Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8912 State: PUBLISHED Published: 2015-10-28T18:00:00 Last Updated: 2024-08-06T13:33:12.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by configuration information. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI47714 - http://www.securitytracker.com/id/1033988 - http://www-01.ibm.com/support/docview
/support/docview.wss?uid=swg1PI47714 - http://www.securitytracker.com/id/1033988 - http://www-01.ibm.com/support/docview.wss?uid=swg21963226
CVE ID: CVE-2014-8913 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T13:33:13.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62205 - http://www-01.ibm.com/support/docview.wss?uid=swg21693239 - http://www.securitytracker.com/id/1031614 - https://exchange.xforce.ibmcloud.com/v
support/docview.wss?uid=swg21693239 - http://www.securitytracker.com/id/1031614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99284 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51742
CVE ID: CVE-2014-8914 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T13:33:13.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8913. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62205 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR51836 - http://www-01.ibm.com/support/docview.wss?uid=swg21693239 - https://exchange.xforc
support/docview.wss?uid=swg1JR51836 - http://www-01.ibm.com/support/docview.wss?uid=swg21693239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99285 - http://www.securitytracker.com/id/1031614 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52103
CVE ID: CVE-2014-8916 State: PUBLISHED Published: 2015-10-03T22:00:00 Last Updated: 2024-08-06T13:33:12.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0144. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963358
CVE ID: CVE-2014-8917 State: PUBLISHED Published: 2015-01-28T22:00:00 Last Updated: 2024-08-06T13:33:12.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1.3 before IF11 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62590
nspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99303 - http://secunia.com/advisories/62837 - http://www-01.ibm.com/support/docview.wss?uid=swg21696013 - http://www.securitytracker.com/id/1032376 - http://www-01.ibm.com/support/docview.wss?uid=swg21694693 - http://www.securityfocus.com/bid/72903
CVE ID: CVE-2014-8918 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T13:33:12.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99304 - http://www-01.ibm.com/support/docview.wss?uid=swg21695170
CVE ID: CVE-2014-8920 State: PUBLISHED Published: 2015-01-28T22:00:00 Last Updated: 2024-08-06T13:33:12.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on Windows allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99311 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020518 - http://secunia.com/advisories/62532
CVE ID: CVE-2014-8921 State: PUBLISHED Published: 2015-03-02T02:00:00 Last Updated: 2024-08-06T13:33:12.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21690582
CVE ID: CVE-2014-8923 State: PUBLISHED Published: 2015-03-25T01:00:00 Last Updated: 2024-08-06T13:33:12.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security Identity Manager on Windows, when certain log and trace levels are configured, store the cleartext administrator password in a log file, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699902
CVE ID: CVE-2014-8924 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T13:33:12.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032275 - http://www-01.ibm.com/support/docv
s: - CVE Program Container: References: - http://www.securitytracker.com/id/1032275 - http://www-01.ibm.com/support/docview.wss?uid=swg21882820
CVE ID: CVE-2014-8925 State: PUBLISHED Published: 2015-03-25T01:00:00 Last Updated: 2024-08-06T13:33:12.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout or insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21699148
CVE ID: CVE-2014-8926 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T13:33:12.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8927. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21882695
CVE ID: CVE-2014-8927 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T13:33:12.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8926. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21882695
CVE ID: CVE-2014-8928 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8929 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8931 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8932 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8933 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8934 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8935 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8936 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8937 State: PUBLISHED Published: 2020-06-01T16:26:53 Last Updated: 2024-08-06T13:33:12.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a great deal of resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8938 State: PUBLISHED Published: 2020-06-01T16:25:56 Last Updated: 2024-08-06T13:33:12.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the username and password are on the command line. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8939 State: PUBLISHED Published: 2020-06-01T16:25:06 Last Updated: 2024-08-06T13:33:12.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/plugins/modifier.date_format.php request if PHP has a non-recommended configuration that produces warning messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8940 State: PUBLISHED Published: 2020-06-01T16:24:15 Last Updated: 2024-08-06T13:33:12.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (names and details of projects) by visiting the /update.log URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8941 State: PUBLISHED Published: 2020-06-01T16:30:35 Last Updated: 2024-08-06T13:33:12.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8942 State: PUBLISHED Published: 2020-06-01T16:29:39 Last Updated: 2024-08-06T13:33:12.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8943 State: PUBLISHED Published: 2020-06-01T16:28:39 Last Updated: 2024-08-06T13:33:12.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8944 State: PUBLISHED Published: 2020-06-01T16:27:42 Last Updated: 2024-08-06T13:33:12.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the admin.php?page=config install_name, intro_message, or new_file_content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8945 State: PUBLISHED Published: 2020-06-01T16:11:57 Last Updated: 2024-08-06T13:33:12.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html
