Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9294 State: PUBLISHED Published: 2014-12-20T02:00:00 Last Updated: 2024-08-06T13:40:24.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd - http://marc.info/?l=bugtraq&m=142590659431171&w=2 - http://bugs.ntp.org/show_bug.cgi?id=2666 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0479
bugs.ntp.org/show_bug.cgi?id=2666 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232 - https://kc.mcafee.com/corporate/index?page=content&id=SB10103 - http://advisories.mageia.org/MGASA-2014-0541.html - http://www.kb.cert.org/vuls/id/852879 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://rhn.redhat.com/errata/RHSA-2014-2025.html - http://www.securityfocus.com/bid/71762 - https://bugzilla.redhat.com/show_bug.cgi?id=1176035 - http://secunia.com/advisories/62209 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2015-0104.html - http://marc.info/?l=bugtraq&m=144182594518755&w=2 -
6-2881722.html - http://rhn.redhat.com/errata/RHSA-2015-0104.html - http://marc.info/?l=bugtraq&m=144182594518755&w=2 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://bk1.ntp.org/ntp-dev/util/ntp-keygen.c?PAGE=diffs&REV=4eae1b72298KRoBQmX-y8URCiRPH5g - http://support.ntp.org/bin/view/Main/SecurityNotice - http://marc.info/?l=bugtraq&m=142469153211996&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04916783 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:003 - https://www.arista.com/en/support/advisories-notices/security-advisories/1047-security-advisory-8
CVE ID: CVE-2014-9295 State: PUBLISHED Published: 2014-12-20T02:00:00 Last Updated: 2024-08-06T13:40:24.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd - http://www.securityfocus.com/bid/71761 - http://marc.info/?l=bugtraq&m=1425906594311
tyAdvisory/cisco-sa-20141222-ntpd - http://www.securityfocus.com/bid/71761 - http://marc.info/?l=bugtraq&m=142590659431171&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232 - http://bugs.ntp.org/show_bug.cgi?id=2667 - https://kc.mcafee.com/corporate/index?page=content&id=SB10103 - http://advisories.mageia.org/MGASA-2014-0541.html - http://www.kb.cert.org/vuls/id/852879 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://rhn.redhat.com/errata/RHSA-2014-2025.html - https://bugzilla.redhat.com/show_bug.cgi?id=1176037 - http://secunia.com/advisories/62209 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://r
://secunia.com/advisories/62209 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2015-0104.html - http://marc.info/?l=bugtraq&m=144182594518755&w=2 - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=548acc4dN1TbM1tRJrbPcA4yc1aTdA - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://bugs.ntp.org/show_bug.cgi?id=2668 - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=548acdf3tUSFizXcv_X4b77Jt_Y-cg - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&RE
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=548acf55dxKfhb6MuYQwzu8eDlS97g - http://support.ntp.org/bin/view/Main/SecurityNotice - http://marc.info/?l=bugtraq&m=142469153211996&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04916783 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417665.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2015:003 - http://bugs.ntp.org/show_bug.cgi?id=2669 - https://www.arista.com/en/support/advisories-notices/security-advisories/1047-security-advisory-8
CVE ID: CVE-2014-9296 State: PUBLISHED Published: 2014-12-20T02:00:00 Last Updated: 2024-08-06T13:40:24.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd - http://marc.info/?l=bugtraq&m=142590659431171&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0479023
=bugtraq&m=142590659431171&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232 - https://kc.mcafee.com/corporate/index?page=content&id=SB10103 - http://www.securityfocus.com/bid/71758 - http://advisories.mageia.org/MGASA-2014-0541.html - http://www.kb.cert.org/vuls/id/852879 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://secunia.com/advisories/62209 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2015-0104.html - http://marc.info/?l=bugtraq&m=144182594518755&w=2 - http://bugs.ntp.org/show_bug.cgi?id=2670 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://lists.
18755&w=2 - http://bugs.ntp.org/show_bug.cgi?id=2670 - http://marc.info/?l=bugtraq&m=142853370924302&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1176040 - http://support.ntp.org/bin/view/Main/SecurityNotice - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=548ad06feXHK1HlZoY-WZVyynwvwAg - http://www.mandriva.com/security/advisories?name=MDVSA-2015:003 - https://www.arista.com/en/support/advisories-notices/security-advisories/1047-security-advisory-8
CVE ID: CVE-2014-9297 State: REJECTED Published: 2015-10-04T20:00:00 Last Updated: 2015-10-04T19:57:01 Description: No description available.
CVE ID: CVE-2014-9298 State: REJECTED Published: 2015-10-04T20:00:00 Last Updated: 2015-10-04T19:57:01 Description: No description available.
