Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-5002 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/07/23 - http://www.openwall.com/lists/oss-security/2014/07/17/5 - https://github.com/panthomakos/lynx/issues/3 - http://www.vapid.dhs.org/advisories/lynx-0.2.0.html
CVE ID: CVE-2014-5003 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: chef/travis-cookbooks/ci_environment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 for Ruby allows local users to write to arbitrary files and gain privileges via a symlink attack on /tmp/perlbrew-installer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.vapid.dhs.org/advisories/ciborg-3.0.0.html - http://www.openwall.com/lists/oss-security/2014/07/07/24
CVE ID: CVE-2014-5004 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-06T11:34:37.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/17/5 - http://www.openwall.com/lists/oss-security/2014/07/10/6 - http://www.vapid.dhs.org/advisories/brbackup-0.1.1.html - http://www.securityfocus.com/bid/68506
CVE ID: CVE-2014-5005 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T11:34:37.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Aug/88 - https://www.manageengine.com/products/desktop-central/remote-code-execution.html - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_file_upload.txt - http://osvdb.org/sh
ion.html - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_file_upload.txt - http://osvdb.org/show/osvdb/110643 - http://www.exploit-db.com/exploits/34594
CVE ID: CVE-2014-5006 State: PUBLISHED Published: 2014-10-21T15:00:00 Last Updated: 2024-08-06T11:34:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter to mdm/mdmLogUploader. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Aug/88 - https://www.manageengine.com/products/desktop-central/remote-code-execution.html - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_file_upload.txt - http://www.exploit-db.com/expl
https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_file_upload.txt - http://www.exploit-db.com/exploits/34594 - http://osvdb.org/show/osvdb/110644
CVE ID: CVE-2014-5007 State: PUBLISHED Published: 2020-01-17T21:59:55 Last Updated: 2024-08-06T11:34:37.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/remote-code-execution.html - http://seclists.org/fulldisclosure/2014/Aug/88
CVE ID: CVE-2014-5008 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-06T11:34:37.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snoopy allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68419 - http://www.openwall.com/lists/oss-security/2014/07/18/2 - http://www.debian.org/security/2015/dsa-3248 - http://www.openwall.com/lists/oss-security/2014/07/16/10 - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264 - http://rhn.redhat.com/errata/RHSA-2017-0212.html - http://rhn.redhat.com/errata/RHSA-2017-0213.html - http://www.openwall.com/lists/oss-se
com/errata/RHSA-2017-0212.html - http://rhn.redhat.com/errata/RHSA-2017-0213.html - http://www.openwall.com/lists/oss-security/2016/12/21/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1121497 - http://rhn.redhat.com/errata/RHSA-2017-0214.html - http://rhn.redhat.com/errata/RHSA-2017-0211.html - http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.28
CVE ID: CVE-2014-5009 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-06T11:34:37.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/09/11 - http://www.securityfocus.com/bid/68783 - http://www.openwall.com/lists/oss-security/2014/07/18/2 - http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?r1=1.28&r2=1.29 - http://www.openwall.com/lists/oss-security/2014/07/16/10 - https://www-01.ibm.com
opy/Snoopy.class.php?r1=1.28&r2=1.29 - http://www.openwall.com/lists/oss-security/2014/07/16/10 - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264 - http://rhn.redhat.com/errata/RHSA-2017-0212.html - http://rhn.redhat.com/errata/RHSA-2017-0213.html - https://bugzilla.redhat.com/show_bug.cgi?id=1121497 - https://github.com/cogdog/feed2js/pull/12#issuecomment-48283706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94738 - http://rhn.redhat.com/errata/RHSA-2017-0214.html - http://rhn.redhat.com/errata/RHSA-2017-0211.html
CVE ID: CVE-2014-5011 State: PUBLISHED Published: 2020-01-10T05:25:20 Last Updated: 2024-08-06T11:34:37.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOMPDF before 0.6.2 allows Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dompdf/dompdf/releases/tag/v0.6.2 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
CVE ID: CVE-2014-5012 State: PUBLISHED Published: 2020-01-10T05:25:09 Last Updated: 2024-08-06T11:34:37.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOMPDF before 0.6.2 allows denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dompdf/dompdf/releases/tag/v0.6.2 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
