Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
se-security-announce/2015-01/msg00033.html - http://secunia.com/advisories/62237 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - http://secunia.com/advisories/62316 - http://www.debian.org/security/2015/dsa-3132 - http://secunia.com/advisories/62274 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/62313 - http://rhn.redhat.com/errata/RHSA-2015-0047.html - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62293 - http://secunia.com/advisories/62283 - http://secunia.com/advisories/62446 - http://www.oracl
unia.com/advisories/62293 - http://secunia.com/advisories/62283 - http://secunia.com/advisories/62446 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62657 - http://secunia.com/advisories/62273 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html - http://www.mozilla.org/security/announce/2014/mfsa2015-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2015/dsa-3127 - https://bugzilla.mozilla.org/show_bug.cgi?id=1109889 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://secunia.com/advisories/62315 - http://linux.
ists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://secunia.com/advisories/62315 - http://linux.oracle.com/errata/ELSA-2015-0046.html - http://secunia.com/advisories/62253 - http://www.securitytracker.com/id/1031534
CVE ID: CVE-2014-8635 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1098583 - http://www.securityfocus.com/bid/72050 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://secunia.com/advisories/62316 - https://bugzilla.mozilla.org/show_bug.cgi?id=1070962 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62446 - https://bugzilla.mozilla.org/show_bug.cgi?id=1072130 - https://bugzilla.mozill
0 - http://secunia.com/advisories/62446 - https://bugzilla.mozilla.org/show_bug.cgi?id=1072130 - https://bugzilla.mozilla.org/show_bug.cgi?id=1067473 - https://bugzilla.mozilla.org/show_bug.cgi?id=1026774 - http://secunia.com/advisories/62657 - https://bugzilla.mozilla.org/show_bug.cgi?id=1054538 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html - http://www.mozilla.org/security/announce/2014/mfsa2015-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1027300 - http://secunia.com/advisories/62253 - http://www.securitytracker.com/id/1031534 - https://bugzilla.mozilla.org/show_bug.cgi?id=1072871
CVE ID: CVE-2014-8636 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/metasploit/blog/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636 - http://secunia.com/advisories/62242 - http://pack
2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636 - http://secunia.com/advisories/62242 - http://packetstormsecurity.com/files/130972/Firefox-Proxy-Prototype-Privileged-Javascript-Injection.html - http://www.securityfocus.com/bid/72041 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=987794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99964 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.
nce/2015-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/62790 - http://www.mozilla.org/security/announce/2014/mfsa2015-09.html - http://secunia.com/advisories/62446 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
CVE ID: CVE-2014-8637 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://secunia.com/advis
r.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1094536 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - http://secunia.com/advisories/62316 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/62790 - https://exchange.xforce.ibmcloud.com/vul
s/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/62790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99957 - http://secunia.com/advisories/62446 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://www.securityfocus.com/bid/72048 - http://secunia.com/advisories/62253 - http://www.mozilla.org/security/announce/2014/mfsa2015-02.html
CVE ID: CVE-2014-8638 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0046.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533
.redhat.com/errata/RHSA-2015-0046.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.ubuntu.com/usn/USN-2460-1 - http://www.securityfocus.com/bid/72047 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://secunia.com/advisories/62304 - http://linux.oracle.com/errata/ELSA-2015-0047.html - http://secunia.com/advisories/62259 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - http://secunia.com/advisories/62237 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.o
use.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1080987 - http://secunia.com/advisories/62316 - http://www.debian.org/security/2015/dsa-3132 - http://secunia.com/advisories/62274 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/62313 - http://rhn.redhat.com/errata/RHSA-2015-0047.html - http://www.mozilla.org/security/announce/2014/mfsa2015-03.html - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62293 - http://secunia.com/advisories/62283 - https://exchange.xforce.ibmcloud.co
/62790 - http://secunia.com/advisories/62293 - http://secunia.com/advisories/62283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99958 - http://secunia.com/advisories/62446 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62657 - http://secunia.com/advisories/62273 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2015/dsa-3127 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://secunia.com/advisories/62315 - http://linux.oracle.com/errata/ELSA-2015-0046.html -
unce/2015-01/msg00036.html - http://secunia.com/advisories/62315 - http://linux.oracle.com/errata/ELSA-2015-0046.html - http://secunia.com/advisories/62253 - http://www.securitytracker.com/id/1031534
CVE ID: CVE-2014-8639 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:01.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0046.html - http://secunia.c
nalyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0046.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.ubuntu.com/usn/USN-2460-1 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://secunia.com/advisories/62304 - http://linux.oracle.com/errata/ELSA-2015-0047.html - http://secunia.com/advisories/62259 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - http://secunia.com/advisories/62237 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - h
