Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7486 State: PUBLISHED Published: 2020-01-02T18:05:38 Last Updated: 2024-08-06T18:09:17.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029394 - http://xforce.iss.net/xforce/xfdb/89250 - http://seclists.org/bugtraq/2013/Nov/127 - http://p
tytracker.com/id/1029394 - http://xforce.iss.net/xforce/xfdb/89250 - http://seclists.org/bugtraq/2013/Nov/127 - http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22.4-backend-7.4.0-Cross-Site-Scripting.html - https://forum.open-xchange.com/showthread.php?8115-Open-Xchange-releases-Security-Patch-2013-11-12-for-v7-2-2-v6-22-3-and-v7-4-0-v6
CVE ID: CVE-2013-7487 State: PUBLISHED Published: 2020-03-21T00:04:20 Last Updated: 2024-08-06T18:09:17.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000. Additional Analyst Notes: - CVE Program Container: References: - http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html
CVE ID: CVE-2013-7488 State: PUBLISHED Published: 2020-04-07T17:35:57 Last Updated: 2024-08-06T18:09:17.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gbarr/perl-Convert-ASN1/issues/14 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONNQSW4SSKMG5RUEFZJZA5T5R2WXEGQF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6V3PJEQOT47ZO77263XPGS3Y3AJROI4X/
CVE ID: CVE-2013-7489 State: PUBLISHED Published: 2020-06-26T19:41:47 Last Updated: 2024-08-06T18:09:16.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bbangert/beaker/issues/191 - https://www.openwall.com/lists/oss-security/2020/05/14/11 - https://bugzilla.redhat.com/show_bug.cgi?id=1850105
CVE ID: CVE-2013-7490 State: PUBLISHED Published: 2020-09-11T18:37:43 Last Updated: 2024-08-06T18:09:16.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.632-9th-Nov-2014 - https://github.com/perl5-dbi/dbi/commit/a8b98e988d6ea2946f5f56691d6d5ead53f65766 - https://rt.cpan.org/Public/Bug/Display.html?id=86744#txn-1880941 - https://usn.ubuntu.com/4509-1/
CVE ID: CVE-2013-7491 State: PUBLISHED Published: 2020-09-11T18:37:31 Last Updated: 2024-08-06T18:09:16.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=85562 - https://github.com/perl5-dbi/dbi/commit/401f1221311c71f760e21c98772f0f7e3cbead1d - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.628-22nd-July-2013
CVE ID: CVE-2014-0001 State: PUBLISHED Published: 2014-01-31T23:00:00 Last Updated: 2024-08-06T08:58:26.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029708 - http://secunia.com/advisories/52161 - http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64 - http://www.osvdb.org/102714 - http://rhn.redhat.com/errata/RHSA-2014-0186.html - http://www.m
5.5/revision/2502.565.64 - http://www.osvdb.org/102714 - http://rhn.redhat.com/errata/RHSA-2014-0186.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:029 - http://www.securityfocus.com/bid/65298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90901 - http://osvdb.org/102713 - http://rhn.redhat.com/errata/RHSA-2014-0173.html - http://rhn.redhat.com/errata/RHSA-2014-0189.html - http://rhn.redhat.com/errata/RHSA-2014-0164.html - https://bugzilla.redhat.com/show_bug.cgi?id=1054592 - https://mariadb.com/kb/en/mariadb-5535-changelog/ - http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE ID: CVE-2014-0002 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T08:58:26.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57125 - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://camel.apache.org/security-advisories.data/CVE-2014-0002.
