Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8334 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:18:48.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" field) or (2) $backup['mysqldumppath'] variable. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/410 - http://seclists.org/fulldisclosure/2014/Oct/99 - http://www.securityfocus.com/archive/1/533763/100/0/threaded - https://wordpress.org/plugins/wp-dbmanager/chan
/Oct/99 - http://www.securityfocus.com/archive/1/533763/100/0/threaded - https://wordpress.org/plugins/wp-dbmanager/changelog/ - http://packetstormsecurity.com/files/128785/WordPress-Database-Manager-2.7.1-Command-Injection-Credential-Leak.html - http://www.vapid.dhs.org/advisories/wordpress/plugins/wp-dbmanager-2.7.1/index.html - http://seclists.org/oss-sec/2014/q4/365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97689 - http://osvdb.org/show/osvdb/113508 - http://www.securityfocus.com/bid/70626
CVE ID: CVE-2014-8335 State: PUBLISHED Published: 2018-01-05T16:00:00 Last Updated: 2024-08-06T13:18:47.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128785/WordPress-Database-Manager-2.7.1-Command-Injection-Credential-Leak.html - https://github.com/lesterchan/wp-dbmanager/commit/7037fa8f61644098044379190d1d4bf1883b8e4a -
ion-Credential-Leak.html - https://github.com/lesterchan/wp-dbmanager/commit/7037fa8f61644098044379190d1d4bf1883b8e4a - http://www.vapid.dhs.org/advisories/wordpress/plugins/wp-dbmanager-2.7.1/index.html - http://www.openwall.com/lists/oss-security/2014/10/20/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97691 - https://wordpress.org/plugins/wp-dbmanager/#developers
CVE ID: CVE-2014-8336 State: PUBLISHED Published: 2018-01-05T16:00:00 Last Updated: 2024-08-06T13:18:47.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by use of LOAD_FILE in an INSERT statement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lesterchan/wp-dbmanager/commit/7037fa8f61644098044379190d1d4bf1883b8e4a - http://www.vapid.dhs.org/advisories/wordpress/plugins/wp-dbmanager-2.7.1/index.html - https://exchange.xforce.ibmc
e4a - http://www.vapid.dhs.org/advisories/wordpress/plugins/wp-dbmanager-2.7.1/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97694 - https://wordpress.org/plugins/wp-dbmanager/#developers - http://www.openwall.com/lists/oss-security/2014/10/21/3
CVE ID: CVE-2014-8337 State: PUBLISHED Published: 2020-01-03T20:00:49 Last Updated: 2024-08-06T13:18:46.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128979/HelpDEZk-1.0.1-Unrestricted-File-Upload.html - https://www.htbridge.com/advisory/HTB23239
CVE ID: CVE-2014-8338 State: PUBLISHED Published: 2020-01-31T21:49:26 Last Updated: 2024-08-06T13:18:46.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/archive/1/533921 - https://packetstormsecurity.com/files/128997/Drupal-7-Videowhisper-Cross-Site-Scripting.html
CVE ID: CVE-2014-8339 State: PUBLISHED Published: 2014-11-04T15:00:00 Last Updated: 2024-08-06T13:18:48.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=_-oOI1LnEdk - http://packetstormsecurity.com/files/128909/Nuevolabs-Nuevoplayer-For-Clipshare-SQL-Injection.html - http://www.securityfocus.com/archive/1/533847/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/98393 - http://www.securityf
.com/archive/1/533847/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/98393 - http://www.securityfocus.com/bid/70833
CVE ID: CVE-2014-8340 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T13:18:48.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534184/100/0/threaded - http://packetstormsecurity.com/files/129445/phpTrafficA-2.3-SQL-Injection.html
CVE ID: CVE-2014-8346 State: PUBLISHED Published: 2014-10-24T10:00:00 Last Updated: 2024-08-06T13:18:48.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=Q3adkpOEjyI - https://www.youtube.com/watch?v=YufuOYQoDOY
CVE ID: CVE-2014-8347 State: PUBLISHED Published: 2020-02-11T13:36:37 Last Updated: 2024-08-06T13:18:47.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128853/Filemaker-Login-Bypass-Privilege-Escalation.html - http://www.exploit-db.com/exploits/35077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97780 - https://www.securityfocus.com/archive/1/533814 - https
77 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97780 - https://www.securityfocus.com/archive/1/533814 - https://lists.openwall.net/bugtraq/2014/10/27/4
