Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4612 State: PUBLISHED Published: 2018-03-16T17:00:00 Last Updated: 2024-08-06T11:20:26.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68140 - http://seclists.org/oss-sec/2014/q2/608 - http://seclists.org/oss-sec/2014/q2/620 - https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt - http://sourceforge.net
2014/q2/620 - https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.6.x/CHANGELOG.txt - http://sourceforge.net/p/coppermine/code/8674 - http://forum.coppermine-gallery.net/index.php/topic%2C77376.0.html - https://sourceforge.net/p/coppermine/code/8674/tree//trunk/cpg1.5.x/CHANGELOG.txt
CVE ID: CVE-2014-4613 State: PUBLISHED Published: 2018-03-16T17:00:00 Last Updated: 2024-08-06T11:20:26.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/623 - http://www.exploit-db.com/exploits/31916 - http://www.securityfocus.com/bid/65811 - http://seclists.org/oss-sec/2014/q2/610 - http://osvdb.org/show/osvdb/103774 - http://piwigo
curityfocus.com/bid/65811 - http://seclists.org/oss-sec/2014/q2/610 - http://osvdb.org/show/osvdb/103774 - http://piwigo.org/bugs/view.php?id=0003055 - http://piwigo.org/releases/2.6.2 - http://packetstormsecurity.com/files/125438/Piwigo-2.6.1-Cross-Site-Request-Forgery.html
CVE ID: CVE-2014-4614 State: PUBLISHED Published: 2014-07-02T20:00:00 Last Updated: 2024-08-06T11:20:26.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/623 - http://piwigo.org/bugs/view.php?id=0003055 - http://piwigo.org/releases/2.6.2
CVE ID: CVE-2014-4615 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T11:20:27.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68149 - http://www.openwall.com/lists/oss-security/2014/06/25/6 - http://secunia.com/advisories/60766 - http://www
m/bid/68149 - http://www.openwall.com/lists/oss-security/2014/06/25/6 - http://secunia.com/advisories/60766 - http://www.openwall.com/lists/oss-security/2014/06/23/8 - http://www.openwall.com/lists/oss-security/2014/06/24/6 - http://www.ubuntu.com/usn/USN-2311-1 - http://secunia.com/advisories/60736 - http://rhn.redhat.com/errata/RHSA-2014-1050.html - http://secunia.com/advisories/60643
CVE ID: CVE-2014-4616 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T11:20:27.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/12297 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395 - http://rhn.redhat.com/errata/RHSA-2015-1064.html - http://www.securityfocus.com/bid/68119 - http://lists.ope
ug=752395 - http://rhn.redhat.com/errata/RHSA-2015-1064.html - http://www.securityfocus.com/bid/68119 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html - https://security.gentoo.org/glsa/201503-10 - http://openwall.com/lists/oss-security/2014/06/24/7 - http://bugs.python.org/issue21529 - https://bugzilla.redhat.com/show_bug.cgi?id=1112285
CVE ID: CVE-2014-4617 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T11:20:26.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59351 - http://secunia.com/advisories/59578 - http://lists.gnupg.org/pipermail/gnupg-announce/2014q2/000345.html - http://www.debian.org/security/2014/dsa-2967 - http://lists.opens
nupg.org/pipermail/gnupg-announce/2014q2/000345.html - http://www.debian.org/security/2014/dsa-2967 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00010.html - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=014b2103fcb12f261135e3954f26e9e07b39e342 - http://www.ubuntu.com/usn/USN-2258-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2014/dsa-2968 - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=11fdfcf82bd8d2b5bc38292a29876e10770f4b0a - http://secunia.com/advisories/59534 - http://secunia.com/advisories/59213 - http://lists.gnupg.org/pipermail/gnupg-announce/2014q2/000344.html
CVE ID: CVE-2014-4618 State: PUBLISHED Published: 2014-08-20T10:00:00 Last Updated: 2024-08-06T11:20:26.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95368 - http://www.securitytracker.com/id/1030743 - http://www.securityfocus.com/bid/69273 - http://www.securityfocus.com/archive/1/533162/30/0/threaded - http://secunia.com/advisories/60571
CVE ID: CVE-2014-4619 State: PUBLISHED Published: 2014-08-28T01:00:00 Last Updated: 2024-08-06T11:20:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95483 - http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html - http://secunia.com/advisories/60281 - http://packetstormsecurity.com/files/128005
m/archives/bugtraq/2014-08/0133.html - http://secunia.com/advisories/60281 - http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html - http://www.securityfocus.com/bid/69411 - http://www.securitytracker.com/id/1030759
CVE ID: CVE-2014-4620 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T11:20:26.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html - http://www.securitytracker.com/id/1031116 - http://www.securityfocus.com/bid/70726 - https://exchange.xforce.ibmcloud.com
ttp://www.securitytracker.com/id/1031116 - http://www.securityfocus.com/bid/70726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97756 - http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html - http://secunia.com/advisories/61952
CVE ID: CVE-2014-4621 State: PUBLISHED Published: 2014-09-17T10:00:00 Last Updated: 2024-08-06T11:20:26.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61251 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html - https
rences: - http://secunia.com/advisories/61251 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95989 - http://www.securityfocus.com/bid/69817 - http://www.securitytracker.com/id/1030855
CVE ID: CVE-2014-4622 State: PUBLISHED Published: 2014-09-17T10:00:00 Last Updated: 2024-08-06T11:20:27.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61251 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html - https://exchange.xforce.ibmcloud.c
advisories/61251 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95990 - http://www.securityfocus.com/bid/69819 - http://www.securitytracker.com/id/1030855
CVE ID: CVE-2014-4623 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T11:20:26.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97757 - http://www.securitytracker.com/id/1031117 - http://archive