7 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - http://secunia.com/advisories/62316 - http://www.debian.org/security/2015/dsa-3132 - http://secunia.com/advisories/62274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99959 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/62313 - http://rhn.redhat.com/errata/RHSA-2015-0047.html - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62293 - http://secunia.com/advisories/62283 - http://secunia.com/advisories/62446 - http://www.oracle.com/technetwork/
s/62293 - http://secunia.com/advisories/62283 - http://secunia.com/advisories/62446 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62657 - http://secunia.com/advisories/62273 - http://www.mozilla.org/security/announce/2014/mfsa2015-04.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.debian.org/security/2015/dsa-3127 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://secunia.com/advisories/62315 - http://linux.oracle.com/errata/ELSA-2015-0046.html - http://secunia.com/advisories/622
://secunia.com/advisories/62315 - http://linux.oracle.com/errata/ELSA-2015-0046.html - http://secunia.com/advisories/62253 - http://www.securitytracker.com/id/1031534 - https://bugzilla.mozilla.org/show_bug.cgi?id=1095859 - http://www.securityfocus.com/bid/72046
CVE ID: CVE-2014-8640 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-a
secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://www.mozilla.org/security/announce/2014/mfsa2015-05.html - http://www.securityfocus.com/bid/72045 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1100409 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/t
curity-announce/2015-01/msg00032.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/62790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99960 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
CVE ID: CVE-2014-8641 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0046.html - http://www.mozilla.org/security/announce/2014/mfsa2015-06.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.securityfocus.com/bid/72044 - http://l
nia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.securityfocus.com/bid/72044 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1108455 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - http://secunia.com/advisories/62237 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html - http://secunia.com/advisories/62316 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisorie
2.html - http://secunia.com/advisories/62316 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/62313 - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62293 - http://secunia.com/advisories/62446 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://secunia.com/advisories/62273 - http://www.debian.org/security/2015/dsa-3127 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html - http://linux.oracle.com/errata/ELSA-2015-0046.html - http://secunia.com/advisories/62253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99961
CVE ID: CVE-2014-8642 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/
ferences: - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://secunia.com/advisories/62250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99963 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://secunia.com/advisories/62418 - http://secunia.com/advisories/62316 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1079658 - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62446 - http://www.securityf
ow_bug.cgi?id=1079658 - http://secunia.com/advisories/62790 - http://secunia.com/advisories/62446 - http://www.securityfocus.com/bid/72042 - http://secunia.com/advisories/62253 - http://www.mozilla.org/security/announce/2014/mfsa2015-08.html
CVE ID: CVE-2014-8643 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:00.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031533 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://www.oracle.com/technetwork/topics/securi
://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1117140 - http://secunia.com/advisories/62446 - http://www.securityfocus.com/bid/72043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99962 - http://secunia.com/advisories/62253 - http://www.mozilla.org/security/announce/2014/mfsa2015-07.html
CVE ID: CVE-2014-8645 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8646 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8647 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8648 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8649 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8650 State: PUBLISHED Published: 2019-12-15T21:38:07 Last Updated: 2024-08-06T13:26:02.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-requests-Kerberos through 0.5 does not handle mutual authentication Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-8650 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650 - http://www.securityfocus.com/bid/70909 - http://www.openwall.com/lists/oss-security/2014/11/07/1
CVE ID: CVE-2014-8651 State: PUBLISHED Published: 2014-12-06T21:00:00 Last Updated: 2024-08-06T13:26:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html - http://www.openwall.com/lists/oss-security/2014/11/04/9 - https://security.gentoo.org/glsa/201512-12 - https://www.kde.org/info/security/advisory-20141106-1.txt - http://www.ubuntu.com/usn/U
rity.gentoo.org/glsa/201512-12 - https://www.kde.org/info/security/advisory-20141106-1.txt - http://www.ubuntu.com/usn/USN-2402-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html - http://www.openwall.com/lists/oss-security/2014/11/07/3 - http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.html - http://www.securityfocus.com/bid/70904
CVE ID: CVE-2014-8652 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:26:02.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to index.html on TCP port 1681. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/69 - http://firebitsbr.wordpress.com/2014/07/16/vsla-security-advisory-fire-scada-dos-2013-001-http-dos-requests-flooding-crash-device-vulnerabilities-elipse-e3-scada-plc/
CVE ID: CVE-2014-8653 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:26:02.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php - http://www.securityfocus.com/bid/70762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98328 - http://www.exploit-db.com/exploits/35075 - http://packetstor
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/98328 - http://www.exploit-db.com/exploits/35075 - http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html - http://osvdb.org/show/osvdb/113839