CVE ID: CVE-2014-5013 State: PUBLISHED Published: 2020-01-10T05:25:00 Last Updated: 2024-08-06T11:34:37.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dompdf/dompdf/releases/tag/v0.6.2 - https://github.com/dompdf/dompdf/compare/v0.6.1...v0.6.2
CVE ID: CVE-2014-5014 State: PUBLISHED Published: 2018-04-25T17:00:00 Last Updated: 2024-08-06T11:34:37.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-flash-uploader/changelog/ - https://wordpress.org/support/topic/vulnerability-discovered-2/
CVE ID: CVE-2014-5015 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:34:37.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68752 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-007.txt.asc - http://www.eterna.com.au/bozohttpd/CHANGES - http://www.osvdb.org/109283 - http://www.eterna.com.au/bozohttp
7.txt.asc - http://www.eterna.com.au/bozohttpd/CHANGES - http://www.osvdb.org/109283 - http://www.eterna.com.au/bozohttpd/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/94751 - http://seclists.org/oss-sec/2014/q3/180
CVE ID: CVE-2014-5016 State: PUBLISHED Published: 2014-07-21T14:00:00Z Last Updated: 2024-09-16T19:56:16.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LimeSurvey 2.05+ Build 140618 allow remote attackers to inject arbitrary web script or HTML via (1) the pid attribute to the getAttribute_json function to application/controllers/admin/participantsaction.php in CPDB, (2) the sa parameter to application/views/admin/globalSettings_view.php, or (3) a crafted CSV file to the "Import CSV" functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/d23fbbd6c843
ional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/d23fbbd6c8434169967cf8bd2c5a4a0b569c352a - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html
CVE ID: CVE-2014-5017 State: PUBLISHED Published: 2014-07-21T14:00:00Z Last Updated: 2024-09-16T22:35:15.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request to admin/participants/sa/getParticipants_json, related to a search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html - https://github.com/LimeSurvey/LimeSurvey/commit/9938bcd1df8ea2705
Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html - https://github.com/LimeSurvey/LimeSurvey/commit/9938bcd1df8ea27052557c722a67b00c0e7d6cb6
CVE ID: CVE-2014-5018 State: PUBLISHED Published: 2014-07-21T14:00:00Z Last Updated: 2024-09-16T19:25:30.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127369/Lime-Survey-2.05-Build-140618-XSS-SQL-Injection.html - https://github.com/LimeSurvey/LimeSurvey/commit/3a6dd6b44cef2fa3f96f403e1cb971d8d0d694b5
CVE ID: CVE-2014-5019 State: PUBLISHED Published: 2014-07-22T14:00:00Z Last Updated: 2024-09-16T20:06:54.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP Host header, related to determining which configuration file to use. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2983 - https://www.drupal.org/SA-CORE-2014-003
CVE ID: CVE-2014-5020 State: PUBLISHED Published: 2014-07-22T14:00:00Z Last Updated: 2024-09-16T18:08:33.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2983 - https://www.drupal.org/SA-CORE-2014-003
CVE ID: CVE-2014-5021 State: PUBLISHED Published: 2014-07-22T14:00:00Z Last Updated: 2024-09-17T02:46:40.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2983 - https://www.drupal.org/SA-CORE-2014-003
CVE ID: CVE-2014-5022 State: PUBLISHED Published: 2014-07-22T14:00:00Z Last Updated: 2024-09-16T17:34:16.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled textfield and a file field. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2983 - https://www.drupal.org/SA-CORE-2014-003
CVE ID: CVE-2014-5023 State: PUBLISHED Published: 2014-07-22T14:00:00Z Last Updated: 2024-09-17T03:48:16.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command. Additional Analyst Notes: - CVE Program Container: References: - http://hatriot.github.io/blog/2014/06/29/gitlist-rce/
CVE ID: CVE-2014-5024 State: PUBLISHED Published: 2014-07-24T14:00:00 Last Updated: 2024-08-06T11:34:37.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68829 - https://support.software.dell.com/product-notification/128245 - http://seclists.org/fulldisclosure/2014/Jul/125 - http://secunia.com/advisories/60287 - http://packetstormsecurity.com/files/127575/SonicWALL-GMS-7.2-Buil
/2014/Jul/125 - http://secunia.com/advisories/60287 - http://packetstormsecurity.com/files/127575/SonicWALL-GMS-7.2-Build-7221.1701-Cross-Site-Scripting.html
CVE ID: CVE-2014-5025 State: PUBLISHED Published: 2014-10-20T17:00:00 Last Updated: 2024-08-06T11:34:37.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrary web script or HTML via the name_cache parameter in a ds_edit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3007 - http://bugs.cacti.net/view.php?id=2456 - http://www.openwall.com/lists/oss-security/2014/07/22/9 - http://www.securityfocus.com/bid/68759 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.
