Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-4295 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294, CVE-2014-6538, and CVE-2014-6563. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfocus.com/bid/70498
CVE ID: CVE-2014-4296 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfoc
tainer: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfocus.com/bid/70504
CVE ID: CVE-2014-4297 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfoc
tainer: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfocus.com/bid/70502
CVE ID: CVE-2014-4298 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70524 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-4299 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70526 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-4300 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70527 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-4301 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T11:12:34.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Eugeny/ajenti/commit/d3fc5eb142ff16d55d158afb050af18d5ff09120 - http://secunia.com/advisories/59177 - https://www.netsparker.com/critical-xss
d3fc5eb142ff16d55d158afb050af18d5ff09120 - http://secunia.com/advisories/59177 - https://www.netsparker.com/critical-xss-vulnerabilities-in-ajenti - http://www.securityfocus.com/bid/68047
CVE ID: CVE-2014-4302 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-17T04:09:32.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127050/HAM3D-Shop-Engine-CMS-Cross-Site-Scripting.html
CVE ID: CVE-2014-4303 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T11:12:34.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68045 - https://drupal.org/node/2284415 - http://secunia.com/advisories/58828 - https://drupal.org/node/2269483
CVE ID: CVE-2014-4304 State: PUBLISHED Published: 2014-06-18T14:00:00 Last Updated: 2024-08-06T11:12:34.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68017 - https://www.netsparker.com/critical-xss-vulnerability-in-sql-buddy - http://secunia.com/advisories/59002
CVE ID: CVE-2014-4305 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-17T01:15:53.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126858/NICE-Recording-eXpress-6.x-Root-Backdoor-XSS-Bypass.html - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140528-0_NICE_Recording_eXpress_Multiple_critical_vulnerabilities_v10.txt
CVE ID: CVE-2014-4306 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-17T03:18:47.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) in the logfile parameter in a download action. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140606-0_WebTitan_Multiple_Vulnerabilities_v10.txt - http://packetstormsecurity.com/files/126984/WebTitan-4.01-Build-68-SQL-Injection-Command-Execution.html
CVE ID: CVE-2014-4307 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-16T21:04:37.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140606-0_WebTitan_Multiple_Vulnerabilities_v10.txt - http://packetstormsecurity.com/files/126984/WebTitan-4.01-Build-68-SQL-Injection-Command-Execution.html
CVE ID: CVE-2014-4308 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-17T02:11:04.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to (2) iframe.picker.statchannels.asp, (3) iframe.picker.channelgroups.asp, (4) iframe.picker.extensions.asp, (5) iframe.picker.licenseusergroups.asp, (6) iframe.picker.licenseusers.asp, (7) iframe.picker.lookup.asp, or (8) iframe.picker.marks.asp in _ifr/. Ad
roups.asp, (6) iframe.picker.licenseusers.asp, (7) iframe.picker.lookup.asp, or (8) iframe.picker.marks.asp in _ifr/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126858/NICE-Recording-eXpress-6.x-Root-Backdoor-XSS-Bypass.html - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140528-0_NICE_Recording_eXpress_Multiple_critical_vulnerabilities_v10.txt
CVE ID: CVE-2014-4309 State: PUBLISHED Published: 2014-06-18T14:00:00Z Last Updated: 2024-09-16T16:57:58.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html, or remote authenticated users to inject arbitrary web script or HTML via the (2) MaxInstances, (3) PassivePorts, (4) Port, (5) ServerName, (6) TimeoutLogin, (7) TimeoutNoTransfer, or (8) TimeoutStalled parameter to admin/services_ftp.html; the (9) dns1 or (10) dns2 parameter to admin/system.html; the (11) newTgtName parameter to admin/volumes_iscsi
ftp.html; the (9) dns1 or (10) dns2 parameter to admin/system.html; the (11) newTgtName parameter to admin/volumes_iscsi_targets.html; the User-Agent HTTP header to (12) language.html, (13) login.html, or (14) password.html in account/; or the User-Agent HTTP header to (15) account_groups.html, (16) account_users.html, (17) services.html, (18) services_ftp.html, (19) services_iscsi_target.html, (20) services_rsync.html, (21) system_clock.html, (22) system_info.html, (23) system_ups.html, (24) volumes_editpartitions.html, or (25) volumes_iscsi_targets.html in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127044/Openfiler-NAS-SAN-
nal Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127044/Openfiler-NAS-SAN-Appliance-2.99-XSS-Traversal-Command-Injection.html
CVE ID: CVE-2014-4310 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T11:12:34.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-6547, and CVE-2014-6477. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfoc
tainer: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.securityfocus.com/bid/70505
CVE ID: CVE-2014-4311 State: PUBLISHED Published: 2014-11-04T02:00:00 Last Updated: 2024-08-06T11:12:34.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Connection passwords by reading HTML source code of the database connection and email settings page. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34864 - http://seclists.org/fulldisclosure/2014/Oct/2 - http://packetstormsecurity.com/files/128511/Epicor-Password-Disclosure-Cross-Site-Scripting.html
CVE ID: CVE-2014-4312 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T11:12:34.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the (1) Notes section to Order details; (2) Description section to "Order to consume"; (3) Favorites name section to Favorites; (4) FiltKeyword parameter to Procurement/EKPHTML/search_item_bt.asp; (5) Act parameter to Procurement/EKPHTML/EnterpriseManager/Budget/ImportBudget_fr.asp; (6) hdnOpener or (7) hdnApproverFieldName parameter to Procurement/EKPHTML/
nterpriseManager/Budget/ImportBudget_fr.asp; (6) hdnOpener or (7) hdnApproverFieldName parameter to Procurement/EKPHTML/EnterpriseManager/UserSearchDlg.asp; or (8) INTEGRATED parameter to Procurement/EKPHTML/EnterpriseManager/Codes.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/112470 - http://www.securityfocus.com/bid/70192 - http://osvdb.org/show/osvdb/112471 - http://www.exploit-db.com/exploits/34864 - http://osvdb.org/show/osvdb/112469 - http://osvdb.org/show/osvdb/112467 - http://seclists.org/fulldisclosure/2014/Oct/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96793 - http://osvdb.org/show/osvdb/112464 - http://osvdb.org/sho
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96793 - http://osvdb.org/show/osvdb/112464 - http://osvdb.org/show/osvdb/112466 - http://osvdb.org/show/osvdb/112465 - http://packetstormsecurity.com/files/128511/Epicor-Password-Disclosure-Cross-Site-Scripting.html
CVE ID: CVE-2014-4313 State: PUBLISHED Published: 2014-10-10T14:00:00 Last Updated: 2024-08-06T11:12:34.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96842 - http://seclists.org/fulldisclosure/2014/Oct/21 - http://packetstormsecurity.com/files/128564/Epicor-Procurement-SQL-Injection.html
CVE ID: CVE-2014-4314 State: REJECTED Published: 2015-04-10T18:00:00 Last Updated: 2015-04-10T18:57:00 Description: No description available.
