Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0589 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T09:20:19.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - http://lists.ope
Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://www.securityfocus.com/bid/71051
CVE ID: CVE-2014-0590 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T09:20:19.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0586. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-
4-0586. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
CVE ID: CVE-2014-0591 State: PUBLISHED Published: 2014-01-14T02:00:00 Last Updated: 2024-08-06T09:20:19.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029589 - http://rhn.redhat.com/errata/RHSA-2014-0043.html - https://bugzilla.redha
- http://www.securitytracker.com/id/1029589 - http://rhn.redhat.com/errata/RHSA-2014-0043.html - https://bugzilla.redhat.com/show_bug.cgi?id=1051717 - http://www.debian.org/security/2014/dsa-3023 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:002 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://secunia.com/advisories/56574 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html - http://secunia.com/advisories/56522 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126761.html - http://linux.oracle.com/errata/ELSA-2014-1244 - http://secunia.com/advisories/56442 - http://www.slackware.com/security/viewer.php?l=slackwa
com/errata/ELSA-2014-1244 - http://secunia.com/advisories/56442 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.524465 - http://secunia.com/advisories/61199 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html - http://marc.info/?l=bugtraq&m=138995561732658&w=2 - http://secunia.com/advisories/56427 - http://secunia.com/advisories/56871 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html - http://secunia.com/advisories/56425 - https://kb.isc.org/article/AA-01085 - https://support.apple.com/kb/HT6536 - http
- http://secunia.com/advisories/56425 - https://kb.isc.org/article/AA-01085 - https://support.apple.com/kb/HT6536 - http://secunia.com/advisories/56493 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126772.html - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc - http://marc.info/?l=bugtraq&m=138995561732658&w=2 - http://osvdb.org/101973 - https://kb.isc.org/article/AA-01078 - http://secunia.com/advisories/61343 - http://secunia.com/advisories/61117 - http://www.securityfocus.com/bid/64801 - http://www.ubuntu.com/usn/USN-2081-1
CVE ID: CVE-2014-0592 State: PUBLISHED Published: 2014-04-04T14:00:00 Last Updated: 2024-08-06T09:20:19.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66519 - https://github.com/crowbar/barclamp-network/pull/269 - http://secunia.com/advisories/57509 - https://bugzilla.novell.com/show_bug.cgi?id=864183 - http://l
p-network/pull/269 - http://secunia.com/advisories/57509 - https://bugzilla.novell.com/show_bug.cgi?id=864183 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html
CVE ID: CVE-2014-0593 State: PUBLISHED Published: 2018-06-08T17:00:00Z Last Updated: 2024-09-16T16:33:31.630Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openSUSE Products: obs-service-set_version Problem Types: CWE-78 Description: The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-buildservice/2014-03/msg00014.html - https://bugzilla.suse
Container: References: - https://lists.opensuse.org/opensuse-buildservice/2014-03/msg00014.html - https://bugzilla.suse.com/show_bug.cgi?id=866966 - https://www.suse.com/de-de/security/cve/CVE-2014-0593/ - https://github.com/openSUSE/obs-service-set_version/commit/10d5bddcea29f74a175f7f550924bf6407e52e93
CVE ID: CVE-2014-0594 State: PUBLISHED Published: 2018-06-08T17:00:00Z Last Updated: 2024-09-16T20:16:39.814Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: openSUSE Products: Open Build Service Problem Types: CWE-352 Description: In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8 - https://bugzilla.suse.com/show_bug.cgi?id=870606
CVE ID: CVE-2014-0595 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T09:20:20.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: /opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not properly manage a certain array, which allows local users to obtain the S permission in opportunistic circumstances by leveraging the granting of the F permission by an administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67144 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00030.html - http://www.novell.com/support/kb/doc.php?id=7014
