Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hn.redhat.com/errata/RHSA-2015-0864.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98556 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.securityfocus.com/bid/70971 - https://bugzilla.redhat.com/show_bug.cgi?id=1161565 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=086ba77a6db00ed858ff07451bedee197df868c9 - http://rhn.redhat.com/errata/RHSA-2014-1943.html - https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9
CVE ID: CVE-2014-7827 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T13:03:27.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 uses the default security domain when a security domain is undefined, which allows remote authenticated users to bypass intended access restrictions by leveraging credentials on the default domain for a role that is also on the application domain. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://r
tional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2015-0215.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - http://rhn.redhat.com/errata/RHSA-2015-0217.html - http://rhn.redhat.com/errata/RHSA-2015-0218.html - http://rhn.redhat.com/errata/RHSA-2015-0216.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100889 - http://www.securitytracker.com/id/1031741
CVE ID: CVE-2014-7828 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T13:03:27.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind. Additional Analyst Notes: - CVE Program Container: References: - https://fedorahosted.org/freeipa/ticket/4690 - http://www.freeipa.org/page/Releases/4.1.1 - https://www.redhat.com/archives/freeipa-users/2014-November/msg00077.html - https://www.redhat.com/archives/freeipa-devel/2014-November/msg00068
rchives/freeipa-users/2014-November/msg00077.html - https://www.redhat.com/archives/freeipa-devel/2014-November/msg00068.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98500 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1160871 - http://www.securityfocus.com/bid/70932
CVE ID: CVE-2014-7829 State: PUBLISHED Published: 2014-11-18T23:00:00 Last Updated: 2024-08-06T13:03:26.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via vectors involving a \ (backslash) character, a similar issue to CVE-2014-7818. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2014-7829 -
4-7818. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2014-7829 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00112.html - http://www.securityfocus.com/bid/71183 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/rMTQy4oRCGk/loS_CRS8mNEJ
CVE ID: CVE-2014-7830 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:26.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47865 - http://www.securitytracker.com/id/1031215 -
tp://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47865 - http://www.securitytracker.com/id/1031215 - http://www.securityfocus.com/bid/71119 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=275147
CVE ID: CVE-2014-7831 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:26.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/classes/grades_external.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the get_grades web service. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47766 - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11
t=commit&s=MDL-47766 - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=275153
CVE ID: CVE-2014-7832 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=
tracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47921 - https://moodle.org/mod/forum/discuss.php?d=275154
CVE ID: CVE-2014-7833 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-476
penwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47697 - https://moodle.org/mod/forum/discuss.php?d=275155
CVE ID: CVE-2014-7834 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not verify group permissions, which allows remote authenticated users to access a forum via the forum_get_discussions web service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=275159 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45303
CVE ID: CVE-2014-7835 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:26.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not ensure that a file upload is for a private or draft area, which allows remote authenticated users to upload files containing JavaScript, and consequently conduct cross-site scripting (XSS) attacks, by specifying the profile-picture area. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=2751
.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=275161 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47868
CVE ID: CVE-2014-7836 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47924 - http://www.securitytracker.com/id/1031215 - http://openwall.com
/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47924 - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - https://moodle.org/mod/forum/discuss.php?d=275162
CVE ID: CVE-2014-7837 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - https://moodle.org/mod/forum/discuss.php?d=275163 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47949
CVE ID: CVE-2014-7838 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within (1) mod/forum/deprecatedlib.php, (2) mod/forum/forum.js, (3) mod/forum/index.php, or (4) mod/forum/lib.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists
lyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48019 - https://moodle.org/mod/forum/discuss.php?d=275164
CVE ID: CVE-2014-7839 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T13:03:27.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://rhn.redhat.com/errata/RHSA-2015-0773.html - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://secunia.com/advisories/62580 - http://rhn.redhat.com/errata/RHSA
tp://rhn.redhat.com/errata/RHSA-2015-0850.html - http://secunia.com/advisories/62580 - http://rhn.redhat.com/errata/RHSA-2015-0851.html - https://issues.jboss.org/browse/RESTEASY-1130
CVE ID: CVE-2014-7840 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:03:27.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0624.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=0be839a2701369f669532ea5884c15bead1c6e08 - http://thread.gmane.org/gmane.comp.emulators.qemu/306117 - http://rhn.redhat.com/errata/RHSA-2015-0349.html - https://e
