cgi?id=1078232 - http://www.debian.org/security/2014/dsa-3044 - http://www.openwall.com/lists/oss-security/2014/03/26/8
CVE ID: CVE-2014-0147 State: PUBLISHED Published: 2020-02-11T03:30:50 Last Updated: 2024-08-06T09:05:38.968Z Vendors: n/a Products: Qemu Problem Types: n/a Description: Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=246f65838d19db6db55bfb41117c35645a2c4789 - https://bugzilla.redhat.com/show_bug.cgi?id=1078848 - https://bugzilla.redhat.com/sh
38d19db6db55bfb41117c35645a2c4789 - https://bugzilla.redhat.com/show_bug.cgi?id=1078848 - https://bugzilla.redhat.com/show_bug.cgi?id=1086717 - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-0421.html - http://www.openwall.com/lists/oss-security/2014/03/26/8
CVE ID: CVE-2014-0148 State: PUBLISHED Published: 2020-02-11T03:43:19 Last Updated: 2024-08-06T09:05:38.967Z Vendors: n/a Products: Qemu Problem Types: n/a Description: Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.co
st Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0420.html - http://rhn.redhat.com/errata/RHSA-2014-0421.html - http://www.openwall.com/lists/oss-security/2014/03/26/8 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1d7678dec4761acdc43439da6ceda41a703ba1a6 - https://bugzilla.redhat.com/show_bug.cgi?id=1078212 - https://lists.gnu.org/archive/html/qemu-devel/2014-03/msg04994.html
CVE ID: CVE-2014-0149 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T09:05:38.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0462.html - https://bugzilla.redhat.com/show_bug.cgi?id=1078646
CVE ID: CVE-2014-0150 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T09:05:39.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1078846 - http://www.debian.org/security/2014/dsa-2910 - http://www.ubuntu.com/usn/USN-2182-1 - http://www.debian.org/security/2014/dsa-2909 - http://secunia.com/advisories/57878 - ht
/www.ubuntu.com/usn/USN-2182-1 - http://www.debian.org/security/2014/dsa-2909 - http://secunia.com/advisories/57878 - http://article.gmane.org/gmane.comp.emulators.qemu/266768 - http://thread.gmane.org/gmane.comp.emulators.qemu/266713 - http://secunia.com/advisories/58191
CVE ID: CVE-2014-0151 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T09:05:38.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1077441 - http://rhn.redhat.com/errata/RHSA-2015-0158.html - http://www.ovirt.org/OVirt_3.5_Release_Notes
CVE ID: CVE-2014-0152 State: PUBLISHED Published: 2014-09-08T14:00:00 Last Updated: 2024-08-06T09:05:39.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://gerrit.ovirt.org/#/c/25959/ - http://www.ovirt.org/Security_advisories
CVE ID: CVE-2014-0153 State: PUBLISHED Published: 2014-09-08T14:00:00 Last Updated: 2024-08-06T09:05:38.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://gerrit.ovirt.org/#/c/25987/ - http://www.ovirt.org/Security_advisories
CVE ID: CVE-2014-0154 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T09:05:39.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0158.html - https://bugzilla.redhat.com/show_bug.cgi?id=1077450
CVE ID: CVE-2014-0155 State: PUBLISHED Published: 2014-04-14T23:00:00 Last Updated: 2024-08-06T09:05:38.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/virt/kvm/kvm.git/commit/?id=5678de3f15010b9022e
Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/virt/kvm/kvm.git/commit/?id=5678de3f15010b9022ee45673f33bcfc71d47b60 - https://bugzilla.redhat.com/show_bug.cgi?id=1081589 - http://www.openwall.com/lists/oss-security/2014/04/07/2
CVE ID: CVE-2014-0156 State: PUBLISHED Published: 2022-06-30T20:36:09 Last Updated: 2024-08-06T09:05:38.811Z Vendors: n/a Products: awesome_spawn Problem Types: CWE-78 Description: Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command. Additional Analyst Notes: - CVE Program Container: References: - https://rubysec.com/advisories/CVE-2014-0156/ - https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
CVE ID: CVE-2014-0157 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T09:05:38.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66706 - http://www.openwall.com/lists/oss-security/2014/04/08/8 - https://launchpad.net/bugs/1289033 - http://lists.opensuse.org/opensuse-updates/2015-0
lists/oss-security/2014/04/08/8 - https://launchpad.net/bugs/1289033 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
CVE ID: CVE-2014-0158 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:05:38.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. NOTE: this is not a duplicate of CVE-2013-1447, because the scope of CVE-2013-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences
-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences, division by zero, and anything that would just fit as DoS." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1082925 - https://bugzilla.suse.com/show_bug.cgi?id=871412
CVE ID: CVE-2014-0159 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T09:05:38.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument. Additional Analyst Notes: - CVE Program Container: References: - http://openafs.org/pages/security/OPENAFS-SA-2014-001.txt - http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog - http://secunia.com/advisories/57779 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 - http://secunia.com/advisories/57832 - http://ww
7779 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 - http://secunia.com/advisories/57832 - http://www.debian.org/security/2014/dsa-2899
CVE ID: CVE-2014-0160 State: PUBLISHED Published: 2014-04-07T00:00:00.000Z Last Updated: 2025-10-22T00:05:38.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36