ity/2014/07/22/9 - http://www.securityfocus.com/bid/68759 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94814 - https://security.gentoo.org/glsa/201509-03
CVE ID: CVE-2014-5026 State: PUBLISHED Published: 2014-10-20T17:00:00 Last Updated: 2024-08-06T11:34:37.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a (1) Graph Tree Title in a delete or (2) edit action; (3) CDEF Name, (4) Data Input Method Name, or (5) Host Templates Name in a delete action; (6) Data Source Title; (7) Graph Title; or (8) Graph Template Name in a delete or (9) duplicate action. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3007 - http://
Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3007 - http://bugs.cacti.net/view.php?id=2456 - http://www.openwall.com/lists/oss-security/2014/07/22/9 - http://www.securityfocus.com/bid/68759 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/94816 - http://seclists.org/oss-sec/2014/q3/244 - https://security.gentoo.org/glsa/201509-03
CVE ID: CVE-2014-5027 State: PUBLISHED Published: 2014-07-25T19:00:00 Last Updated: 2024-08-06T11:34:37.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q3/207 - https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4 - http://secunia.com/advisories/60243 - https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases - http://seclists.o
/60243 - https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases - http://seclists.org/oss-sec/2014/q3/219 - http://www.securityfocus.com/bid/68858 - https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
CVE ID: CVE-2014-5028 State: PUBLISHED Published: 2018-03-29T18:00:00 Last Updated: 2024-08-06T11:34:37.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids. Additional Analyst Notes: - CVE Program Container: References: - https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4 - http://www.openwall.com/lists/oss-security/2014/07/22/12 - https://bugzilla.redhat.com/show_bug.cgi?id=1123692 - https://exchange
w.openwall.com/lists/oss-security/2014/07/22/12 - https://bugzilla.redhat.com/show_bug.cgi?id=1123692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94813 - https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases - https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
CVE ID: CVE-2014-5029 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T11:34:37.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537. Additional Analyst Notes: - CVE Program Container: References: - https://cups.org/str.php?L4455 - http://www.ubuntu.com/usn/USN-2341-1 - http://www.openwall.com/lists/oss-security/2014/07/22/13 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - http://secunia.com/advisories/
com/lists/oss-security/2014/07/22/13 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - http://secunia.com/advisories/60787 - http://www.debian.org/security/2014/dsa-2990 - http://www.openwall.com/lists/oss-security/2014/07/22/2 - http://advisories.mageia.org/MGASA-2014-0313.html - http://secunia.com/advisories/60509 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:108
CVE ID: CVE-2014-5030 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T11:34:37.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py. Additional Analyst Notes: - CVE Program Container: References: - https://cups.org/str.php?L4455 - http://www.ubuntu.com/usn/USN-2341-1 - http://www.openwall.com/lists/oss-security/2014/07/22/13 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - http://secunia.com/advisories/60787 - http://www.debian.org/security/2014/dsa-2990 - http://www.openwall.com
1388.html - http://secunia.com/advisories/60787 - http://www.debian.org/security/2014/dsa-2990 - http://www.openwall.com/lists/oss-security/2014/07/22/2 - http://advisories.mageia.org/MGASA-2014-0313.html - http://secunia.com/advisories/60509 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:108
CVE ID: CVE-2014-5031 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T11:34:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cups.org/str.php?L4455 - http://www.ubuntu.com/usn/USN-2341-1 - http://www.openwall.com/lists/oss-security/2014/07/22/13 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - http://secunia.com/advisories/60787 - http://www.debian.org/security/2014/dsa-2990 - http://www.openw
A-2014-1388.html - http://secunia.com/advisories/60787 - http://www.debian.org/security/2014/dsa-2990 - http://www.openwall.com/lists/oss-security/2014/07/22/2 - http://advisories.mageia.org/MGASA-2014-0313.html - http://secunia.com/advisories/60509 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:108
CVE ID: CVE-2014-5032 State: PUBLISHED Published: 2015-04-14T18:00:00 Last Updated: 2024-08-06T11:34:37.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:167 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=325 - http://advisories.mageia.org/MGASA-2015-0017.html - https://forge.indepnet.net/issues/4984
CVE ID: CVE-2014-5033 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T11:34:37.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60385 - http://rhn.redhat.com/errata/RHSA-2014-1359.html - http://www.debian.org/securit