CVE ID: CVE-2014-9299 State: REJECTED Published: 2016-12-06T18:00:00 Last Updated: 2016-12-06T18:57:01 Description: No description available.
CVE ID: CVE-2014-9300 State: PUBLISHED Published: 2014-12-07T21:00:00Z Last Updated: 2024-09-16T20:06:19.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user credentials via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Jul/72 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-0_Alfre
clists.org/bugtraq/2014/Jul/72 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-0_Alfresco_Community_Edition_Multiple_SSRF_vulnerabilities_v10.txt
CVE ID: CVE-2014-9301 State: PUBLISHED Published: 2014-12-07T21:00:00Z Last Updated: 2024-09-16T21:03:41.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Jul/72 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-0_Alfresco_Community_Edition_Multiple_SSRF_vulnerabilities_v10.txt
CVE ID: CVE-2014-9302 State: PUBLISHED Published: 2014-12-07T21:00:00Z Last Updated: 2024-09-17T04:29:18.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Jul/72 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-0_Alfresco_Community_Edition_Multiple_SSRF_vulnerabilities_v10.txt
CVE ID: CVE-2014-9303 State: PUBLISHED Published: 2014-12-07T21:00:00 Last Updated: 2024-08-06T13:40:24.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D, different vectors than CVE-2014-8868. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2014-011 - http://seclists.org/fulldisclosure/2014/Dec/2 - http://www.securityfocus.com/archive/1/534128/100/0/threaded
CVE ID: CVE-2014-9304 State: PUBLISHED Published: 2014-12-07T21:00:00Z Last Updated: 2024-09-17T03:02:16.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system/proxy, which are inconsistently processed by the request handler in the backend web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140228-1_Plex_Media_Server_Authentication_bypass_local_file_disclosure_v10.txt - http://www
rod/temedia/advisories_txt/20140228-1_Plex_Media_Server_Authentication_bypass_local_file_disclosure_v10.txt - http://www.securityfocus.com/archive/1/531290 - https://forums.plex.tv/index.php/topic/62832-plex-media-server/?p=583250
CVE ID: CVE-2014-9305 State: PUBLISHED Published: 2014-12-08T16:00:00 Last Updated: 2024-08-06T13:40:25.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a shortcode_products_table action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cart66-lite/changelog/ - http://packetstormsecurity.com/files/129395/Cart66-Lite-WordPress-Ecommerce-1.5.1.17-SQL-Injection.html - http://
log/ - http://packetstormsecurity.com/files/129395/Cart66-Lite-WordPress-Ecommerce-1.5.1.17-SQL-Injection.html - http://osvdb.org/show/osvdb/115286 - http://security.szurek.pl/cart66-lite-wordpress-ecommerce-15117-blind-sql-injection.html - http://www.exploit-db.com/exploits/35459
CVE ID: CVE-2014-9308 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:40:25.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in products/banners/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129875/WordPress-Shopping-Cart-3.0.4-Unrestricted-File-Upload.html - http://www.secur
tp://packetstormsecurity.com/files/129875/WordPress-Shopping-Cart-3.0.4-Unrestricted-File-Upload.html - http://www.securityfocus.com/bid/71983 - http://osvdb.org/show/osvdb/116806 - https://wordpress.org/plugins/wp-easycart/changelog/ - http://www.exploit-db.com/exploits/35730 - http://security.szurek.pl/wordpress-shopping-cart-304-unrestricted-file-upload.html
CVE ID: CVE-2014-9310 State: PUBLISHED Published: 2017-06-07T21:00:00 Last Updated: 2024-08-06T13:40:24.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75082 - https://security.szurek.pl/wordpress-backup-to-dropbox-40-reflected-xss.html - https://wordpress.org/plugins/wordpress-backup-to-dropbox/
CVE ID: CVE-2014-9311 State: PUBLISHED Published: 2015-04-14T14:00:00 Last Updated: 2024-08-06T13:40:25.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the location[id] parameter in a shareaholic_add_location action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://security.szurek.pl/shareaholic-7603-xss.html - http://packetstormsecurity.com/files/131321/WordPress-Shareaholic-7.6.0.3-Cross-Site-Scripting.html - https://wordpress.org/plugins/sha
ormsecurity.com/files/131321/WordPress-Shareaholic-7.6.0.3-Cross-Site-Scripting.html - https://wordpress.org/plugins/shareaholic/changelog/
CVE ID: CVE-2014-9312 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:40:24.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in Photo Gallery 1.2.5. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130104/Photo-Gallery-1.2.5-Shell-Upload.html - http://www.securityfocus.com/bid/72620 - http://packetstormsecurity.com/files/130384/WordPress-Photo-Gallery-1.2.5-Unrestricted-File-Upload.html
CVE ID: CVE-2014-9316 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:40:25.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via vectors related to LJIF tags in an MJPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0eecf40935b22644e6cd74c586057237ecfd6844 - https://security.gentoo.org/glsa/201603-06 - https://www.ffmpeg.org/secur
3Bh=0eecf40935b22644e6cd74c586057237ecfd6844 - https://security.gentoo.org/glsa/201603-06 - https://www.ffmpeg.org/security.html