r: - CISA ADP Vulnrichment: References: - https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217 - http://www.securitytracker.com/id/1030077 - http://seclists.org/fulldisclosure/2014/Apr/90 - http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/ - http://www.debian.org/security/2014/dsa-2896 - http://marc.info/?l=bugtraq&m=139774054614965&w=2 - http://marc.info/?l=bugtraq&m=139889113431619&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0396.html - http://marc.info/?l=bugtraq&m=139835815211508&w=2 - http://marc.info/?l=bugtraq&m=141287864628122&w=2 - http://www.kb.cert.org/vuls/id/720951 - http://www.splunk.com/view/SP-CAAAMB3 - http
/?l=bugtraq&m=141287864628122&w=2 - http://www.kb.cert.org/vuls/id/720951 - http://www.splunk.com/view/SP-CAAAMB3 - http://marc.info/?l=bugtraq&m=139905295427946&w=2 - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf - http://marc.info/?l=bugtraq&m=139833395230364&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21670161 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html - http://marc.info/?l=bugtraq&m=142660345230545&w=2 - http://seclists.org/fulldisclosure/2014/Apr/109 - htt
sg00004.html - http://marc.info/?l=bugtraq&m=142660345230545&w=2 - http://seclists.org/fulldisclosure/2014/Apr/109 - http://marc.info/?l=bugtraq&m=140724451518351&w=2 - http://www.securitytracker.com/id/1030080 - http://secunia.com/advisories/57836 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://marc.info/?l=bugtraq&m=139808058921905&w=2 - http://marc.info/?l=bugtraq&m=139758572430452&w=2 - http://www.securityfocus.com/bid/66690 - http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf - https://filezilla-project.org/versions.php?type=server - http://marc.info/?l=bugtraq&m=139843768401936&w=2 - http://secunia.com/advisories/57483 - http://tools.ci
?type=server - http://marc.info/?l=bugtraq&m=139843768401936&w=2 - http://secunia.com/advisories/57483 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed - http://www.kerio.com/support/kerio-control/release-history - http://advisories.mageia.org/MGASA-2014-0165.html - http://www.blackberry.com/btsc/KB35882 - http://marc.info/?l=bugtraq&m=142660345230545&w=2 - http://marc.info/?l=bugtraq&m=140075368411126&w=2 - http://marc.info/?l=bugtraq&m=139905351928096&w=2 - http://www.securitytracker.com/id/1030081 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html - http://www.securityfocus.com/archive/1/534161/100/0/thread
oject.org/pipermail/package-announce/2014-April/131221.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html - https://bugzilla.redhat.com/show_bug.cgi?id=1084875 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://marc.info/?l=bugtraq&m=139824993005633&w=2 - http://www.securitytracker.com/id/1030079 - http://rhn.redhat.com/errata/RHSA-2014-0377.html - http://marc.info/?l=bugtraq&m=139722163017074&w=2 - http://marc.info/?l=bugtraq&m=139889295732144&w=2 - https://code.google.com/p/mod-spdy/issues/
q&m=139722163017074&w=2 - http://marc.info/?l=bugtraq&m=139889295732144&w=2 - https://code.google.com/p/mod-spdy/issues/detail?id=85 - http://marc.info/?l=bugtraq&m=139765756720506&w=2 - http://marc.info/?l=bugtraq&m=139774703817488&w=2 - http://marc.info/?l=bugtraq&m=139905202427693&w=2 - http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ - http://heartbleed.com/ - http://marc.info/?l=bugtraq&m=139817782017443&w=2 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 - http://marc.info/?l=bugtraq&m=140015787404650&w=2 - http://cogentdatahub.com/ReleaseNotes.html - http://marc.info/?l=bugtraq&m=139869720529462&w=2 - http://marc.info/?l=bugtraq&m=1398421
atahub.com/ReleaseNotes.html - http://marc.info/?l=bugtraq&m=139869720529462&w=2 - http://marc.info/?l=bugtraq&m=139842151128341&w=2 - http://marc.info/?l=bugtraq&m=139905243827825&w=2 - http://marc.info/?l=bugtraq&m=139905458328378&w=2 - http://www.f-secure.com/en/web/labs_global/fsc-2014-1 - http://www.us-cert.gov/ncas/alerts/TA14-098A - http://secunia.com/advisories/57347 - https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html - http://seclists.org/fulldisclosure/2014/Apr/173 - https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www.oracle.com/technetwork/topics/security/open
.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html - https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 - https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken - http://seclists.org/fu
x.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken - http://seclists.org/fulldisclosure/2014/Dec/23 - http://marc.info/?l=bugtraq&m=139905653828999&w=2 - http://www.ubuntu.com/usn/USN-2165-1 - http://rhn.redhat.com/errata/RHSA-2014-0378.html - http://marc.info/?l=bugtraq&m=139757919027752&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html - http://www.exploit-db.com/exploits/32764 - http://marc.info/?l=bugtraq&m=139757726426985&w=2 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 - http://marc.info/?l=bugtraq&m=139869891830365&w=
p?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 - http://marc.info/?l=bugtraq&m=139869891830365&w=2 - http://marc.info/?l=bugtraq&m=139905868529690&w=2 - http://marc.info/?l=bugtraq&m=139817685517037&w=2 - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - http://seclists.org/fulldisclosure/2014/Apr/91 - http://www.securitytracker.com/id/1030078 - http://secunia.com/advisories/59243 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661 - http://marc.info/?l=bugtraq&m=139836085512508&w=2 - http://marc.info/?l=bugtraq&m=139824923705461&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0376.html - http://marc.info/?l=bugtraq&m=139835844111589&w=2 - http://www.mandriva.c