Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d3.sourceforge.net/source/changelog.txt - http://secunia.com/advisories/58002 - http://owncloud.org/about/security/advisories/oC-SA-2014-006/
CVE ID: CVE-2014-2054 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T09:58:16.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPOffice/PHPExcel/blob/develop/changelog.txt - http://owncloud.org/about/security/advisories/oC-SA-2014-006/
CVE ID: CVE-2014-2055 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T09:58:16.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2014-006/ - https://github.com/fruux/sabre-dav/releases/tag/1.7.11
CVE ID: CVE-2014-2056 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T09:58:16.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2014-006/
CVE ID: CVE-2014-2057 State: PUBLISHED Published: 2014-03-23T15:00:00 Last Updated: 2024-08-06T09:58:16.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2014-007/
CVE ID: CVE-2014-2058 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/b6b2a367a7976be80a799c6a49fa6c58d778b50e - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/J
a6c58d778b50e - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2059 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T09:58:16.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91346 - https://github.com/jenkinsci/jenkins/commit/ad38d8480f20ce3cbf8fec3e2003bc83efda4f7d - http://seclists.org/oss-sec/2014/q1/421 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Sec
c3e2003bc83efda4f7d - http://seclists.org/oss-sec/2014/q1/421 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2060 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2061 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/bf539198564a1108b7b71a973bf7de963a6213ef - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2062 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/5548b5220cfd496831b5721124189ff18fbb12a3 - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2063 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://github.com/jenkinsci/jenkins/commit/16931bd7bf7560e26ef98328b8e95e803d0e90f6 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2064 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/fbf96734470caba9364f04e0b77b0bae7293a1ec - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2065 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/a0b00508eeb74d7033dc4100eb382df4e8fa72e7 - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2066 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/8ac74c350779921598f9d5edfed39dd35de8842a - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2067 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T09:58:16.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91354 - https://github.com/jenkinsci/jenkins/commit/5d57c855f3147bfc5e7fda9252317b428a700014 - http://seclists.org/oss-sec/2014/q1/421 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Secu
9252317b428a700014 - http://seclists.org/oss-sec/2014/q1/421 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2068 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T09:58:16.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/0530a6645aac10fec005614211660e98db44b5eb - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+201
penwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2014-2069 State: PUBLISHED Published: 2018-04-13T21:00:00 Last Updated: 2024-08-06T09:58:16.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91463 - http://seclists.org/fulldisclosure/2014/Feb/219 - http://www.securityfocus.com/bid/65740
CVE ID: CVE-2014-2071 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T09:58:16.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identities within a tunneled EAP method. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/aid-050214.asc
CVE ID: CVE-2014-2072 State: PUBLISHED Published: 2020-01-08T15:42:27 Last Updated: 2024-08-06T09:58:16.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125308/Catia-V5-6R2013-Stack-Buffer-Overflow.html - http://www.securityfocus.com/bid/65675 - https://www.exploit-database.net/?id=60103
CVE ID: CVE-2014-2073 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:58:16.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125325/Catia-V5-6R2013-Stack-Buffer-Overflow.html
CVE ID: CVE-2014-2075 State: PUBLISHED Published: 2014-02-27T11:00:00 Last Updated: 2024-08-06T09:58:16.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requirements, which allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/multimedia/enterprise_administator_advisory_20140226_tcm8-20533.txt
CVE ID: CVE-2014-2077 State: PUBLISHED Published: 2014-03-20T16:00:00 Last Updated: 2024-08-06T09:58:16.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1 before 7.4.1-rev10 and 7.4.2 before 7.4.2-rev8 allows remote attackers to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags" for screenreaders at the top bar'. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57290 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0108.html
CVE ID: CVE-2014-2078 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:58:16.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531502/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/92017
