Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ylist page or (3) videoId parameter in a newvideo page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127611/WordPress-Video-Gallery-2.5-Cross-Site-Scripting-SQL-Injection.html - http://wordpress.org/plugins/contus-video-gallery/changelog - http://www.securityfocus.com/bid/68883
CVE ID: CVE-2014-9098 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-17T03:38:19.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to (1) videoads/videoads.php, (2) video/video.php, or (3) playlist/playlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127611/WordPress-Video-Gallery-2.5-Cross-Site-Scripting-SQL-Injection.h
ferences: - http://packetstormsecurity.com/files/127611/WordPress-Video-Gallery-2.5-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/68883
CVE ID: CVE-2014-9099 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-17T04:25:21.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydowork_adsense page in wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68954 - http://packetstormsecurity.com/files/127658/WordPress-WhyDoWork-AdSense-1.2-XSS-CSRF.html
CVE ID: CVE-2014-9100 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-17T03:47:50.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the idcode parameter in the whydowork_adsense page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68954 - http://packetstormsecurity.com/files/127658/WordPress-WhyDoWork-AdSense-1.2-XSS-CSRF.html
CVE ID: CVE-2014-9101 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-16T23:05:51.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (build 7651) allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks or possibly have other unspecified impact via the (1) label parameter to admin/users/roles/, (2) lang[1][base][questions_account_type_5615100a931845eca8da20cfdf7327e0] in an AddAccountType action or (3) qst_name parameter in an addQuestion action to admin/questions/aja
ca8da20cfdf7327e0] in an AddAccountType action or (3) qst_name parameter in an addQuestion action to admin/questions/ajax-responder/, or (4) form_name or (5) restrictedUsername parameter to admin/restricted-usernames. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127652/Oxwall-1.7.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/34190 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5195.php - http://www.securityfocus.com/bid/68971 - http://osvdb.org/show/osvdb/109622 - http://osvdb.org/show/osvdb/109623 - http://packetstormsecurity.com/files/127690/SkaDate-Lite-2.0-CSRF-Cross-Site-Scrip
http://osvdb.org/show/osvdb/109623 - http://packetstormsecurity.com/files/127690/SkaDate-Lite-2.0-CSRF-Cross-Site-Scripting.html - http://osvdb.org/show/osvdb/109624 - http://osvdb.org/show/osvdb/109625 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5197.php
CVE ID: CVE-2014-9102 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-16T17:58:37.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics[] parameter in an unfavorite action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68956 - http://packetstormsecurity.com/files/127683/Joomla-Kunena-Forum-3.0.5-SQL-Injection.html - http://www.kunena.org/docs/Kunena_3.0.6_Read_Me - http:/
com/files/127683/Joomla-Kunena-Forum-3.0.5-SQL-Injection.html - http://www.kunena.org/docs/Kunena_3.0.6_Read_Me - http://www.kunena.org/blog/139-kunena-3-0-6-released
CVE ID: CVE-2014-9103 State: PUBLISHED Published: 2014-11-26T15:00:00Z Last Updated: 2024-09-16T23:56:14.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) index value of an array parameter or the filename parameter in the Content-Disposition header to the (2) file or (3) profile image upload functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68956 - http://www.kunena.org/docs/Kunena_3.0.6_Read_Me - http://www.kunena.org/blog/139-kunena-3-0-6-rel
yfocus.com/bid/68956 - http://www.kunena.org/docs/Kunena_3.0.6_Read_Me - http://www.kunena.org/blog/139-kunena-3-0-6-released - http://packetstormsecurity.com/files/127684/joomlakunena305-xss.txt
CVE ID: CVE-2014-9104 State: PUBLISHED Published: 2014-11-26T15:00:00 Last Updated: 2024-08-06T13:33:13.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Server 1.5.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) disconnecting established VPN sessions, (2) connect to arbitrary VPN servers, or (3) create VPN profiles and execute arbitrary commands via crafted API requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532795/100/0/threaded - http://
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532795/100/0/threaded - http://seclists.org/fulldisclosure/2014/Jul/76 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-1_OpenVPN_Access_Server_Desktop_Client_Remote_Code_Execution_via_CSRF_v10.txt - http://openvpn.net/index.php/access-server/security-advisories.html - https://www.youtube.com/watch?v=qhgysgfvQh8
CVE ID: CVE-2014-9112 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:33:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62145 - http://secunia.com/advisories/60167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98918 - http://www.securityfocus.com/bid/71248 - http://seclists.org/fulldisclosure/2014/Nov/74 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct20