//lists.opensuse.org/opensuse-security-announce/2014-06/msg00030.html - http://www.novell.com/support/kb/doc.php?id=7014932
CVE ID: CVE-2014-0598 State: PUBLISHED Published: 2014-06-18T17:00:00 Last Updated: 2024-08-06T09:20:19.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7010867 - http://secunia.com/advisories/59113 - http://www.securityfocus.com/bid/68066 - https://bugzilla.novell.com/show_bug.cgi?id=869970
CVE ID: CVE-2014-0599 State: PUBLISHED Published: 2014-06-18T17:00:00 Last Updated: 2024-08-06T09:20:19.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7010867 - http://secunia.com/advisories/59113 - https://bugzilla.novell.com/show_bug.cgi?id=869975
CVE ID: CVE-2014-0600 State: PUBLISHED Published: 2014-08-29T10:00:00 Last Updated: 2024-08-06T09:20:19.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=879192 - http://www.novell.com/support/kb/doc.php?id=7015566 - http://www.zerodayinitiative.com/advisories/ZDI-14-296/ - http://www.securitytracker.com/id/1030801
CVE ID: CVE-2014-0602 State: PUBLISHED Published: 2014-07-07T10:00:00 Last Updated: 2024-08-06T09:20:19.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3460. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/support/kb/doc.php?id=7015309
CVE ID: CVE-2014-0603 State: PUBLISHED Published: 2015-02-06T11:00:00 Last Updated: 2024-08-06T09:20:19.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address. NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability, affecting the same set of versions, and discovered by the same researcher. Additional Analyst Notes: - CVE Pro
rability, affecting the same set of versions, and discovered by the same researcher. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2501.html - http://www.zerodayinitiative.com/advisories/ZDI-14-288/ - http://www.zerodayinitiative.com/advisories/ZDI-14-291/
CVE ID: CVE-2014-0604 State: PUBLISHED Published: 2015-02-06T11:00:00 Last Updated: 2024-08-06T09:20:19.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2501.html - http://www.zerodayinitiative.com/advisories/ZDI-14-289/
CVE ID: CVE-2014-0605 State: PUBLISHED Published: 2015-02-06T11:00:00 Last Updated: 2024-08-06T09:20:19.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2501.html - http://www.zerodayinitiative.com/advisories/ZDI-14-290/
CVE ID: CVE-2014-0606 State: REJECTED Published: 2015-02-06T11:00:00 Last Updated: 2015-02-06T04:57:00 Description: No description available.
CVE ID: CVE-2014-0607 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T09:20:19.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and launching an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2700.html
CVE ID: CVE-2014-0609 State: PUBLISHED Published: 2014-08-17T18:00:00 Last Updated: 2024-08-06T09:20:19.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before Scheduled Maintenance Update 9413 for Linux has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59982 - http://www.novell.com/support/kb/doc.php?id=7014420 - http://www.novell.com/support/kb/doc.php?id=7010867
CVE ID: CVE-2014-0610 State: PUBLISHED Published: 2014-09-05T01:00:00 Last Updated: 2024-08-06T09:20:19.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95738 - http://www.novell.com/support/kb/doc.php?id=7015565 - http://www.securitytracker.com/id/1030802 - https://bugzilla.novell.com/show_bug.cgi?id=874533
CVE ID: CVE-2014-0611 State: PUBLISHED Published: 2015-07-22T14:00:00 Last Updated: 2024-08-06T09:20:19.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032978 - http://www.novell.com/support/kb/doc.php?id=7016653 - https://bugzilla.novell.com/show_bug.cgi?id=909590 - https://bugzilla.novell.com/show_bug.cgi?id=909587 - https://bugzilla.novell.com/show_
vell.com/show_bug.cgi?id=909590 - https://bugzilla.novell.com/show_bug.cgi?id=909587 - https://bugzilla.novell.com/show_bug.cgi?id=909588 - https://bugzilla.novell.com/show_bug.cgi?id=909584 - https://bugzilla.novell.com/show_bug.cgi?id=909586 - https://bugzilla.novell.com/show_bug.cgi?id=930467
CVE ID: CVE-2014-0612 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T09:20:19.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service (new Dynamic VPN connection failures and CPU and disk consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10620 - http://www.securityfocus.com
Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10620 - http://www.securityfocus.com/bid/66759 - http://securitytracker.com/id?1030057 - http://secunia.com/advisories/57845