CVE ID: CVE-2014-2079 State: PUBLISHED Published: 2018-07-16T14:00:00 Last Updated: 2024-08-06T09:58:16.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1069066 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91519 - http://www.openwall.com/lists/oss-security/2014/02/24/5 - http://www.securityfo
rce.ibmcloud.com/vulnerabilities/91519 - http://www.openwall.com/lists/oss-security/2014/02/24/5 - http://www.securityfocus.com/bid/65748
CVE ID: CVE-2014-2080 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T09:58:16.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65755 - http://secunia.com/advisories/57038 - https://github.com/modxcms/revolution/commit/77463eb6a8090f474b04fdc1b72225cb93c558ea - http://modx.com/blog/2014/01/21/revolution-2.2.11%E2%80%94security-fixes-and-prevent-change-loss - h
1b72225cb93c558ea - http://modx.com/blog/2014/01/21/revolution-2.2.11%E2%80%94security-fixes-and-prevent-change-loss - http://seclists.org/oss-sec/2014/q1/431
CVE ID: CVE-2014-2081 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T09:58:16.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Aug/64 - http://packetstormsecurity.com/files/127997/VTLS-Virtua-SQL-Injection.html
CVE ID: CVE-2014-2084 State: PUBLISHED Published: 2014-05-17T19:00:00 Last Updated: 2024-08-06T09:58:16.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown. Additional Analyst Notes: - CVE Program
cause a denial of service (shutdown) via a request to scripts/commands/shutdown. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33327 - http://www.osvdb.org/106842 - https://www.skyboxsecurity.com/sites/default/files/file_resources/Skybox_Security_Appliance_Vulnerability.pdf - http://www.exploit-db.com/exploits/33328 - http://www.securityfocus.com/bid/67352
CVE ID: CVE-2014-2085 State: REJECTED Published: 2014-05-17T19:00:00 Last Updated: 2014-05-17T18:57:00 Description: No description available.
CVE ID: CVE-2014-2087 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T09:58:16.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66211 - http://www.securityfocus.com/archive/1/531465/100/0/threaded - https://www.rcesecurity.com/
ecurityfocus.com/bid/66211 - http://www.securityfocus.com/archive/1/531465/100/0/threaded - https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-execution - http://seclists.org/fulldisclosure/2014/Mar/137
CVE ID: CVE-2014-2088 State: PUBLISHED Published: 2014-03-02T17:00:00 Last Updated: 2024-08-06T09:58:16.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an upload_files action to the uploadFiles command, and then accessing the .php file via a direct request to a certain client_id pathname. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html
CVE ID: CVE-2014-2089 State: PUBLISHED Published: 2014-03-02T17:00:00 Last Updated: 2024-08-06T09:58:16.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html
CVE ID: CVE-2014-2090 State: PUBLISHED Published: 2014-03-02T17:00:00 Last Updated: 2024-08-06T09:58:16.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tar_val, or (3) title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html
CVE ID: CVE-2014-2091 State: PUBLISHED Published: 2014-03-02T17:00:00 Last Updated: 2024-08-06T10:05:57.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an add_forum action. NOTE: the original disclosure also reported issues that may not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125348/ATutor-2.1.1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/65744
CVE ID: CVE-2014-2092 State: PUBLISHED Published: 2014-03-02T17:00:00 Last Updated: 2024-08-06T10:05:57.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334. NOTE: the original disclosure also reported issues that may not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125353/CMSMadeSimple-1.11.10-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/65746
CVE ID: CVE-2014-2093 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T10:05:57.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1069396 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958 - http://openwall.com/lists/oss-security/2014/02/25/2 - http://openwall.com/lists/oss-security/2014/02/25/4
CVE ID: CVE-2014-2094 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T10:05:57.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1069396 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958 - http://openwall.com/lists/oss-security/2014/02/25/2 - http://openwall.com/lists/oss-security/2014/02/25/4
CVE ID: CVE-2014-2095 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T10:05:57.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1069396 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958 - http://openwall.com/lists/oss-security/2014/02/25/2 - http://openwall.com/lists/oss-security/2014/02/25/4
CVE ID: CVE-2014-2096 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T10:05:57.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1069396 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958 - http://openwall.com/lists/oss-security/2014/02/25/2 - http://openwall.com/lists/oss-security/2014/02/25/4