- http://seclists.org/fulldisclosure/2014/Nov/74 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://savannah.gnu.org/bugs/?43709 - http://www.openwall.com/lists/oss-security/2014/11/25/2 - http://www.openwall.com/lists/oss-security/2014/11/26/20 - http://www.ubuntu.com/usn/USN-2456-1 - http://www.openwall.com/lists/oss-security/2014/11/23/2 - http://www.debian.org/security/2014/dsa-3111
CVE ID: CVE-2014-9113 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:33:13.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 and earlier uses weak permissions (Authenticated Users: Modify and Write) for the (1) Pfx.Engagement.WcfServices, (2) PFXEngDesktopService, (3) PFXSYNPFTService, and (4) P2EWinService service files in PFX Engagement\, which allows local users to obtain LocalSystem privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35395 - http://packetstormsecurity.com/files/129323/CCH-Wolters
tainer: References: - http://www.exploit-db.com/exploits/35395 - http://packetstormsecurity.com/files/129323/CCH-Wolters-Kluwer-PFX-Engagement-7.1-Privilege-Escalation.html - http://www.information-paradox.net/2014/11/cve-2014-9113-cch-wolters-kluwer-pfx.html
CVE ID: CVE-2014-9114 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-06T13:33:13.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146229.html - http://www.openwall.com/lists/oss-security/2014/11/26/21 - https://bugzilla.redhat.com/show_bug.cgi?id=1168485 - https://github.com/karelzak/util-linux/commit/89e90ae7b2826110ea28c1c0eb8e7c56c3907bdc - https://exchange.xforce.ibmcloud.com/vulnerabilities/98993 - http://lists.opensuse.org/opensuse-u
c1c0eb8e7c56c3907bdc - https://exchange.xforce.ibmcloud.com/vulnerabilities/98993 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00035.html - http://www.securityfocus.com/bid/71327 - https://security.gentoo.org/glsa/201612-14 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145188.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2014-9115 State: PUBLISHED Published: 2014-12-23T11:00:00 Last Updated: 2024-08-06T13:33:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a comparison of a non-numeric value that begins with a digit. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/forum/viewtopic.php?id=24850 - http://piwigo.org/releases/2.7.2 - http://seclists.org/fulldisclo
es: - http://piwigo.org/forum/viewtopic.php?id=24850 - http://piwigo.org/releases/2.7.2 - http://seclists.org/fulldisclosure/2014/Nov/23 - http://piwigo.org/dev/changeset/30563/trunk/include/functions_rate.inc.php
CVE ID: CVE-2014-9116 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:33:13.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1168463 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771125 - http://lists.opensuse.org/opensuse-security-announce/2015-0
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771125 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00002.html - http://www.securitytracker.com/id/1031266 - http://dev.mutt.org/trac/ticket/3716 - http://www.openwall.com/lists/oss-security/2014/11/27/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:078 - http://advisories.mageia.org/MGASA-2014-0509.html - https://security.gentoo.org/glsa/201701-04 - http://www.openwall.com/lists/oss-security/2014/11/27/9 - http://www.securityfocus.com/bid/71334 - http://www.debian.org/security/2014/dsa-3083 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:245
CVE ID: CVE-2014-9117 State: PUBLISHED Published: 2014-12-06T21:00:00 Last Updated: 2024-08-06T13:33:13.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer, which allows remote attackers to bypass the CAPTCHA protection mechanism by leveraging knowledge of a CAPTCHA answer for a public_key parameter value, as demonstrated by E4652 for the public_key value 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99004 - http://www.openwall.com/lists/oss-security/2014/11/26/19 - http://ww
xchange.xforce.ibmcloud.com/vulnerabilities/99004 - http://www.openwall.com/lists/oss-security/2014/11/26/19 - http://www.openwall.com/lists/oss-security/2014/11/27/8 - http://secunia.com/advisories/62101 - https://www.mantisbt.org/bugs/view.php?id=17811 - https://github.com/mantisbt/mantisbt/commit/7bb78e45 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-9118 State: PUBLISHED Published: 2017-10-17T16:00:00 Last Updated: 2024-08-06T13:33:13.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Oct/57 - https://www.exploit-db.com/exploits/38453/ - http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html - http://www.securityfocus.com/archive/1/536663/100/0/threaded
CVE ID: CVE-2014-9119 State: PUBLISHED Published: 2014-12-31T22:00:00 Last Updated: 2024-08-06T13:33:13.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99368 - http://seclists.org/oss-sec/2014/q4/1059 - https://wpvulndb.com/vulnerabilities/7726