CVE ID: CVE-2014-9317 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:40:24.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via an IDAT before an IHDR in a PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=79ceaf827be0b070675d4cd0a55c3386542defd8 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - https://securi
827be0b070675d4cd0a55c3386542defd8 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - https://security.gentoo.org/glsa/201603-06 - https://www.ffmpeg.org/security.html
CVE ID: CVE-2014-9318 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:40:25.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via a crafted .cine file that triggers the avpicture_get_size function to return a negative frame size. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1d3a3b9f8907625b361420d48f
s://security.gentoo.org/glsa/201603-06 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1d3a3b9f8907625b361420d48fe05716859620ff - https://www.ffmpeg.org/security.html
CVE ID: CVE-2014-9319 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:40:25.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted .bit file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ea38e5a6b75706477898eb1e6582d667dbb9946c - https://security.gentoo.org/glsa/201603-06 - https://www.ffmpeg.org/security.html
CVE ID: CVE-2014-9320 State: PUBLISHED Published: 2021-08-09T18:03:15 Last Updated: 2024-08-06T13:40:25.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129613/SAP-Business-Objects-Search-Token-Privilege-Escalation.html - https://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba - https://www.securityfocus.com/arc
security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba - https://www.securityfocus.com/archive/1/archive/1/534249/100/0/threaded - http://seclists.org/fulldisclosure/2014/Dec/60 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99607
CVE ID: CVE-2014-9322 State: PUBLISHED Published: 2014-12-17T11:00:00 Last Updated: 2024-08-06T13:40:25.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2491-1 - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - https:/
/?l=bugtraq&m=142722450701342&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5 - https://bugzilla.redhat.com/show_bug.cgi?id=1172806 - http://rhn.redhat.com/errata/RHSA-2015-0009.html - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities - http://www.zerodayinitiative.com/advisories/ZDI-16-170 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://rhn.redhat.com/errata/RHSA-2014-2008.html - https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa
.html - http://rhn.redhat.com/errata/RHSA-2014-2008.html - https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441 - http://secunia.com/advisories/62336 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441 - http://source.android.com/security/bulletin/2016-04-02.html - http://rhn.redhat.com/errata/RHSA-2014-1998.html - http://www.exploit-db.com/exploits/36266 - http://rhn.redhat.com/errata/RHSA-2014-2028.html - http://rhn.redhat.com/errata/RHSA-2014-2031.html - http://osvdb.org/show/osvdb/115919 - http://www.openwall.com/lists/oss-security/2014/12/15/6 - http://lists.opensuse.org/opensuse-security
how/osvdb/115919 - http://www.openwall.com/lists/oss-security/2014/12/15/6 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2014-9323 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T13:40:24.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3109 - http://www.firebirdsql.org/en/news/security-updates-for-v2-1-and-v2-5-series-66011/ - http://www.mandriva.com/security/advisories?name=MDVSA-2015:172 - http://tracker.firebird
-v2-1-and-v2-5-series-66011/ - http://www.mandriva.com/security/advisories?name=MDVSA-2015:172 - http://tracker.firebirdsql.org/browse/CORE-4630 - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00012.html - http://advisories.mageia.org/MGASA-2014-0523.html - https://usn.ubuntu.com/3929-1/
CVE ID: CVE-2014-9324 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:40:25.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62188 - http://advisories.mageia.org/MGASA-2015-0031.html - https://www.otrs.com/security-advisory-2014-06-incomplete-access-control/ - http://secunia.com/advisories/59875 - http://secunia.com/advisories/62662 - http://www.mandriva.com
te-access-control/ - http://secunia.com/advisories/59875 - http://secunia.com/advisories/62662 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:043
CVE ID: CVE-2014-9325 State: PUBLISHED Published: 2014-12-31T21:00:00 Last Updated: 2024-08-06T13:40:25.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERYSTRING variable in lib/TWiki.pm or (2) QUERYPARAMSTRING variable in lib/TWiki/UI/View.pm, as demonstrated by the QUERY_STRING to do/view/Main/TWikiPreferences. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/81 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2014-9325 - http://www.securitytracker.com/id/1031399 - ht
ec/81 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2014-9325 - http://www.securitytracker.com/id/1031399 - http://packetstormsecurity.com/files/129654/TWiki-6.0.1-QUERYSTRING-QUERYPARAMSTRING-XSS.html