Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
14/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.postgresql.org/support/security/ - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://www.securityfocus.com/bid/65719 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - http://secunia.com/advisories/61307
CVE ID: CVE-2014-0064 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - h
r. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - https://github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.postgresql.org/support/security/ - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://w
3236626.html - http://www.postgresql.org/support/security/ - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://www.securityfocus.com/bid/65725 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1065230 - http://secunia.com/advisories/61307
CVE ID: CVE-2014-0065 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, a different vulnerability than CVE-2014-0063. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://arch
HSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.securityfocus.com/bid/65731 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.jun
www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html
CVE ID: CVE-2014-0066 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/k
hn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-
rt.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html
CVE ID: CVE-2014-0067 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.postgresql.org/about/news/1506/ - http://lists.apple.com/archives/se
/www.debian.org/security/2014/dsa-2864 - http://www.postgresql.org/about/news/1506/ - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://www.securityfocus.com/bid/65721 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - https://support.apple.com/HT205219
CVE ID: CVE-2014-0068 State: PUBLISHED Published: 2022-06-30T20:34:16 Last Updated: 2024-08-06T09:05:38.301Z Vendors: n/a Products: openshift node-util Problem Types: CWE-732 Description: It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1064100
CVE ID: CVE-2014-0069 State: PUBLISHED Published: 2014-02-28T02:00:00 Last Updated: 2024-08-06T09:05:38.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.linux.kernel.cifs/9401 - http://
al Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.linux.kernel.cifs/9401 - http://www.securityfocus.com/bid/65588 - https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483f - http://rhn.redhat.com/errata/RHSA-2014-0328.html - https://bugzilla.redhat.com/show_bug.cgi?id=1064253 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483f - http://www.openwall.com/lists/oss-security/2014/02/17/4 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html
CVE ID: CVE-2014-0070 State: REJECTED Published: 2014-02-27T01:00:00 Last Updated: 2014-02-27T00:57:00 Description: No description available.
CVE ID: CVE-2014-0071 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:05:37.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66001 - http://rhn.redhat.com/errata/RHSA-2014-0233.html - https://bugzilla.redhat.com/show_bug.cgi?id=1064163
CVE ID: CVE-2014-0072 State: PUBLISHED Published: 2017-10-30T19:00:00 Last Updated: 2024-08-06T09:05:38.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through 2.9.0 might allow remote attackers to spoof SSL servers by leveraging a default value of true for the trustAllHosts option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531335/100/0/threaded - https://github.com/apache/cordova-plugin-file-transfer/commit/a1d6fc07e8a40c1b2b16f4
m/archive/1/531335/100/0/threaded - https://github.com/apache/cordova-plugin-file-transfer/commit/a1d6fc07e8a40c1b2b16f4103c403b30e1089668 - http://seclists.org/fulldisclosure/2014/Mar/29 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91561 - http://d3adend.org/blog/?p=403 - https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXKL9JtkehHC0jEoRwdvVKXt-d5uj40EwNY-Gk3ttX=wJw%40mail.gmail.com%3E
CVE ID: CVE-2014-0073 State: PUBLISHED Published: 2017-10-30T19:00:00 Last Updated: 2024-08-06T09:05:37.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531334/100/0/threaded - http://w
st Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531334/100/0/threaded - http://www.securityfocus.com/bid/65959 - http://d3adend.org/blog/?p=403 - https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw%40mail.gmail.com%3E - https://github.com/apache/cordova-plugin-inappbrowser/commit/26702cb0720c5c394b407c23570136c53171fa55 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91560 - http://seclists.org/fulldisclosure/2014/Mar/30
CVE ID: CVE-2014-0074 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T09:05:38.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Mar/22 - https://issues.apache.org/jira/browse/SHIRO-460 - http://rhn.redhat.com/errata/RHSA-2014-1351.html
CVE ID: CVE-2014-0075 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T09:05:38.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1578337 - http://advisories.mageia.org/MGASA-2014-0268.