https://exchange.xforce.ibmcloud.com/vulnerabilities/97757 - http://www.securitytracker.com/id/1031117 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html - http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html
CVE ID: CVE-2014-4624 State: PUBLISHED Published: 2014-10-25T10:00:00 Last Updated: 2024-08-06T11:20:26.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031118 - http://secunia.com/advisories/61663 - http://secunia.com/advisories/61950 - http://packetstormsecurity.com/files/128850/VMware-Security-Advisory-2014-0011.html - http://www.securitytracker
61950 - http://packetstormsecurity.com/files/128850/VMware-Security-Advisory-2014-0011.html - http://www.securitytracker.com/id/1031114 - http://www.securityfocus.com/bid/70709 - http://www.vmware.com/security/advisories/VMSA-2014-0011.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0147.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97729 - http://packetstormsecurity.com/files/128843/EMC-Avamar-Sensitive-Information-Disclosure.html - http://www.securityfocus.com/archive/1/533813/100/0/threaded
CVE ID: CVE-2014-4626 State: PUBLISHED Published: 2014-12-17T01:00:00 Last Updated: 2024-08-06T11:20:26.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515. Additional Analyst Notes: - CVE Program Container: Re
lnerability exists because of an incomplete fix for CVE-2014-2515. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/315340 - http://www.kb.cert.org/vuls/id/386056 - http://www.kb.cert.org/vuls/id/874632 - https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing
CVE ID: CVE-2014-4627 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T11:20:26.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98523 - http://archives.neohapsis.com/archives/bugtraq/2014-11/0028.html - http://www.securityfocus.com/bid/70955 - http://www.securitytracker.com/id/1031172 - http://packetstormsecurity.com/files/128986/RSA-Web-Threat-Detection-SQL-Injection
/www.securitytracker.com/id/1031172 - http://packetstormsecurity.com/files/128986/RSA-Web-Threat-Detection-SQL-Injection.html
CVE ID: CVE-2014-4628 State: PUBLISHED Published: 2014-12-12T18:00:00 Last Updated: 2024-08-06T11:20:26.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Isilon InsightIQ 2.x and 3.x before 3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-12/0075.html
CVE ID: CVE-2014-4629 State: PUBLISHED Published: 2014-12-06T15:00:00 Last Updated: 2024-08-06T11:20:27.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534135/100/0/threaded - http://www.securitytracker.com/id/1031298 - http://www.securityfocus.com/bid/71422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99085 - http://packetstormsecurity.com/files/129
us.com/bid/71422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99085 - http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2014-4630 State: PUBLISHED Published: 2014-12-30T15:00:00 Last Updated: 2024-08-06T11:20:26.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-12/0169.html - http://www.securityfocus.com/bid/72534 - https://secure-resump
chives.neohapsis.com/archives/bugtraq/2014-12/0169.html - http://www.securityfocus.com/bid/72534 - https://secure-resumption.com/
CVE ID: CVE-2014-4631 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T11:20:26.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031297 - http://www.securityfocus.com/archive/1/534136/100/0/threaded - http://ww
: - http://www.securitytracker.com/id/1031297 - http://www.securityfocus.com/archive/1/534136/100/0/threaded - http://www.securityfocus.com/bid/71423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99086
CVE ID: CVE-2014-4632 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T11:20:26.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoof servers, and bypass intended backup and restore access restrictions, via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2015-0002.html - ht
Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2015-0002.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0154.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100866 - http://www.securitytracker.com/id/1031664
CVE ID: CVE-2014-4633 State: PUBLISHED Published: 2014-12-12T18:00:00 Last Updated: 2024-08-06T11:20:26.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-12/0073.html
CVE ID: CVE-2014-4634 State: PUBLISHED Published: 2014-12-30T15:00:00 Last Updated: 2024-08-06T11:20:26.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-12/0170.html
CVE ID: CVE-2014-4635 State: PUBLISHED Published: 2015-01-07T02:00:00 Last Updated: 2024-08-06T11:20:26.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://www.securitytracker.com/id/1031497
CVE ID: CVE-2014-4636 State: PUBLISHED Published: 2015-01-07T02:00:00 Last Updated: 2024-08-06T11:20:26.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://www.securitytracker.com/id/1031497
CVE ID: CVE-2014-4637 State: PUBLISHED Published: 2015-01-07T02:00:00 Last Updated: 2024-08-06T11:20:26.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://www.securitytracker.com/id/1031497
CVE ID: CVE-2014-4638 State: PUBLISHED Published: 2015-01-07T02:00:00 Last Updated: 2024-08-06T11:20:26.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://www.securitytracker.com/id/1031497
CVE ID: CVE-2014-4639 State: PUBLISHED Published: 2015-01-07T02:00:00 Last Updated: 2024-08-06T11:20:26.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://
ent-Kit-XSS-CSRF-Redirection-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html - http://www.securitytracker.com/id/1031497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99636
CVE ID: CVE-2014-4640 State: REJECTED Published: 2015-01-07T15:00:00 Last Updated: 2015-01-07T12:57:00 Description: No description available.
CVE ID: CVE-2014-4641 State: REJECTED Published: 2015-01-07T15:00:00 Last Updated: 2015-01-07T12:57:00 Description: No description available.
CVE ID: CVE-2014-4642 State: REJECTED Published: 2015-01-07T15:00:00 Last Updated: 2015-01-07T12:57:00 Description: No description available.