Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7254 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000139.html - http://jvn.jp/en/jp/JVN61593104/index.html - http://jvn.jp/en/jp/JVN61593104/995312/index.html
CVE ID: CVE-2014-7255 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service (CPU and traffic consumption) via a large number of NTP requests within a short time, which causes unnecessary NTP responses to be sent. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000135.html - http://www.seil.jp/support/security/a01510.html
rences: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000135.html - http://www.seil.jp/support/security/a01510.html - http://jvn.jp/en/jp/JVN21907573/index.html
CVE ID: CVE-2014-7256 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and SEIL/B1 1.00 through 4.62; SEIL/Turbo 1.82 through 2.18; and SEIL/neu 2FE Plus 1.82 through 2.18 allow remote attackers to cause a denial of service (restart) via crafted (a) GRE or (b) MPPE packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.seil.jp/support/security/a01511.html - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2
Container: References: - http://www.seil.jp/support/security/a01511.html - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000136.html - http://jvn.jp/en/jp/JVN04895240/index.html
CVE ID: CVE-2014-7257 State: PUBLISHED Published: 2019-12-11T18:36:41 Last Updated: 2024-08-06T12:40:19.262Z Vendors: DBD::PgPP Products: DBD::PgPP Problem Types: SQL Injection Description: SQL injection vulnerability in DBD::PgPP 0.05 and earlier Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70490316/index.html - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000142.html
CVE ID: CVE-2014-7258 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN12798709/index.html - http://www.kent-web.com/bbs/clipbbs.html - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000147.html
CVE ID: CVE-2014-7259 State: PUBLISHED Published: 2014-12-05T17:00:00 Last Updated: 2024-08-06T12:40:19.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQUARE ENIX Co., Ltd. Kaku-San-Sei Million Arthur before 2.25 for Android stores "product credentials" on the SD card, which allows attackers to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000148.html - http://jvn.jp/en/jp/JVN24909891/index.html
CVE ID: CVE-2014-7260 State: PUBLISHED Published: 2014-12-12T00:00:00 Last Updated: 2024-08-06T12:40:19.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000143 - http://jvn.jp/en/jp/JVN16406395/360573/index.html - http://jvn.jp/en/jp/JVN16406395/index.html
CVE ID: CVE-2014-7261 State: PUBLISHED Published: 2014-12-12T00:00:00 Last Updated: 2024-08-06T12:40:19.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string that is improperly rendered during construction of a directory index page, a different vulnerability than CVE-2014-7263. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000144 - http://jvn.jp/en/jp/JVN89613370/index.html - http://jvn.jp/en/jp/JVN89613370/360573/index.html
CVE ID: CVE-2014-7262 State: PUBLISHED Published: 2014-12-12T00:00:00 Last Updated: 2024-08-06T12:47:31.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN98097877/360573/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000145 - http://jvn.jp/en/jp/JVN98097877/index.html
CVE ID: CVE-2014-7263 State: PUBLISHED Published: 2014-12-12T00:00:00 Last Updated: 2024-08-06T12:47:31.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability than CVE-2014-7261. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN87910097/360573/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000146 - http://jvn.jp/en/jp/JVN87910097/index.html
CVE ID: CVE-2014-7264 State: PUBLISHED Published: 2014-12-11T23:00:00 Last Updated: 2024-08-06T12:47:32.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000149 - http://chyrp.net/2014/11/18/chyrp-251-security-release/ - http://jvn.jp/en/jp/JVN13160869/index.htm
/JVNDB-2014-000149 - http://chyrp.net/2014/11/18/chyrp-251-security-release/ - http://jvn.jp/en/jp/JVN13160869/index.html - https://github.com/chyrp/chyrp/commit/43d1b6b266363ae7545d5d49851034eaeec7bebb
CVE ID: CVE-2014-7265 State: PUBLISHED Published: 2014-12-12T11:00:00 Last Updated: 2024-08-06T12:47:31.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000150 - http://jvn.jp/en/jp/JVN61181790/index.html
CVE ID: CVE-2014-7266 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T12:47:32.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1983. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2015/001245.html - http://jvn.jp/en/jp/JVN13566542/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000001
CVE ID: CVE-2014-7267 State: PUBLISHED Published: 2014-12-19T11:00:00 Last Updated: 2024-08-06T12:47:32.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09289074/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000151 - https://www.ricksoft.jp/document/pages/viewpage.action?pageId=172425369
CVE ID: CVE-2014-7268 State: PUBLISHED Published: 2014-12-19T11:00:00 Last Updated: 2024-08-06T12:47:31.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000152 - http://jvn.jp/en/jp/JVN76515134/index.html - https://www.ricksoft.jp/document/pages/viewpage.action?pageId=172425369
CVE ID: CVE-2014-7269 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T12:47:31.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN77792759/index.html - http://jvndb.j
tional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN77792759/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000011 - http://www.asus.com/jp/News/PNzPd7vkXtrKWXHR
CVE ID: CVE-2014-7270 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T12:47:32.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN326
tication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN32631078/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000012 - http://www.asus.com/jp/News/PNzPd7vkXtrKWXHR
CVE ID: CVE-2014-7271 State: PUBLISHED Published: 2018-03-08T20:00:00 Last Updated: 2024-08-06T12:47:32.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98421 - https://bugzilla.redhat.com/show_bug.cgi?id=1149608 - https://github.com/sddm/sddm/pull/279/files - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html - http://lists.fedoraproject.org/pipermail/package-announce/20
t.org/pipermail/package-announce/2014-October/141550.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html - https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement - http://www.openwall.com/lists/oss-security/2014/10/06/4