CVE ID: CVE-2014-8349 State: PUBLISHED Published: 2014-11-24T16:00:00 Last Updated: 2024-08-06T13:18:47.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Liferay Portal Enterprise Edition (EE) 6.2 SP8 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the _20_body parameter in the comment field in an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031255 - http://packetstormsecurity.com/files/129199/Liferay-Portal-6.2-EE-SP8-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2014/Nov/61
CVE ID: CVE-2014-8350 State: PUBLISHED Published: 2014-11-03T16:00:00 Last Updated: 2024-08-06T13:18:48.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70708 - http://seclists.org/oss-sec/2014/q4/421 - https://code.google.com/p/smarty-php/source/browse/trunk/distribution/change_log.txt?r=4902 - http://advisories.mageia.org/MGASA-2014-0468.html - http://seclists.org/oss-sec/2014/q4/420 - http
ange_log.txt?r=4902 - http://advisories.mageia.org/MGASA-2014-0468.html - http://seclists.org/oss-sec/2014/q4/420 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97725 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765920
CVE ID: CVE-2014-8351 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:18:47.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98454 - https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2 - http://seclists.org/fulldisclosure/2014/Nov/3 - http://packetstormsecurity.com/files/128960/CNIL-Cook
3eeb9c25543960e2 - http://seclists.org/fulldisclosure/2014/Nov/3 - http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2014-8352 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:18:48.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to inject arbitrary web script or HTML via the max_date parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2 - http://seclists.org/fulldisclosure/2014/Nov/3 - http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html - https:/
014/Nov/3 - http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98452
CVE ID: CVE-2014-8354 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T13:18:48.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1158518 - http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html - https://int21.de/cve/CVE-2014-8354-ImageMagick-oob-heap-overflow.html - http://www.securityfocus.com/bid/70830
CVE ID: CVE-2014-8355 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T13:18:47.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html - https://int21.de/cve/CVE-2014-8355-ImageMagick-pcx-oob-heap-overflow.html - http://www.securityfocus.com/bid/70839 - https://bugzilla.redhat.com/show_bug.cgi?id=1158523
CVE ID: CVE-2014-8356 State: PUBLISHED Published: 2019-11-21T21:47:32 Last Updated: 2024-08-06T13:18:47.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html - https://www.exploit-db.com/exploits/38453/ - http://seclists.org/fulldisclosure/2015/Oct/57
CVE ID: CVE-2014-8357 State: PUBLISHED Published: 2017-10-17T16:00:00 Last Updated: 2024-08-06T13:18:48.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Oct/57 - https://www.exploit-db.com/exploits/38453/ - http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.h
ts/38453/ - http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html - http://www.securityfocus.com/archive/1/536663/100/0/threaded
CVE ID: CVE-2014-8358 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-06T13:18:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a low privilege account and modifying Mobile Partner.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/us/psirt/security-advisories/2014/hw-376152 - https://packetstormsecurity.com/files/128
erences: - http://www.huawei.com/us/psirt/security-advisories/2014/hw-376152 - https://packetstormsecurity.com/files/128767/Huawei-Mobile-Partner-DLL-Hijacking.html - http://www.securityfocus.com/bid/70672
CVE ID: CVE-2014-8359 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T13:18:48.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70671 - http://packetstormsecurity.com/files/128767/Huawei-Mobile-Partner-DLL-Hijacking.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-376152.htm - https://e
ijacking.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-376152.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/97682 - http://osandamalith.wordpress.com/2014/10/20/escalating-local-privileges-using-mobile-partner/
CVE ID: CVE-2014-8360 State: PUBLISHED Published: 2015-04-14T18:00:00 Last Updated: 2024-08-06T13:18:48.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=330 - http://advisories.mageia.org/MGASA-2015-0
SA-2015:167 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=330 - http://advisories.mageia.org/MGASA-2015-0017.html - http://tlk.tuxfamily.org/doku.php?id=writeup:cve-2014-8360-en - https://forge.indepnet.net/issues/5101