125 - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://camel.apache.org/security-advisories.data/CVE-2014-0002.txt.asc - http://secunia.com/advisories/57719 - http://www.securityfocus.com/bid/65901 - http://secunia.com/advisories/57716 - http://rhn.redhat.com/errata/RHSA-2014-0372.html - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2014-0003 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T08:58:26.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57125 - http://rhn.redhat.com/errata/RHSA-2014-0254.html - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://www.securityfocus.com/bid/65902 - http://secunia.com/advisories/57719 - http://rhn.redhat.com/errata/RHSA-2014-0245.html - http://
tyfocus.com/bid/65902 - http://secunia.com/advisories/57719 - http://rhn.redhat.com/errata/RHSA-2014-0245.html - http://secunia.com/advisories/57716 - http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.asc - http://rhn.redhat.com/errata/RHSA-2014-0372.html - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2014-0004 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T08:58:26.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-03/msg00053.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html - http://rhn.redhat.com/errata/RHSA-2014-0293.html - http://lists.freedesktop.or
/opensuse-updates/2014-03/msg00051.html - http://rhn.redhat.com/errata/RHSA-2014-0293.html - http://lists.freedesktop.org/archives/devkit-devel/2014-March/001568.html - http://www.ubuntu.com/usn/USN-2142-1 - http://www.securityfocus.com/bid/66081 - http://www.debian.org/security/2014/dsa-2872
CVE ID: CVE-2014-0005 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T08:58:26.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0345.html - http://rhn.redhat.com/errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2015-0
errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2015-0235.html - http://rhn.redhat.com/errata/RHSA-2014-0344.html - http://rhn.redhat.com/errata/RHSA-2014-0343.html
CVE ID: CVE-2014-0006 State: PUBLISHED Published: 2014-01-23T01:00:00 Last Updated: 2024-08-06T08:58:26.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0232.html - https://bugs.launchpad.net/swift/+bug/1265665 - http://www.openwall.com/lists/oss-security/2014/01/17/5
CVE ID: CVE-2014-0007 State: PUBLISHED Published: 2014-06-20T14:00:00 Last Updated: 2024-08-06T08:58:26.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/6086 - http://rhn.redhat.com/errata/RHSA-2014-0770.html
CVE ID: CVE-2014-0008 State: PUBLISHED Published: 2014-01-20T11:00:00 Last Updated: 2024-08-06T08:58:26.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=252414 - http://openwall.com/lists/oss-security/2014/01/20/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721 - http://lists.fedoraproject.org/p
01/20/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html - http://www.securitytracker.com/id/1029647
CVE ID: CVE-2014-0009 State: PUBLISHED Published: 2014-01-20T11:00:00 Last Updated: 2024-08-06T08:58:26.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: course/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 does not enforce the moodle/site:accessallgroups capability requirement for outside-group users in a SEPARATEGROUPS configuration, which allows remote authenticated users to perform "login as" actions via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/01/20/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=comm
s: - http://openwall.com/lists/oss-security/2014/01/20/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42643 - https://moodle.org/mod/forum/discuss.php?d=252415 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html - http://www.securitytracker.com/id/1029648
CVE ID: CVE-2014-0010 State: PUBLISHED Published: 2014-01-20T11:00:00 Last Updated: 2024-08-06T08:58:26.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allow remote attackers to hijack the authentication of administrators for requests that delete (1) categories or (2) fields. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/01/20/1 - https://moodle.org/mod/forum/discuss.php?d=252416 - http://osvdb.org/102261 - http://lists.fe
ss-security/2014/01/20/1 - https://moodle.org/mod/forum/discuss.php?d=252416 - http://osvdb.org/102261 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42883 - http://www.securitytracker.com/id/1029649 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html
CVE ID: CVE-2014-0011 State: PUBLISHED Published: 2020-01-02T19:34:29 Last Updated: 2024-08-06T08:58:26.465Z Vendors: TigerVNC Products: TigerVNC Problem Types: Buffer Overflow Description: Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1050928 - https://github.com/TigerVNC/tigervnc/releases/tag/v1.3.1