CVE ID: CVE-2014-7272 State: PUBLISHED Published: 2018-03-08T20:00:00 Last Updated: 2024-08-06T12:47:32.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sddm/sddm/pull/280 - https://bugzilla.redhat.com/show_bug.cgi?id=1149610 - http://lists.fedoraproject.org/pip
github.com/sddm/sddm/pull/280 - https://bugzilla.redhat.com/show_bug.cgi?id=1149610 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html - http://www.openwall.com/lists/oss-security/2014/10/06/4
CVE ID: CVE-2014-7273 State: PUBLISHED Published: 2014-10-08T01:00:00 Last Updated: 2024-08-06T12:47:31.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html - http://openwall.com/lists/oss-security/2014/10/07/33 - http://www.debian.org/security/2014/dsa-3091 - http://secunia.com/advisories/61229 - http://pyropus.ca/s
2014/10/07/33 - http://www.debian.org/security/2014/dsa-3091 - http://secunia.com/advisories/61229 - http://pyropus.ca/software/getmail/CHANGELOG
CVE ID: CVE-2014-7274 State: PUBLISHED Published: 2014-10-08T01:00:00 Last Updated: 2024-08-06T12:47:31.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate from a recognized Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html - http://openwall.com/lists/oss-security/2014/10/07/33 -
tp://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html - http://openwall.com/lists/oss-security/2014/10/07/33 - http://www.debian.org/security/2014/dsa-3091 - http://secunia.com/advisories/61229 - http://pyropus.ca/software/getmail/CHANGELOG
CVE ID: CVE-2014-7275 State: PUBLISHED Published: 2014-10-08T01:00:00 Last Updated: 2024-08-06T12:47:32.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof POP3 servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html - http://openwall.com/lists/oss-security/2014/10/07/33 - http://www.debian.org/security/2014/dsa-3091 - http://secunia.com/advisories/61229 - http://pyropus.ca/s
CVE ID: CVE-2014-7277 State: PUBLISHED Published: 2014-10-04T10:00:00 Last Updated: 2024-08-06T12:47:31.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified "welcome message" form data that is improperly handled during rendering of the loginMessage list item, a different vulnerability than CVE-2014-7278. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-10/0024.html - http://seclists.org/fulldisclosur
iner: References: - http://archives.neohapsis.com/archives/bugtraq/2014-10/0024.html - http://seclists.org/fulldisclosure/2014/Oct/19 - http://www.securityfocus.com/bid/70232 - http://packetstormsecurity.com/files/128551/ZyXEL-SBG-3300-Security-Gateway-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96891
CVE ID: CVE-2014-7278 State: PUBLISHED Published: 2014-10-04T10:00:00 Last Updated: 2024-08-06T12:47:31.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginMsg variable's value, a different vulnerability than CVE-2014-7277. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128550/ZyXEL-SBG-3300-Security-Gateway-Denial-Of-Service.html
ainer: References: - http://packetstormsecurity.com/files/128550/ZyXEL-SBG-3300-Security-Gateway-Denial-Of-Service.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0025.html - http://seclists.org/fulldisclosure/2014/Oct/20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96892
CVE ID: CVE-2014-7279 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T12:47:32.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35103
CVE ID: CVE-2014-7280 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T12:47:32.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/112728 - http://www.exploit-db.com/exploits/34929 - http://www.tenable.com/security/tns-2014-08 - http://seclists.org/fulldisclosure/2014/Oct/26 - http://packetstormsecurity.com/files/128579/Nessus-Web-UI-2.3.3-Cross-Site-Scripting.html - http://www.securityfoc
/26 - http://packetstormsecurity.com/files/128579/Nessus-Web-UI-2.3.3-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/70274 - http://www.thesecurityfactory.be/permalink/nessus-stored-xss.html
CVE ID: CVE-2014-7281 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T12:47:32.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to goform/SysToolReboot. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128671/Tenda-A32-Cross-Site-Request-Forgery.html - http://www.exploit-db.com/exploits/34969 - http://osvdb.org/show/osvdb/113308
CVE ID: CVE-2014-7283 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T12:47:31.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70261 - https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f2
ces: - http://www.securityfocus.com/bid/70261 - https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d - http://marc.info/?l=linux-xfs&m=139590613002926&w=2 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2 - http://www.openwall.com/lists/oss-security/2014/10/01/29 - http://rhn.redhat.com/errata/RHSA-2014-1943.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c88547a8119e3b581318ab65e9b72f27f23e641d - https://bugzilla.redhat.com/show_bug.cgi?id=1148777
CVE ID: CVE-2014-7284 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T12:47:32.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1148788 - http://www.ker
alyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1148788 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5 - http://www.openwall.com/lists/oss-security/2014/10/01/19 - https://web.archive.org/web/20141002163852/http://secondlookforensics.com/ngro-linux-kernel-bug/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d4405226d27b3a215e4d03cfa51f536244e5de7 - https://github.com/torvalds/linux/commit/3d4405226d27b3a215e4d03cfa51f536244e5de7
CVE ID: CVE-2014-7285 State: PUBLISHED Published: 2014-12-17T16:00:00 Last Updated: 2024-08-06T12:47:32.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/36263 - http://www.securityfocus.com/bid/71620 - http://www.securitytracker.com/id/1031386 - http://packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html - http://www.symantec.com/secur
stormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141216_00 - http://osvdb.org/show/osvdb/116009 - http://karmainsecurity.com/KIS-2014-19
CVE ID: CVE-2014-7286 State: PUBLISHED Published: 2014-12-22T15:00:00 Last Updated: 2024-08-06T12:47:32.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031421 - http://www.securityfocus.com/bid/71727 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141219_00