CVE ID: CVE-2014-8361 State: PUBLISHED Published: 2015-05-01T00:00:00.000Z Last Updated: 2025-10-21T23:56:01.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-155/ - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055 - http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html - http://www.securityfocus.com/bid
etstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html - http://www.securityfocus.com/bid/74330 - https://www.exploit-db.com/exploits/37169/ - http://jvn.jp/en/jp/JVN47580234/index.html - http://jvn.jp/en/jp/JVN67456944/index.html - https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/ - https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055
CVE ID: CVE-2014-8362 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T13:18:48.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136040/Vivint-Sky-Control-Panel-Unauthenticated-Access.html
CVE ID: CVE-2014-8363 State: PUBLISHED Published: 2014-10-20T17:00:00Z Last Updated: 2024-09-17T03:17:42.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attackers to execute arbitrary SQL commands via the ss_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127771/WordPress-WPSS-0.62-SQL-Injection.html - http://www.securityfocus.com/bid/69089
CVE ID: CVE-2014-8364 State: PUBLISHED Published: 2014-10-20T17:00:00Z Last Updated: 2024-09-16T16:54:05.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ss_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127770/WordPress-WPSS-0.62-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/69073
CVE ID: CVE-2014-8365 State: PUBLISHED Published: 2014-10-20T18:00:00Z Last Updated: 2024-09-16T20:42:59.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) email parameter to contact.php or (3) PATH_INFO to setup.php, related to the "PHP_SELF" variable. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127003/Xornic-Contact-Us-Form-CAPTCHA-Bypass-XSS.html - http://seclists.org/fulldisclosure/2014/Jun/40
CVE ID: CVE-2014-8366 State: PUBLISHED Published: 2014-10-20T18:00:00Z Last Updated: 2024-09-16T17:14:40.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jun/151 - http://packetstormsecurity.com/files/127284/openSIS-5.3-SQL-Injection.html - http://secunia.com/advisories/59114
CVE ID: CVE-2014-8367 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T13:18:47.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-11192014.txt - http://secunia.com/advisories/62602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98870
CVE ID: CVE-2014-8368 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T13:18:48.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-11192014.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/98871 - http://secunia.com/advisories/62578
CVE ID: CVE-2014-8369 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:18:48.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70749 - http://lists.opensuse.or
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70749 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - https://lkml.org/lkml/2014/10/24/460 - http://www.debian.org/security/2014/dsa-3093 - http://secunia.com/advisories/62326 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.openwall.com/lists/oss-security/2014/10/24/7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d32e4dbe71374a6780eaf51d719d76f9a9bf22f - https://bugzilla.redhat.com/show_bug.cgi?id=1156518 - http://secunia
mmit%3Bh=3d32e4dbe71374a6780eaf51d719d76f9a9bf22f - https://bugzilla.redhat.com/show_bug.cgi?id=1156518 - http://secunia.com/advisories/62336 - http://www.securityfocus.com/bid/70747 - https://github.com/torvalds/linux/commit/3d32e4dbe71374a6780eaf51d719d76f9a9bf22f - http://rhn.redhat.com/errata/RHSA-2015-0674.html
CVE ID: CVE-2014-8370 State: PUBLISHED Published: 2015-01-29T18:00:00 Last Updated: 2024-08-06T13:18:47.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN88252465/index.html - http://www.securitytracker.com/id/1031642 - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007 - http://www.vmware.com/security/advisories/VMSA-2015-0001.h
om/id/1031642 - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007 - http://www.vmware.com/security/advisories/VMSA-2015-0001.html - http://secunia.com/advisories/62605 - http://www.securityfocus.com/bid/72338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100933 - http://secunia.com/advisories/62551 - http://www.securitytracker.com/id/1031643 - http://secunia.com/advisories/62669