CVE ID: CVE-2014-8948 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T13:33:12.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hijack the authentication of administrators for requests that with an unspecified impact via the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58094 - http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-
a.com/advisories/58094 - http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-Execution.html - http://www.exploit-db.com/exploits/33076 - http://osvdb.org/show/osvdb/106301 - http://seclists.org/fulldisclosure/2014/Apr/265
CVE ID: CVE-2014-8949 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T13:33:12.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear whether this issue itself crosses privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58094 - http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclo
p://secunia.com/advisories/58094 - http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-Execution.html - http://www.exploit-db.com/exploits/33076 - http://osvdb.org/show/osvdb/106301 - http://seclists.org/fulldisclosure/2014/Apr/265
CVE ID: CVE-2014-8950 State: PUBLISHED Published: 2014-11-16T17:00:00 Last Updated: 2024-08-06T13:33:12.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awareness blade is used, allows remote attackers to cause a denial of service (crash) via vectors involving an HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98763 - http://secunia.com/advisories/58487 - http://www.securityfocus.com/bid/67993 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsoluti
//www.securityfocus.com/bid/67993 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98935
CVE ID: CVE-2014-8951 State: PUBLISHED Published: 2014-11-16T17:00:00 Last Updated: 2024-08-06T13:33:12.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58487 - http://www.securityfocus.com/bid/67993 - https://exc
gram Container: References: - http://secunia.com/advisories/58487 - http://www.securityfocus.com/bid/67993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98761 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100505
CVE ID: CVE-2014-8952 State: PUBLISHED Published: 2014-11-16T17:00:00 Last Updated: 2024-08-06T13:33:12.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, (2) IPsec Remote Access, (3) Mobile Access / SSL VPN blade, (4) SSL Network Extender, (5) Identify Awareness blade, (6) HTTPS Inspection, (7) UserCheck, or (8) Data Leak Prevention blade module is enabled, allow remote attackers to cause a denial of service ("stability issue") via an unspecified "traffic condition." Additional Analyst Notes: - CVE Program Container: References: -
bility issue") via an unspecified "traffic condition." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98762 - http://secunia.com/advisories/58487 - http://www.securityfocus.com/bid/67993 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100431
CVE ID: CVE-2014-8953 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:33:12.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers to hijack the authentication of administrators or requests that (1) add an admin account via a request to filepath/yonetim/plugin/adminsave.php or have unspecified impact via a request to (2) ayarsave.php, (3) uyesave.php, (4) slaytadd.php, or (5) slaytsave.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129102/Whos-Who-Script-Cross-Site-Request-Forgery
Program Container: References: - http://packetstormsecurity.com/files/129102/Whos-Who-Script-Cross-Site-Request-Forgery.html - http://www.exploit-db.com/exploits/35129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98631
CVE ID: CVE-2014-8954 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:33:12.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71172 - http://www.exploit-db.com/exploits/35198 - http://packetstormsecurity.com/files/129104/phpSound-Music-Sharing-Platform-1.0.5-Cross-Site-Scripting.html
CVE ID: CVE-2014-8955 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:33:13.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact Form Clean and Simple (clean-and-simple-contact-form-by-meg-nicholas) plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscf[name] parameter to contact-us/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98469 - http://packetstormsecurity.com/files/128957/WordPress-Clean-And-Simple-Contact-Form-4.4.0-XSS.html
CVE ID: CVE-2014-8956 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:33:12.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8956/ - http://seclists.org/fulldisclosure/2014/Dec/46 - http://packetstormsecurity.com/files/129472/K7-Computing-Mu
014-8956/ - http://seclists.org/fulldisclosure/2014/Dec/46 - http://packetstormsecurity.com/files/129472/K7-Computing-Multiple-Products-K7Sentry.sys-Out-Of-Bounds-Write.html
CVE ID: CVE-2014-8957 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T13:33:12.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 allows remote authenticated users to inject arbitrary web script or HTML via the Tasks parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73012 - https://www.youtube.com/watch?v=3jBQFAAq23k&feature=youtu.be - http://packetstormsecurity.com/files/130723/OpenKM-Stored-Cross-Site-Scripting.html
CVE ID: CVE-2014-8958 State: PUBLISHED Published: 2014-11-30T11:00:00 Last Updated: 2024-08-06T13:33:12.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during renderi