Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3099 State: PUBLISHED Published: 2014-12-06T15:00:00 Last Updated: 2024-08-06T10:35:55.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Security component in IBM Systems Director 6.3.0 through 6.3.5 allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?rs=0&uid=nas76c9e0fe437973f6c86257d48003b00b9 - http://www.securityfocus.com/bid/71426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94267 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096586 - http://www-01.ibm.com/support/doc
ties/94267 - http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096586 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT04508
CVE ID: CVE-2014-3100 State: PUBLISHED Published: 2014-07-02T01:00:00 Last Updated: 2024-08-06T10:35:56.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127185/Android-KeyStore-Stack-Buffer-Overflow.html - http://www.securityfocus.com/archive/1/532527/100/0/threaded - http://www.securityf
eyStore-Stack-Buffer-Overflow.html - http://www.securityfocus.com/archive/1/532527/100/0/threaded - http://www.securityfocus.com/bid/68152 - http://www.slideshare.net/ibmsecurity/android-keystorestackbufferoverflow - http://securityintelligence.com/android-keystore-stack-buffer-overflow-to-keep-things-simple-buffers-are-always-larger-than-needed/
CVE ID: CVE-2014-3101 State: PUBLISHED Published: 2014-09-23T20:00:00 Last Updated: 2024-08-06T10:35:56.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94268 - http://www-01.ibm.com/support/docview.wss?uid=swg21682946 - http://www.securitytracker.com/id/1030884
CVE ID: CVE-2014-3102 State: PUBLISHED Published: 2014-08-12T01:00:00 Last Updated: 2024-08-06T10:35:56.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680230 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16174 - http://www.securitytracker.com/id/1030669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94269
CVE ID: CVE-2014-3103 State: PUBLISHED Published: 2014-09-23T21:00:00 Last Updated: 2024-08-06T10:35:56.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94270
CVE ID: CVE-2014-3104 State: PUBLISHED Published: 2014-09-23T21:00:00 Last Updated: 2024-08-06T10:35:55.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94311
CVE ID: CVE-2014-3105 State: PUBLISHED Published: 2014-09-23T21:00:00 Last Updated: 2024-08-06T10:35:56.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94312
CVE ID: CVE-2014-3106 State: PUBLISHED Published: 2014-09-23T21:00:00 Last Updated: 2024-08-06T10:35:56.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21682950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94313
CVE ID: CVE-2014-3110 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T10:35:56.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01 - https://www.exploit-db.com/exploits/44749/ - http://www.securityfocus.com/bid/68838
CVE ID: CVE-2014-3111 State: PUBLISHED Published: 2014-10-21T16:00:00 Last Updated: 2024-08-06T10:35:56.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Printer Model field to the Printer Management page, (2) Image Name field to the Image Management page, (3) Storage Group Name field to the Storage Management page, (4) Username field to the User Cleanup FOG Configuration page, or (5) Directory Path field to the Directory Cleaner FOG Configuration page. Additional Analyst Notes: - CVE Program Container: References: - ht
eld to the Directory Cleaner FOG Configuration page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532091/100/0/threaded - http://seclists.org/fulldisclosure/2014/May/60 - http://www.securityfocus.com/bid/67141 - http://fogproject.org/forum/threads/stored-xss-vulnerability-in-fog-project-version-0-27-through-0-32.10394 - http://www.openwall.com/lists/oss-security/2014/04/30/2
CVE ID: CVE-2014-3113 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T10:35:56.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/RealNetworks-RealPlayer-Memory-Corruption/ - http://www.securitytracker.com/id/1030524 - http://service.real.com/realplayer/security/06272014_player/en/ - http://secunia.com/advisories/59238
CVE ID: CVE-2014-3114 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T10:35:56.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/01/11
CVE ID: CVE-2014-3115 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T10:35:56.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-013/ - http://www.kb.cert.org/vuls/id/902790 - http://seclists.org/fulldisclosure/2014/May/30 - http://www.securitytracker.com/id/1030200
CVE ID: CVE-2014-3119 State: PUBLISHED Published: 2020-01-31T20:49:59 Last Updated: 2024-08-06T10:35:56.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search_string parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to (2) do_updatecontact.php or (3) updatecontact.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23213 - https://github.com/web2project/web2project/commit/ab5ba92a6aaf0435cd0b2
: - https://www.htbridge.com/advisory/HTB23213 - https://github.com/web2project/web2project/commit/ab5ba92a6aaf0435cd0b2132cf7f9b7b41575a28 - https://github.com/web2project/web2project/commit/eead99b36f62a8222d9f3a913f1a2268200687ef
CVE ID: CVE-2014-3120 State: PUBLISHED Published: 2014-07-28T19:00:00.000Z Last Updated: 2025-10-22T00:05:37.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/blog/logstash-1-4-3-released - http://www.exploit-db.com/exploits/33370
nrichment: References: - https://www.elastic.co/blog/logstash-1-4-3-released - http://www.exploit-db.com/exploits/33370 - http://www.securityfocus.com/bid/67731 - http://www.osvdb.org/106949 - http://bouk.co/blog/elasticsearch-rce/ - http://www.rapid7.com/db/modules/exploit/multi/elasticsearch/script_mvel_rce - https://www.found.no/foundation/elasticsearch-security/#staying-safe-while-developing-with-elasticsearch - https://www.elastic.co/community/security/
CVE ID: CVE-2014-3121 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T10:35:56.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/pipermail/package-announce/2014-May/133166.html - http://dist.schmorp.de/rxvt-unicode/Changes - http://www.debian.org/security/2014/dsa-2925 - http://www.securityfocus.com/bid/67155 - http://lists.opensuse.org/opensuse-security-announce/2014-0