CVE ID: CVE-2014-9120 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:33:13.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/. Additional Analyst Notes: - CVE Program Container: References: - http://dev.subrion.org/versions/130 - https://www.netsparker.com/xss-vulnerability-in-subrion-cms/
CVE ID: CVE-2014-9126 State: PUBLISHED Published: 2020-02-08T16:23:29 Last Updated: 2024-08-06T13:33:13.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YII_CSRF_TOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html
CVE ID: CVE-2014-9127 State: PUBLISHED Published: 2020-02-08T16:36:53 Last Updated: 2024-08-06T13:33:13.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html
CVE ID: CVE-2014-9129 State: PUBLISHED Published: 2014-12-05T15:00:00 Last Updated: 2024-08-06T13:33:13.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the addons_title parameter in the CMDM_admin_settings page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://downloadsmanager.cminds.com/release-notes/ - http://packetstormsecurity.com/files/129357/WordPress-CM-Download-Manage
://downloadsmanager.cminds.com/release-notes/ - http://packetstormsecurity.com/files/129357/WordPress-CM-Download-Manager-2.0.6-XSS-CSRF.html - http://www.securityfocus.com/archive/1/534132/100/0/threaded - http://www.securityfocus.com/bid/71418
CVE ID: CVE-2014-9130 State: PUBLISHED Published: 2014-12-08T16:00:00 Last Updated: 2024-08-06T13:33:13.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62705 - https://bitbucket.org/xi/libyaml/commits/2b9156756423e967cfd09a61d125d883fca6f4f2 - http://www.securityfocus.com/bid/71349 - http://www.debian.org/security/2014/dsa-3102 - http://secunia.com/advisories
- http://www.securityfocus.com/bid/71349 - http://www.debian.org/security/2014/dsa-3102 - http://secunia.com/advisories/62174 - http://rhn.redhat.com/errata/RHSA-2015-0112.html - http://www.openwall.com/lists/oss-security/2014/11/28/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:060 - http://www.ubuntu.com/usn/USN-2461-3 - http://www.debian.org/security/2014/dsa-3115 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html - http://www.openwall.com/lists/oss-security/2014/11/29/3 - http://secunia.com/advisories/62774 - http://www.openwall.com/lists/oss-security/2014/11/28/8 - http://rhn.redhat.com/errata/RHSA-2015-0260.html - http://secunia.com/advisories/62723 -
ts/oss-security/2014/11/28/8 - http://rhn.redhat.com/errata/RHSA-2015-0260.html - http://secunia.com/advisories/62723 - http://www.ubuntu.com/usn/USN-2461-1 - https://puppet.com/security/cve/cve-2014-9130 - http://www.ubuntu.com/usn/USN-2461-2 - http://secunia.com/advisories/62176 - https://bitbucket.org/xi/libyaml/issue/10/wrapped-strings-cause-assert-failure - http://www.mandriva.com/security/advisories?name=MDVSA-2014:242 - http://www.debian.org/security/2014/dsa-3103 - http://secunia.com/advisories/60944 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html - http://secunia.com/advisories/62164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99047 - http://rhn.redhat.
- http://secunia.com/advisories/62164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99047 - http://rhn.redhat.com/errata/RHSA-2015-0100.html - http://linux.oracle.com/errata/ELSA-2015-0100.html - http://secunia.com/advisories/59947 - http://advisories.mageia.org/MGASA-2014-0508.html
CVE ID: CVE-2014-9134 State: PUBLISHED Published: 2014-12-03T21:00:00 Last Updated: 2024-08-06T13:33:13.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69806 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-396206.htm
CVE ID: CVE-2014-9135 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:33:13.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99283 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm
CVE ID: CVE-2014-9136 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:33:13.586Z Vendors: n/a Products: FusionManager FusionManager All V100R002C03 versions, All V100R003C00 versions, Problem Types: CSRF Description: Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-372186
CVE ID: CVE-2014-9137 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:33:13.590Z Vendors: n/a Products: USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900, Problem Types: CSRF Description: Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the
tware V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-372186
CVE ID: CVE-2014-9140 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T13:33:13.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:240 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html - https://github.com/the-tcpdump-group/tcpdump/commit/0f95d441e4b5d7512cc
/tcpdump-Denial-Of-Service-Code-Execution.html - https://github.com/the-tcpdump-group/tcpdump/commit/0f95d441e4b5d7512cc5c326c8668a120e048eda - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/archive/1/534829/100/0/threaded - http://advisories.mageia.org/MGASA-2014-0511.html - http://www.ubuntu.com/usn/USN-2433-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html - http://www.debian.org/security/2014/dsa-3086 - http://www.securityfocus.com/bid/71468 - https://support.apple.com/kb/HT205031 - http://www.debian.org/security/2015/dsa-3193 - http://seclists.org/tcpdump/2014/q4/72