CVE ID: CVE-2014-0613 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T09:20:19.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2-S2, and 13.3 before 13.3R1, when xnm-ssl or xnm-clear-text is enabled, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/10186
mption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101861 - http://www.securitytracker.com/id/1029586 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10607
CVE ID: CVE-2014-0614 State: PUBLISHED Published: 2014-04-14T15:00:00 Last Updated: 2024-08-06T09:20:19.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service (kernel panic and crash) via a large number of crafted IGMP packets. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1030062 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10618 - http://secunia.com/advisories/57819 - http://www.securityfocus.com/bid/66762
CVE ID: CVE-2014-0615 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T09:20:19.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain privileges via vectors related to "certain combinations of Junos OS CLI commands and arguments." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101862 - http://www.securityfocus.com/bid/64762 - http:/
Notes: - CVE Program Container: References: - http://osvdb.org/101862 - http://www.securityfocus.com/bid/64762 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608 - http://www.securitytracker.com/id/1029585
CVE ID: CVE-2014-0616 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T09:20:19.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows remote attackers to cause a denial of service (rdp crash) via a large BGP UPDATE message which immediately triggers a withdraw message to be sent, as demonstrated by a long AS_PATH and a large number of BGP Communities. Additional Analyst Notes: - CVE
ge to be sent, as demonstrated by a long AS_PATH and a large number of BGP Communities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64766 - http://osvdb.org/101868 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10609 - http://www.securitytracker.com/id/1029582
CVE ID: CVE-2014-0617 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T09:20:19.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029583 - http://www.securityfocus.com/bid/64764 - http://osvdb.org/101863 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10610
CVE ID: CVE-2014-0618 State: PUBLISHED Published: 2014-01-11T02:00:00 Last Updated: 2024-08-06T09:20:19.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90238 - http://www.securitytracker.com/id/1029584 - http://www.securityfocus.com/bid/6
orce.ibmcloud.com/vulnerabilities/90238 - http://www.securitytracker.com/id/1029584 - http://www.securityfocus.com/bid/64769 - http://osvdb.org/101864 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10611
CVE ID: CVE-2014-0619 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T09:20:19.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/97658
CVE ID: CVE-2014-0620 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T09:20:19.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to inject arbitrary web script or HTML via the (1) ADDNewDomain parameter to parental/website-filters.asp or (2) VmTracerouteHost parameter to goform/status/diagnostics-route. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30668 - http://www.securityfocus.com/bid/64672
CVE ID: CVE-2014-0621 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T09:20:19.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that (1) perform a factory reset via a request to goform/system/factory, (2) disable advanced options via a request to goform/advanced/options, (3) remove ip-filters via the IpFilterAddressDelete1 parameter to goform/advanced/ip-filters, or (4) remove firewall settings via the cbFirewall parameter to goform/advanced/firewall. Additional
dvanced/ip-filters, or (4) remove firewall settings via the cbFirewall parameter to goform/advanced/firewall. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30667
CVE ID: CVE-2014-0622 State: PUBLISHED Published: 2014-02-06T22:00:00 Last Updated: 2024-08-06T09:20:19.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6.7 SP2 before P08, 7.0 before P12, and 7.1 before P01 does not properly implement content uploading, which allows remote authenticated users to bypass intended content access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90982 - http://osvdb.org/102949 - http://archives.neohapsis.com
8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90982 - http://osvdb.org/102949 - http://archives.neohapsis.com/archives/bugtraq/2014-02/0007.html - http://secunia.com/advisories/56845