Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1367 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT6537 - http://archives.neohapsis.com/arch
CVE ID: CVE-2014-1368 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT6537 - http://archives.neohapsis.com/arch
CVE ID: CVE-2014-1369 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:36.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030495 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html
CVE ID: CVE-2014-1370 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://www.verisign.com/en_US/security-services/security-intellig
es.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1087 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1371 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1372 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-rese
0505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-research/issues/detail?id=18 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1373 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:36.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenGL API call, which allows attackers to execute arbitrary code via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-research/issues/detail?id=22 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1374 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1375 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1376 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:35.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-research/issues/detail?id=19 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1377 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-research/issues/detail?id=17 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1378 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:35.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
CVE ID: CVE-2014-1379 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:36.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a 32-bit executable file for a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - https://code.google.com/p/google-security-research/issues/detail?id=20 - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1380 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
CVE ID: CVE-2014-1381 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:34.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6296 - http://www.securitytracker.com/id/1030505 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html - http://secunia.com/advisories/59475
CVE ID: CVE-2014-1382 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:36.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1, APPLE-SA-2014-06-30-3, and APPLE-SA-2014-06-30-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT6537 - http://archives.neohapsis.com/arch
CVE ID: CVE-2014-1383 State: PUBLISHED Published: 2014-07-01T10:00:00 Last Updated: 2024-08-06T09:42:35.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html - http://www.securitytracker.com/id/1030503
CVE ID: CVE-2014-1384 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:34.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple
com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95267 - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1385 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:36.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple
com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95268 - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1386 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:35.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple
com/id/1030731 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95269 - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1387 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:34.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple
com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95270 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1388 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:34.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple
com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95271 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1389 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:35.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple
com/id/1030731 - http://support.apple.com/kb/HT6441 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - http://support.apple.com/kb/HT6442 - http://secunia.com/advisories/61318 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95272 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1390 State: PUBLISHED Published: 2014-08-14T10:00:00 Last Updated: 2024-08-06T09:42:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95273 - http://www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - https://security.gentoo.org/glsa/201601-02
www.securityfocus.com/bid/69223 - http://www.securitytracker.com/id/1030731 - https://security.gentoo.org/glsa/201601-02 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6367 - http://secunia.com/advisories/60705
CVE ID: CVE-2014-1391 State: PUBLISHED Published: 2014-09-19T10:00:00 Last Updated: 2024-08-06T09:42:35.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with RLE encoding. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT6493 - http://www.securitytracker.com/id/1030868 - http://support.apple.com/kb/HT6443 - http://www.securityfocus.com/bid/69907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96049
CVE ID: CVE-2014-1398 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:42:35.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statistics properties via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90215 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html - http://lists.fedoraproject.org/pipermail
//lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html - http://www.openwall.com/lists/oss-security/2014/01/09/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1050802 - https://www.drupal.org/node/2169595
CVE ID: CVE-2014-1399 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:42:36.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64729 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html - https://exchange.xforce.ibmcloud.com/vuln
/lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90216 - http://www.openwall.com/lists/oss-security/2014/01/09/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1050802 - https://www.drupal.org/node/2169595
CVE ID: CVE-2014-1400 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:42:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64729 - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html - https://exchange.xforce.ibmcloud.com/vulne
lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90396 - http://www.openwall.com/lists/oss-security/2014/01/09/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1050802 - https://www.drupal.org/node/2169595
CVE ID: CVE-2014-1401 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T09:42:34.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6) FORWARDED HTTP header to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auracms/AuraCMS/commit/790f66ffbc4f23a6e13636fc79d0aa1a7d81e747 - https://github.com/auracms/AuraCMS/commit/4fe9d0d31a32df392f4d6ced8e5c25ed4
t/790f66ffbc4f23a6e13636fc79d0aa1a7d81e747 - https://github.com/auracms/AuraCMS/commit/4fe9d0d31a32df392f4d6ced8e5c25ed4af19ade - https://exchange.xforce.ibmcloud.com/vulnerabilities/90965 - http://www.exploit-db.com/exploits/31520 - http://www.securityfocus.com/archive/1/530930/100/0/threaded - http://secunia.com/advisories/56804 - http://packetstormsecurity.com/files/125079 - https://www.htbridge.com/advisory/HTB23196
CVE ID: CVE-2014-1402 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T09:42:35.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://oss.oracle.com/pipermail/el-errata/2014-June/004192.html - http://openwall.com/lists/oss-security/2014/01/10/3 - http://secunia.com/advisories/59017 - http://secunia.com/advisories/56287 - http://www.mandriva.com/secu