CVE ID: CVE-2014-4315 State: REJECTED Published: 2015-04-10T18:00:00 Last Updated: 2015-04-10T18:57:00 Description: No description available.
CVE ID: CVE-2014-4322 State: PUBLISHED Published: 2014-12-24T15:00:00 Last Updated: 2024-08-06T11:12:34.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/memory-corruption-qseecom-driver-cve-20
Container: References: - https://www.codeaurora.org/projects/security-advisories/memory-corruption-qseecom-driver-cve-2014-4322
CVE ID: CVE-2014-4323 State: PUBLISHED Published: 2014-12-12T11:00:00 Last Updated: 2024-08-06T11:12:34.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/improper-input-validation-mdp-driver-when-processing-colo
ces: - https://www.codeaurora.org/projects/security-advisories/improper-input-validation-mdp-driver-when-processing-color-maps
CVE ID: CVE-2014-4325 State: PUBLISHED Published: 2014-08-25T01:00:00 Last Updated: 2024-08-06T11:12:34.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/fastboot-boot-command-bypasses-signature-verification-cve-2014-4
https://www.codeaurora.org/projects/security-advisories/fastboot-boot-command-bypasses-signature-verification-cve-2014-4325
CVE ID: CVE-2014-4326 State: PUBLISHED Published: 2014-07-22T14:00:00 Last Updated: 2024-08-06T11:12:34.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/. Additional Analyst Notes: - CVE Program Container: References: - http://www.elasticsearch.org/blog/logstash-1-4-2/ - http://www.securityfocus.com/archive/1/532841/100/0/threaded - https://www.elastic.co/community/security/
CVE ID: CVE-2014-4329 State: PUBLISHED Published: 2014-06-19T10:00:00 Last Updated: 2024-08-06T11:12:34.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitrary web script or HTML via the host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://svn.ntop.org/bugzilla/show_bug.cgi?id=379 - http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ - http://packetstormsecurity.com/files/127329/Ntop-NG-1.1-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/92135 - http://www.securityfocus.com/bid/66456
CVE ID: CVE-2014-4330 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T11:12:34.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128422/Perl-5.20.1-Deep-Recursion-Stack-Overflow.html - http://www.securityfocus.com/archive/1/533543/100/0/threaded - h
128422/Perl-5.20.1-Deep-Recursion-Stack-Overflow.html - http://www.securityfocus.com/archive/1/533543/100/0/threaded - http://secunia.com/advisories/61441 - http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139441.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:136 - https://metacpan.org/pod/distribution/Data-Dumper/Changes - https://www.lsexperts.de/advisories/lse-2014-06-10.txt - http://www.securityfocus.com/bid/70142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96216 - http://www.nntp.perl.org/group/perl.perl5.porters/2014/09/msg220118.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http:
014/09/msg220118.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.ubuntu.com/usn/USN-2916-1 - http://seclists.org/fulldisclosure/2014/Sep/84 - http://advisories.mageia.org/MGASA-2014-0406.html - http://secunia.com/advisories/61961 - http://seclists.org/oss-sec/2014/q3/692
CVE ID: CVE-2014-4331 State: PUBLISHED Published: 2014-07-19T20:00:00 Last Updated: 2024-08-06T11:12:35.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68469 - http://www.securityfocus.com/archive/1/532701/100/0/threaded - http://packetstormsecurity.com/files/127404/OctavoCMS-Cross-Site-Scripting.html - http://www.attrition.org/pipermail/vim/2014-July/002773.html
CVE ID: CVE-2014-4333 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T11:12:35.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532468/100/0/threaded - https://www.htbridge.com/advisory/HTB23216 - http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolp
tps://www.htbridge.com/advisory/HTB23216 - http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolphin-7-1.htm
CVE ID: CVE-2014-4334 State: PUBLISHED Published: 2014-06-19T14:00:00Z Last Updated: 2024-09-16T19:05:11.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string in the "second connection" to TCP port 1001. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5187.php - http://www.securityfocus.com/bid/68080 - http://www.exploit-db.com/exploits/33804 - http://packetstormsecurity.com/files/127133/Ubisoft-Rayman-Legends-1.2.103716-Buffer-Overflow.html
CVE ID: CVE-2014-4335 State: PUBLISHED Published: 2014-06-19T14:00:00Z Last Updated: 2024-09-16T17:32:44.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) host or (2) password parameter to rtl/protected/admin/ddns/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127128/BarracudaDrive-6.7.2-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/68079