CVE ID: CVE-2014-0012 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T08:58:26.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitsuhiko/jinja2/pull/292 - http://secunia.com/advisories/56328 - https://bugzilla.redhat.com/show_bug.cgi?id=1051421 - http://secunia.com/advisories/60738 - https://github.com/mi
6328 - https://bugzilla.redhat.com/show_bug.cgi?id=1051421 - http://secunia.com/advisories/60738 - https://github.com/mitsuhiko/jinja2/commit/acb672b6a179567632e032f547582f30fa2f4aa7 - https://github.com/mitsuhiko/jinja2/pull/296 - http://www.gentoo.org/security/en/glsa/glsa-201408-13.xml - http://seclists.org/oss-sec/2014/q1/73
CVE ID: CVE-2014-0013 State: PUBLISHED Published: 2018-02-15T21:00:00 Last Updated: 2024-08-06T08:58:26.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/ember-security/2kpXXCxISS4 - http://emberjs.com/blog/2014/01/14/em
ferences: - https://groups.google.com/forum/#%21topic/ember-security/2kpXXCxISS4 - http://emberjs.com/blog/2014/01/14/ember-security-releases.html
CVE ID: CVE-2014-0014 State: PUBLISHED Published: 2018-02-15T21:00:00 Last Updated: 2024-08-06T08:58:26.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/ember-security/PSE4RzTi6l4 - http://emberjs.com/blog/2014/01/14/ember-security-releases.html - http://www.oracle.com/technetwork/security-advisory/cpuoct20
/emberjs.com/blog/2014/01/14/ember-security-releases.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
CVE ID: CVE-2014-0015 State: PUBLISHED Published: 2014-02-02T00:00:00 Last Updated: 2024-08-06T08:58:26.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56912 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.502652 - http://www.oracle.com/technetwork/top
.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.502652 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://support.apple.com/kb/HT6296 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www.securitytracker.com/id/1029710 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.securityfocus.com/bid/65270 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htm
aded - http://www.securityfocus.com/bid/65270 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.debian.org/security/2014/dsa-2849 - http://secunia.com/advisories/59458 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://secunia.com/advisories/56728 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html - http://secunia.com/advisories/59475 - http://curl.haxx.se/docs/adv_20140129.html - http://www.ubuntu.com/usn/USN-2097-1 - http://secunia.com/advisories/56734 - http://secu
axx.se/docs/adv_20140129.html - http://www.ubuntu.com/usn/USN-2097-1 - http://secunia.com/advisories/56734 - http://secunia.com/advisories/56731
CVE ID: CVE-2014-0016 State: PUBLISHED Published: 2014-03-23T15:00:00 Last Updated: 2024-08-06T08:58:26.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates. Additional Analyst Notes: - CVE Program Container: References: - https://www.stunnel.org/sdf_ChangeLog.html - https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff - http://www.openwall.com/lists/oss-security/2
g.html - https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff - http://www.openwall.com/lists/oss-security/2014/03/05/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1072180 - http://www.securityfocus.com/bid/65964
CVE ID: CVE-2014-0017 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T08:58:26.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2145-1 - http://www.debian.org/security/2014/dsa-2879 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html - http
- http://www.debian.org/security/2014/dsa-2879 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html - http://secunia.com/advisories/57407 - http://www.openwall.com/lists/oss-security/2014/03/05/1 - http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/ - http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html - https://bugzilla.redhat.com/show_bug.cgi?id=1072191
CVE ID: CVE-2014-0018 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T08:58:26.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0170.html - https://bugzilla.redhat.com/show_bug.cgi?id=1052783 - http://rhn.redhat.com/errata/RHSA-2014-0172.html - http://www.securi
tps://bugzilla.redhat.com/show_bug.cgi?id=1052783 - http://rhn.redhat.com/errata/RHSA-2014-0172.html - http://www.securityfocus.com/bid/65591 - http://rhn.redhat.com/errata/RHSA-2014-0171.html
CVE ID: CVE-2014-0019 State: PUBLISHED Published: 2014-02-04T16:00:00 Last Updated: 2024-08-06T08:58:26.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:033 - http://www.securityfocus.com/bid/65201 - http://osvdb.org/102612 - http://seclists
rity/advisories?name=MDVSA-2014:033 - http://www.securityfocus.com/bid/65201 - http://osvdb.org/102612 - http://seclists.org/oss-sec/2014/q1/159 - http://www.dest-unreach.org/socat - http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt - http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html