Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8420 State: PUBLISHED Published: 2014-11-25T15:00:00 Last Updated: 2024-08-06T13:18:47.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.software.dell.com/product-notification/136814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 - http://www.zerodayinitiative.com/advisories/ZDI-14-385/ - http://www.securityfocus.com/bid/712
m/vulnerabilities/98911 - http://www.zerodayinitiative.com/advisories/ZDI-14-385/ - http://www.securityfocus.com/bid/71241
CVE ID: CVE-2014-8421 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T13:18:48.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of (1) ConfigureCoreFile.sh, (2) Traceroute.sh, (3) apps.sh, (4) conversion_java2native.sh, (5) coreCompression.sh, (6) deletePasswd.sh, (7) findHealthSvcFDs.sh, (8) fw_printenv.sh, (9) fw_setenv.sh, (10) hw_wd_kicker.sh, (11) new_rootfs.sh, (12) opera_killSnmpd.sh, (13) opera_startSnmpd.sh, (14) rebootOperaSoftware.sh, (15) removeLogFil
h, (11) new_rootfs.sh, (12) opera_killSnmpd.sh, (13) opera_startSnmpd.sh, (14) rebootOperaSoftware.sh, (15) removeLogFiles.sh, (16) runOperaServices.sh, (17) setPasswd.sh, (18) startAccTestSvcs.sh, (19) usbNotification.sh, or (20) appWeb in /Opera_Deploy. Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-1501-02.pdf - https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt
CVE ID: CVE-2014-8422 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T13:18:48.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-1501-02.pdf - https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt
CVE ID: CVE-2014-8423 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:18:48.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-389/
CVE ID: CVE-2014-8424 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:18:47.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-388/
CVE ID: CVE-2014-8425 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:18:48.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-387/
CVE ID: CVE-2014-8426 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:18:48.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130027/Barracuda-Load-Balancer-ADC-Key-Recovery-Password-Reset.html - http://seclists.org/fulldisclosure/2015/Jan/76
CVE ID: CVE-2014-8428 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:18:48.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130027/Barracuda-Load-Balancer-ADC-Key-Recovery-Password-Reset.html - http://seclists.org/fulldisclosure/2015/Jan/76
CVE ID: CVE-2014-8429 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:18:48.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1.0.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts via a crafted request to the owner/users page. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23240 - http://www.securityfocus.com/archive/1/534096/100/0/threaded
CVE ID: CVE-2014-8437 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T13:18:48.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98628 - http://www.securityfocus
ucts/flash-player/apsb14-24.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98628 - http://www.securityfocus.com/bid/71036 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
CVE ID: CVE-2014-8438 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T13:18:48.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.htm
nalyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - http://www.securityfocus.com/bid/71049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98619 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
CVE ID: CVE-2014-8439 State: PUBLISHED Published: 2014-11-25T23:00:00.000Z Last Updated: 2025-10-22T00:05:34.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98932 - https://www.f-
iner: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98932 - https://www.f-secure.com/weblog/archives/00002768.html - http://www.securitytracker.com/id/1031259 - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html - http://www.securityfocus.com/bid/71289 - http://secunia.com/advisories/60217 - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html - http://rhn.redhat.com/errata/RHSA-2014-1915.html - http://helpx.adobe.com/security/products/flash-player/apsb14-22.html - http://helpx.adobe.com/security/products/flash-player/apsb14-
.adobe.com/security/products/flash-player/apsb14-22.html - http://helpx.adobe.com/security/products/flash-player/apsb14-26.html
CVE ID: CVE-2014-8440 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T13:18:48.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/secu
and CVE-2014-8441. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1081 - https://www.exploit-db.com/exploits/36880/ - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98615 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://www.securityfocus.com/bid/71047
CVE ID: CVE-2014-8441 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T13:18:48.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/pro
and CVE-2014-8440. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - http://www.securityfocus.com/bid/71050 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98616
CVE ID: CVE-2014-8442 State: PUBLISHED Published: 2014-11-11T23:00:00 Last Updated: 2024-08-06T13:18:48.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity to Medium Integrity by leveraging incorrect permissions. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - https://exchange.xforce.ibmcloud.com/vulner
es: - http://helpx.adobe.com/security/products/flash-player/apsb14-24.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98630 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://www.securityfocus.com/bid/71040
CVE ID: CVE-2014-8443 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
CVE ID: CVE-2014-8444 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8445 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8446 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8447 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8448 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8451. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8449 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8450 State: PUBLISHED Published: 2015-07-15T14:00:00 Last Updated: 2024-08-06T13:18:48.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-4449, CVE-2015-4450, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker
015-5089, and CVE-2015-5092. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032892 - https://helpx.adobe.com/security/products/reader/apsb15-15.html - http://www.securityfocus.com/bid/75742
CVE ID: CVE-2014-8451 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8448. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8452 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8453 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8454 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8455 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8456 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8457 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8458 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8459 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8460 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-9159. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8461 State: PUBLISHED Published: 2014-12-10T21:00:00 Last Updated: 2024-08-06T13:18:48.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-9158. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE ID: CVE-2014-8469 State: PUBLISHED Published: 2014-11-21T15:00:00 Last Updated: 2024-08-06T13:18:48.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrary web script or HTML via the User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/50 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98727 - http://packetstormsecurity.com/files/129153/PHPFox-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/71180 - http://www.exploit-db.com/exploits/35274
CVE ID: CVE-2014-8471 State: PUBLISHED Published: 2014-11-04T20:00:00 Last Updated: 2024-08-06T13:18:48.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70919 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/98534 - http://www.securitytracker.com/id/1031214