eferences: - http://svn.apache.org/viewvc?view=revision&revision=1578337 - http://advisories.mageia.org/MGASA-2014-0268.html - http://www.novell.com/support/kb/doc.php?id=7010166 - http://secunia.com/advisories/59121 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://secunia.com/advisories/59732 - http://secunia.com/advisories/59835 - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://secunia.com/advisories/59849 - http://linux.oracle.com/
:052 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://secunia.com/advisories/59849 - http://linux.oracle.com/errata/ELSA-2014-0865.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-3530 - http://secunia.com/advisories/59678 - http://svn.apache.org/viewvc?view=revision&revision=1578341 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://svn.apache.org/viewvc?view=revision&revision=1579262 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://www.oracle.com/technetwork/security-advisory/
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html - http://www.securityfocus.com/bid/67671 - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://secunia.com/advisories/59616 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://secunia.com/advis
=emr_na-c04851013 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://secunia.com/advisories/59873 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.debian.org/security/2016/dsa-3447 - http://secunia.com/advisories/60729 - http://secunia.com/advisories/60793 - http://www-01.ibm.com/support/docview.wss?uid=swg21680603 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thr
ml/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev
.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0076 State: PUBLISHED Published: 2014-03-25T01:00:00 Last Updated: 2024-08-06T09:05:37.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7015300 - http://secunia.com/advisories/59264 - http://secunia.com/advisories/59454 - http://www.securityfocus.com/bid/66363 - http://secunia.com/advisories/58492 - http://www.n
cunia.com/advisories/59454 - http://www.securityfocus.com/bid/66363 - http://secunia.com/advisories/58492 - http://www.novell.com/support/kb/doc.php?id=7015264 - https://bugs.gentoo.org/show_bug.cgi?id=505278 - http://secunia.com/advisories/59445 - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21676655 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2198be3483259de374f91e57d247d0fc667aef29 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - http://marc.info/?l=bugt
43 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - http://marc.info/?l=bugtraq&m=140317760000786&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21677828 - http://marc.info/?l=bugtraq&m=140621259019789&w=2 - http://secunia.com/advisories/59300 - http://advisories.mageia.org/MGASA-2014-0165.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677695 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html - http://secunia.com/advisories/59495 - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/topics/securi
://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/59655 - http://secunia.com/advisories/59374 - http://www-01.ibm.com/support/docview.wss?uid=swg21676501 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://marc.info/?l=bugtraq&m=140389274407904&w=2 - http://secunia.com/advisories/58939 - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://secunia.com/advisories/59514 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl - https://kc.mcafee.com/corporate/index?page=content&id=SB1007
r/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl - https://kc.mcafee.com/corporate/index?page=content&id=SB10075 - http://www-01.ibm.com/support/docview.wss?uid=swg21676419 - http://secunia.com/advisories/59438 - http://marc.info/?l=bugtraq&m=140482916501310&w=2 - http://secunia.com/advisories/58727 - http://www.openssl.org/news/secadv_20140605.txt - http://support.apple.com/kb/HT6443 - http://www.ubuntu.com/usn/USN-2165-1 - http://marc.info/?l=bugtraq&m=140904544427729&w=2 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:067 - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - https://bugzilla.novell.co
security/advisories?name=MDVSA-2014:067 - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - https://bugzilla.novell.com/show_bug.cgi?id=869945 - http://secunia.com/advisories/59040 - http://marc.info/?l=bugtraq&m=140389355508263&w=2 - http://secunia.com/advisories/59175 - http://marc.info/?l=bugtraq&m=140448122410568&w=2 - http://secunia.com/advisories/59413 - http://secunia.com/advisories/59721 - http://www-01.ibm.com/support/docview.wss?uid=swg21676062 - http://www-01.ibm.com/support/docview.wss?uid=swg21673137 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://secunia.com/advisories/59450 - http://secuni
15:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://secunia.com/advisories/59450 - http://secunia.com/advisories/59364 - http://www-01.ibm.com/support/docview.wss?uid=swg21676424 - http://secunia.com/advisories/60571 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm - http://secunia.com/advisories/59162 - http://secunia.com/advisories/59490 - http://eprint.iacr.org/2014/140
CVE ID: CVE-2014-0077 State: PUBLISHED Published: 2014-04-14T23:00:00 Last Updated: 2024-08-06T09:05:37.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66678 - https://bugzilla.redhat.com/show_bug.cgi?id=1064440 - http://www.kernel.org/pub
http://www.securityfocus.com/bid/66678 - https://bugzilla.redhat.com/show_bug.cgi?id=1064440 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.10 - https://github.com/torvalds/linux/commit/d8316f3991d207fe32881a9ac20241be8fa2bad0 - http://secunia.com/advisories/59386 - http://secunia.com/advisories/59599 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d8316f3991d207fe32881a9ac20241be8fa2bad0
CVE ID: CVE-2014-0078 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T09:05:38.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0469.html - https://bugzilla.redhat.com/show_bug.cgi?id=1064556
CVE ID: CVE-2014-0079 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T09:05:38.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:044 - https://bugzilla.redhat.com/show_bug.cgi?id=1059903