Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6001 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gewara (aka com.gewara) application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/476897 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6002 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/450057 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6003 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/728929 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6004 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/913553 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6005 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/131673 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6006 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/993633 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6007 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/816137 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6008 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/386697
CVE ID: CVE-2014-6009 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/510073
CVE ID: CVE-2014-6010 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/958169 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6011 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cutprice (aka kr.co.wedoit.cutprice) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/507961
CVE ID: CVE-2014-6012 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gravity Bounce (aka net.toddm.gb) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/150505
CVE ID: CVE-2014-6013 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nuSquare (aka tw.com.nuphoto.nusquare) application 1.0.78 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/308377 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6014 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Conquest Of Fantasia (aka air.com.ingen.studios.cof.sg) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/821065
CVE ID: CVE-2014-6015 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TuCarro (aka com.tucarro) application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/528817 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6016 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/513769 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6017 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Doodle Drop (aka net.lazyer.DoodleDrop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/896305 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6018 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The global beauty research (aka com.appems.topgirl) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/725937 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6019 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The psychology (aka com.alek.psychology) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/342345 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6020 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fuel Rewards Network (aka com.excentus.frn) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/202601
CVE ID: CVE-2014-6021 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Harley-Davidson Visa (aka com.usbank.icsmobile.harleydavidson) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/239385 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6022 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Versent Books (aka com.versentbooks) application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/115657 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6023 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:03:02.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The s-peek credit rating report (aka com.rhomobile.speek) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/352641 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6024 State: PUBLISHED Published: 2014-09-09T01:00:00 Last Updated: 2024-08-06T12:03:02.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.fireeye.com/blog/technical/2014/08/ssl-vulnerabilities-who-listens-when-android-applications-talk.html - http://www.kb.cert.org/vuls/id/208585 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALV
rt.org/vuls/id/208585 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6025 State: PUBLISHED Published: 2014-09-09T10:00:00 Last Updated: 2024-08-06T12:03:02.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chartboost library before 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.fireeye.com/blog/technical/2014/08/ssl-vulnerabilities-who-listens-when-android-applications-talk.html - http://www.kb.cert.org/vuls/id/775305 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82Syu
b.cert.org/vuls/id/775305 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6027 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T12:03:02.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers to inject arbitrary web script or HTML by leveraging failure to encode file contents when downloading a torrent file or (2) remote authenticated users to inject arbitrary web script or HTML via vectors involving a link to torrent details. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759574 - http://www.securitytracker.com/id/1030791 - http://www.openwall.com/lis
gs.debian.org/cgi-bin/bugreport.cgi?bug=759574 - http://www.securitytracker.com/id/1030791 - http://www.openwall.com/lists/oss-security/2014/09/02/3
CVE ID: CVE-2014-6028 State: PUBLISHED Published: 2014-09-05T14:00:00 Last Updated: 2024-08-06T12:03:02.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759573 - http://www.openwall.com/lists/oss-security/2014/08/29/5 - http://www.securitytracker.com/id/1030791 - http://www.openwall.com/lists/oss-security/2014/09/02/3
CVE ID: CVE-2014-6029 State: PUBLISHED Published: 2014-09-05T14:00:00 Last Updated: 2024-08-06T12:03:02.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759573 - http://www.openwall.com/lists/oss-security/2014/08/29/5 - http://www.securitytracker.com/id/1030791 - http://www.openwall.com/lists/oss-security/2014/09/02/3
CVE ID: CVE-2014-6030 State: PUBLISHED Published: 2014-11-06T18:00:00 Last Updated: 2024-08-06T12:03:02.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) remote authenticated users to execute arbitrary SQL commands via the SurveyID parameter to survey/UploadImagePopupToDb.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Sep/62 - http://packetstormsecurity.com/files/128296/ClassApps-SelectSurvey.net-4.124
//seclists.org/fulldisclosure/2014/Sep/62 - http://packetstormsecurity.com/files/128296/ClassApps-SelectSurvey.net-4.124.004-SQL-Injection.html
CVE ID: CVE-2014-6031 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-06T12:03:02.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K16196
CVE ID: CVE-2014-6032 State: PUBLISHED Published: 2014-11-01T23:00:00 Last Updated: 2024-08-06T12:03:02.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through 11.6.0, ARM 11.3.0 through 11.6.0, Analytics 11.0.0 through 11.6.0, APM and Edge Gateway 11.0.0 through 11.6.0 and 10.1.0 through 10.2.4, PEM 11.3.0 through 11.6.0, PSM 11.0.0 through 11.4.1 and 10.0.0 through 10.2.4, and WOM 11.0.0 through 11.3.0 and 10.0.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3
and WOM 11.0.0 through 11.3.0 and 10.0.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allow remote authenticated users to read arbitrary files and cause a denial of service via a crafted request, as demonstrated using (1) viewList or (2) deal elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031145 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6032/ - http://www.securitytracker.com/id/1031144 - http://seclists.org/fulldisclosure/2014/Oct/128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98403 - https://exchange.xforce.ibmcloud.com/vuln
re/2014/Oct/128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98402 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15605.html - http://seclists.org/fulldisclosure/2014/Oct/129 - http://seclists.org/fulldisclosure/2014/Oct/130 - http://www.securityfocus.com/bid/70834 - http://packetstormsecurity.com/files/128915/F5-Big-IP-11.3.0.39.0-XML-External-Entity-Injection-1.html - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6033/
CVE ID: CVE-2014-6033 State: REJECTED Published: N/A Last Updated: 2022-10-06T00:00:00 Description: No description available.
CVE ID: CVE-2014-6034 State: PUBLISHED Published: 2014-12-04T17:00:00 Last Updated: 2024-08-06T12:03:02.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files via a .. (dot dot) in the regionID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix - https://raw.githu
rences: - https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt - http://seclists.org/fulldisclosure/2014/Sep/110
CVE ID: CVE-2014-6035 State: PUBLISHED Published: 2014-12-04T17:00:00 Last Updated: 2024-08-06T12:03:02.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier allows remote attackers to write and execute arbitrary files via a .. (dot dot) in the FILENAME parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt - http://seclists.org/fulldisclosure/2014/Sep/110