Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.ubuntu.com/usn/USN-2523-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://svn.apache.org/viewvc?view=revision&revision=1638818 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1855.html - http://www.securityfocus.com/bid/71657 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://access.redhat.com/errata/RHSA-2015:1858 - https://support.apple.com/HT205219 - https://security.gentoo.org/glsa/201701-36 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.ap
701-36 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf8269695265
f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists
e.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-3584 State: PUBLISHED Published: 2014-10-30T14:00:00 Last Updated: 2024-08-06T10:50:17.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/437 - http://secunia.com/advisories/61909 - http://www.securityfocus.com/bid/70738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97753 - http://cxf.apache.org/security-ad
rityfocus.com/bid/70738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97753 - http://cxf.apache.org/security-advisories.data/CVE-2014-3584.txt.asc - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/threa
d49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2014-3585 State: PUBLISHED Published: 2019-11-22T14:51:06 Last Updated: 2024-08-06T10:50:17.951Z Vendors: Red Hat Products: redhat-upgrade-tool Problem Types: does not check GPG signatures on package installation Description: redhat-upgrade-tool: Does not check GPG signatures when upgrading versions Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3585 - https://access.redhat.com/security/cve/cve-2014-3585
CVE ID: CVE-2014-3586 State: PUBLISHED Published: 2015-04-21T17:00:00 Last Updated: 2024-08-06T10:50:17.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032183 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHS
hat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - https://bugzilla.redhat.com/show_bug.cgi?id=1126687 - http://rhn.redhat.com/errata/RHSA-2015-0847.html
CVE ID: CVE-2014-3587 State: PUBLISHED Published: 2014-08-23T01:00:00 Last Updated: 2024-08-06T10:50:17.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233 - https://support.apple.com/HT204659 - http://
ps://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233 - https://support.apple.com/HT204659 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2369-1 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://secunia.com/advisories/60609 - http://www.ubuntu.com/usn/USN-2344-1 - http://rhn.redhat.com/errata/RHSA-2016-0760.html - https://security-tracker.debian.org/tracker/CVE-2014-3587 - http://php.net/ChangeLog-5.php - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoc
echnetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2014-1326.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://www.debian.org/security/2014/dsa-3008 - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/69325 - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947 - https://bugs.php.net/bug.php?id=67716 - http://secunia.com/advisories/60696
CVE ID: CVE-2014-3588 State: REJECTED Published: 2022-07-07T16:00:35 Last Updated: 2022-07-07T16:00:35 Description: No description available.
CVE ID: CVE-2014-3589 State: PUBLISHED Published: 2014-08-25T14:00:00 Last Updated: 2024-08-06T10:50:17.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.python.org/pypi/Pillow/2.5.2 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html - https://pypi.python.org/pypi/Pillow/2.3.2 - https://github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d - http://www.debian.org/security/2014/dsa-3
hub.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d - http://www.debian.org/security/2014/dsa-3009 - http://secunia.com/advisories/59825
CVE ID: CVE-2014-3590 State: PUBLISHED Published: 2020-01-02T19:52:06 Last Updated: 2024-08-06T10:50:17.612Z Vendors: Red Hat Satellite 6 Products: Red Hat Satellite 6 Problem Types: Cross-Site Request Forgery Description: Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-3590 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3590 - https://access.redhat.com/security/cve/cve-2014-3590
CVE ID: CVE-2014-3591 State: PUBLISHED Published: 2019-11-29T21:02:23 Last Updated: 2024-08-06T10:50:17.627Z Vendors: GNU Products: Libgcrypt, GnuPG Problem Types: Other Description: Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.tau.ac.il/~tromer/radioexp/ - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html - https://lists.gnupg.org/pipe
l/~tromer/radioexp/ - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html - http://www.debian.org/security/2015/dsa-3184 - http://www.debian.org/security/2015/dsa-3185
CVE ID: CVE-2014-3592 State: PUBLISHED Published: 2019-11-13T15:33:47 Last Updated: 2024-08-06T10:50:17.682Z Vendors: OpenShift Origin Products: OpenShift Origin Problem Types: XSS in team name Description: OpenShift Origin: Improperly validated team names could allow stored XSS attacks Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3592 - https://access.redhat.com/security/cve/cve-2014-3592
CVE ID: CVE-2014-3593 State: PUBLISHED Published: 2014-10-15T14:00:00 Last Updated: 2024-08-06T10:50:16.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1390.html - https://bugzilla.redhat.com/show_bug.cgi?id=989005
CVE ID: CVE-2014-3594 State: PUBLISHED Published: 2014-08-22T14:00:00 Last Updated: 2024-08-06T10:50:18.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1336.html - http://www.securityfocus.com/bid/69291 - https://review.openstack.org/#/c/115313/ - http://rhn.redhat.com/errata/RHSA-2014-1335.html - https://rev
om/bid/69291 - https://review.openstack.org/#/c/115313/ - http://rhn.redhat.com/errata/RHSA-2014-1335.html - https://review.openstack.org/#/c/115311 - https://review.openstack.org/#/c/115310 - http://seclists.org/oss-sec/2014/q3/413 - https://bugs.launchpad.net/horizon/+bug/1349491 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95378