ity/2014/dsa-2925 - http://www.securityfocus.com/bid/67155 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00026.html - http://seclists.org/oss-sec/2014/q2/204 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00038.html - https://lists.fedoraproject.org/pipermail/package-announce/2014-May/133195.html
CVE ID: CVE-2014-3122 State: PUBLISHED Published: 2014-05-11T21:00:00 Last Updated: 2024-08-06T10:35:56.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67162 - http://www.openwall.com/lists/oss-security/2014/05/01/7 - https://github.com/torvalds/linux/commit/57e68e9cd65b4b8eb4045a1e0d0746458502554
l.com/lists/oss-security/2014/05/01/7 - https://github.com/torvalds/linux/commit/57e68e9cd65b4b8eb4045a1e0d0746458502554c - http://www.ubuntu.com/usn/USN-2240-1 - http://secunia.com/advisories/59386 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57e68e9cd65b4b8eb4045a1e0d0746458502554c - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.3 - http://secunia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - https://bugzilla.redhat.com/show_bug.cgi?id=1093076
CVE ID: CVE-2014-3123 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T10:35:56.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or HTML via the "Alt & Title Text" field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58031 - https://wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/changelog - http://www.sec
cunia.com/advisories/58031 - https://wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/changelog - http://www.securityfocus.com/bid/67085 - http://www.vapid.dhs.org/advisories/wordpress/plugins/nextCellent-gallery-1.9.13
CVE ID: CVE-2014-3124 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T10:35:56.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://www.openwall.com/lists/oss-security/2014/04/29/1 - http://xenbits.xen.org/xsa/adv
nnounce/2014-10/msg00003.html - http://www.openwall.com/lists/oss-security/2014/04/29/1 - http://xenbits.xen.org/xsa/advisory-92.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133148.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133191.html - http://www.securityfocus.com/bid/67113 - http://www.openwall.com/lists/oss-security/2014/04/30/10 - http://www.debian.org/security/2014/dsa-3006 - http://www.securitytracker.com/id/1030160
CVE ID: CVE-2014-3125 State: PUBLISHED Published: 2014-05-02T14:00:00 Last Updated: 2024-08-06T10:35:56.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67157 - http://xenbits.xen.org/xsa/advisory-91.html - http://www.openwall.com/lists/oss-security/2014/04/30/5 - http://www.securitytracker.com/id/1030184 - http://www.openwall.com/lists/oss-security/2014/04/30
ecurity/2014/04/30/5 - http://www.securitytracker.com/id/1030184 - http://www.openwall.com/lists/oss-security/2014/04/30/11 - http://secunia.com/advisories/58347
CVE ID: CVE-2014-3127 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T10:35:57.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of the intended directories via a crafted source package. NOTE: this can be considered a release engineering problem in the effort to fix CVE-2014-0471. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.o
the effort to fix CVE-2014-0471. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746306 - http://metadata.ftp-master.debian.org/changelogs//main/d/dpkg/dpkg_1.15.10_changelog - http://seclists.org/oss-sec/2014/q2/191 - http://seclists.org/oss-sec/2014/q2/227 - http://www.securityfocus.com/bid/67181
CVE ID: CVE-2014-3129 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-005 - http://www.securityfocus.com/bid/67147 - http://www.securitytracker.com/id/1030157 - http://seclists.org/fulldisclosure/2014/Apr/294 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/supp
- http://seclists.org/fulldisclosure/2014/Apr/294 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1894049
CVE ID: CVE-2014-3130 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67108 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-009 - https://service.sap.com/sap/support/notes/1910914 - http://seclists.org/fulldisclosure/2014/Apr/302 - http:
s-2014-009 - https://service.sap.com/sap/support/notes/1910914 - http://seclists.org/fulldisclosure/2014/Apr/302 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-3131 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1917381 - http://seclists.org/fulldisclosure/2014/Apr/300 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007 - http://www.securityfocus.com/bid/67103 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-3132 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/299 - http://www.securityfocus.com/bid/67107 - https://service.sap.com/sap/support/notes/1918333 - http://scn.sap.com/docs/DOC-8218 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006
CVE ID: CVE-2014-3133 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/301 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008 - http://www.securityfocus.com/bid/67104 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1922547
CVE ID: CVE-2014-3134 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1931399 - http://seclists.org/fulldisclosure/2014/Apr/303 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-010 - http://www.securityfocus.com/bid/67110 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-3135 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T10:35:56.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to privatemessage/new/, (2) the folderid parameter to a private message in privatemessage/view, (3) a fragment indicator to /help, or (4) the view parameter to a topic, as demonstrated by a request to forum/anunturi-importante/rst-power/67030-rst-admin-restore. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/12622
min-restore. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126226/vBulletin-5.1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/66972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92664
CVE ID: CVE-2014-3136 State: PUBLISHED Published: 2019-12-27T20:14:21 Last Updated: 2024-08-06T10:35:56.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/68967 - https://packetstormsecurity.com/files/cve/CVE-2014-3136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95022