http://thread.gmane.org/gmane.comp.emulators.qemu/306117 - http://rhn.redhat.com/errata/RHSA-2015-0349.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99194 - https://bugzilla.redhat.com/show_bug.cgi?id=1163075
CVE ID: CVE-2014-7841 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T13:03:26.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62735 - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://linux.oracle.com/errata/ELSA-2015-3004.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-
95.html - http://linux.oracle.com/errata/ELSA-2015-3004.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40607cbe270a9e8360907cb1e62ddf0736e4864 - http://www.openwall.com/lists/oss-security/2014/11/13/6 - https://support.f5.com/kb/en-us/solutions/public/16000/000/sol16016.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2015-0285.html - http://rhn.redhat.com/errata/RHSA-2015-0087.html - http://www.debian.org/security/2014/dsa-3093 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://www.securityfocus.com/bid/71081 - http://lists.opensuse.org/opensuse-se
security-announce/2015-03/msg00010.html - http://www.securityfocus.com/bid/71081 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=1163087 - http://rhn.redhat.com/errata/RHSA-2015-0284.html - http://linux.oracle.com/errata/ELSA-2015-3005.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 - http://secunia.com/advisories/62597 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 - http://rhn.redhat.com/errata/RHSA-2015-0102.html - http://secunia.com/advisories/62305
CVE ID: CVE-2014-7842 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T13:03:27.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.oracle.com/technetwor
855.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/71078 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://www.openwall.com/lists/oss-security/2014/11/13/7 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2b9e6c1a35afcc0973acb72e591c714e78885ff - http://secunia.com/advisories/62326 - https://github.com/torvalds/linux/commit/a2b9e6c1a35afcc0973acb72e591c714e78885ff - http://www.oracle.c
visories/62326 - https://github.com/torvalds/linux/commit/a2b9e6c1a35afcc0973acb72e591c714e78885ff - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://secunia.com/advisories/62336 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 - https://bugzilla.redhat.com/show_bug.cgi?id=1163762 - http://secunia.com/advisories/62305
CVE ID: CVE-2014-7843 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T13:03:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __clear_user function in arch/arm64/lib/clear_user.S in the Linux kernel before 3.17.4 on the ARM64 platform allows local users to cause a denial of service (system crash) by reading one byte beyond a /dev/zero page boundary. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/13/5 - https://github.com/torvalds/linux/commit/97fc15436b36ee3956efad83e22a557991f7d19d - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97fc15436b36ee3
efad83e22a557991f7d19d - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97fc15436b36ee3956efad83e22a557991f7d19d - https://bugzilla.redhat.com/show_bug.cgi?id=1163744 - http://www.securityfocus.com/bid/71082 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 - http://secunia.com/advisories/62305
CVE ID: CVE-2014-7844 State: PUBLISHED Published: 2020-01-14T16:13:01 Last Updated: 2024-08-06T13:03:27.517Z Vendors: BSD Products: mailx Problem Types: Metacharacters Description: BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/1066 - http://linux.oracle.com/errata/ELSA-2014-1999.html - http://www.debian.org/security/2014/dsa-3104 - http://www.debian.org/security/2014/dsa-3105 - http://rhn.redhat.com/errata/RHSA-2014-1999.html
CVE ID: CVE-2014-7845 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate_password function in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a sufficient number of possible temporary passwords, which allows remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47050 - http://www.securitytracker.com/id/1031215 - https://moodle.org/mod/forum/discuss.php?d=275152 - http://openwall.com/lists/oss-
/www.securitytracker.com/id/1031215 - https://moodle.org/mod/forum/discuss.php?d=275152 - http://openwall.com/lists/oss-security/2014/11/17/11
CVE ID: CVE-2014-7846 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not consider the moodle/tag:edit capability before adding a tag, which allows remote authenticated users to bypass intended access restrictions via an AJAX request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47965 - https:
/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47965 - https://moodle.org/mod/forum/discuss.php?d=275157
CVE ID: CVE-2014-7847 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service (resource consumption) by triggering the calculation of an estimated latitude and longitude for an IP address. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=275158 - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=sear
ker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47321
CVE ID: CVE-2014-7848 State: PUBLISHED Published: 2014-11-24T11:00:00 Last Updated: 2024-08-06T13:03:27.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=275160 - http://www.securitytracker.com/id/1031215 - http://openwall.com/lists/oss-security/2014/11/17/11 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47287
CVE ID: CVE-2014-7849 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T13:03:27.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0920.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100890 - http://rhn.redhat.com/errata/RHSA-2015-0215.html
20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100890 - http://rhn.redhat.com/errata/RHSA-2015-0215.html - https://bugzilla.redhat.com/show_bug.cgi?id=1165170 - http://rhn.redhat.com/errata/RHSA-2015-0217.html - http://rhn.redhat.com/errata/RHSA-2015-0218.html - http://rhn.redhat.com/errata/RHSA-2015-0216.html - http://www.securitytracker.com/id/1031741
CVE ID: CVE-2014-7850 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:03:27.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1165280 - https://fedorahosted.org/freeipa/ticket/4742 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144848.html