CVE ID: CVE-2014-3595 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T10:50:17.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62027 - http://rhn.redhat.com/errata/RHSA-2014-1184.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00031.html - http://lists.opensuse.o
SA-2014-1184.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.html - http://secunia.com/advisories/61115
CVE ID: CVE-2014-3596 State: PUBLISHED Published: 2014-08-27T00:00:00 Last Updated: 2024-08-06T10:50:17.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/list
ete fix for CVE-2012-5784. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/08/20/2 - https://issues.apache.org/jira/browse/AXIS-2905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95377 - http://www.securitytracker.com/id/1030745 - http://secunia.com/advisories/61222 - http://rhn.redhat.com/errata/RHSA-2014-1193.html - http://www.securityfocus.com/bid/69295 - http://linux.oracle.com/errata/ELSA-2014-1193.html - https://lists.apache.org/thread.html/44d4e88a5fa8ae60deb752029afe9054da87c5f859caf296fcf585e5%40%3Cjava-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/de2af12dcaba653d02b03235327ca4aa930401813a3cce
5%40%3Cjava-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/de2af12dcaba653d02b03235327ca4aa930401813a3cced8e151d29c%40%3Cjava-dev.axis.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00022.html - https://lists.apache.org/thread.html/8aa25c99eeb0693fc229ec87d1423b5ed5d58558618706d8aba1d832%40%3Cjava-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/a308887782e05da7cf692e4851ae2bd429a038570cbf594e6631cc8d%40%3Cjava-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/5e6c92145deddcecf70c3604041dcbd615efa2d37632fc2b9c367780%40%3Cjava-dev.axis.apache.or
tps://lists.apache.org/thread.html/5e6c92145deddcecf70c3604041dcbd615efa2d37632fc2b9c367780%40%3Cjava-dev.axis.apache.org%3E - https://www.oracle.com/security-alerts/cpujan2020.html
CVE ID: CVE-2014-3597 State: PUBLISHED Published: 2014-08-23T01:00:00 Last Updated: 2024-08-06T10:50:17.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://rhn.redhat.com/errata/RHSA-2
t Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://secunia.com/advisories/60609 - http://www.ubuntu.com/usn/USN-2344-1 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html - https://bugs.php.net/bug.php?id=67717 - http://rhn.redhat.com/errata/RHSA-2014-1326.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://www.securityfocus.com/bid/69322 - http://www.debian.org/security/2014/dsa-3008 - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - h
dhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://github.com/php/php-src/commit/2fefae47716d501aec41c1102f3fd4531f070b05 - https://security-tracker.debian.org/tracker/CVE-2014-3597 - http://secunia.com/advisories/60696 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html
CVE ID: CVE-2014-3598 State: PUBLISHED Published: 2015-05-01T15:00:00 Last Updated: 2024-08-06T10:50:17.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html - https://pypi.python.org/pypi/Pillow/2.5.3
CVE ID: CVE-2014-3599 State: PUBLISHED Published: 2019-11-12T13:27:04 Last Updated: 2024-08-06T10:50:17.655Z Vendors: HornetQ REST Products: HornetQ REST Problem Types: XXE due to insecure configuration of RestEasy Description: HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3599 - https://access.redhat.com/security/cve/cve-2014-3599
CVE ID: CVE-2014-3600 State: PUBLISHED Published: 2017-10-27T19:00:00 Last Updated: 2024-08-06T10:50:17.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q1/427 - http://www.securityfocus.com/bid/72510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100722 - http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt - https://issues.apache.org/jira/bro
http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt - https://issues.apache.org/jira/browse/AMQ-5333 - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2014-3601 State: PUBLISHED Published: 2014-09-01T01:00:00 Last Updated: 2024-08-06T10:50:17.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages. Additional Analyst Notes: - CVE Program Container: References: - https:
fn value that leads to permanently pinned pages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 - http://secunia.com/advisories/60830 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2356-1 - http://www.ubuntu.com/usn/USN-2357-1 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-23
010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2359-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1131951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95689 - http://www.ubuntu.com/usn/USN-2358-1 - http://www.securityfocus.com/bid/69489
CVE ID: CVE-2014-3602 State: PUBLISHED Published: 2014-11-13T15:00:00 Last Updated: 2024-08-06T10:50:17.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1906.html - http://rhn.redhat.com/errata/RHSA-2014-1796.html
CVE ID: CVE-2014-3603 State: PUBLISHED Published: 2019-04-04T13:38:16 Last Updated: 2024-08-06T10:50:17.020Z Vendors: Shibboleth; OpenSAML Java Products: Identity Provider (IdP), OpenSAML Java Problem Types: Other Description: The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adv
an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60816 - https://bugzilla.redhat.com/show_bug.cgi?id=1131823 - http://shibboleth.net/community/advisories/secadv_20140813.txt
CVE ID: CVE-2014-3604 State: PUBLISHED Published: 2014-10-25T00:00:00 Last Updated: 2024-08-06T10:50:17.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://juliusdavies.ca/svn/viewvc.cgi/not-yet-commons-ssl?view=rev&revision=172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97659 - http://rhn.redhat.com/errata/RHSA
l?view=rev&revision=172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97659 - http://rhn.redhat.com/errata/RHSA-2015-1888.html - https://bugzilla.redhat.com/show_bug.cgi?id=1131803 - https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3604.yaml
CVE ID: CVE-2014-3605 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2014-3606 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.