Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
88c730cc75dc3b76c34b76271fbd407fb84 - http://rhn.redhat.com/errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RHSA-2015-0235.html - https://github.com/droolsjbpm/jbpm-designer/commit/69d8f6b7a099594bd0536f88d528753875857088 - https://github.com/droolsjbpm/jbpm-designer/commit/e4691214a100718c3b1c9b93d4db466672ba0be3 - https://github.com/droolsjbpm/jbpm-designer/commit/be3968d51299f6de0011324be60223ede49ecb1c
CVE ID: CVE-2014-3683 State: PUBLISHED Published: 2014-11-02T00:00:00 Last Updated: 2024-08-06T10:50:18.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg000
pensuse.org/opensuse-security-announce/2014-10/msg00005.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html - http://www.openwall.com/lists/oss-security/2014/09/30/15 - http://secunia.com/advisories/61494 - http://www.openwall.com/lists/oss-security/2014/10/03/1 - http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/ - http://www.ubuntu.com/usn/USN-2381-1 - http://www.debian.org/security/2014/dsa-3047 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-3684 State: PUBLISHED Published: 2014-10-30T14:00:00 Last Updated: 2024-08-06T10:50:18.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html - http://openwall.com/lists/oss-security/2014/10/02/45 -
doraproject.org/pipermail/package-announce/2015-May/159259.html - http://openwall.com/lists/oss-security/2014/10/02/45 - http://advisories.mageia.org/MGASA-2014-0408.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html - http://secunia.com/advisories/61960 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html - http://www.debian.org/security/2014/dsa-3058 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:124 - http://openwall.com/lists/oss-security/2014/10/02/44 - http://secunia.com/advisories/61350
CVE ID: CVE-2014-3685 State: REJECTED Published: 2015-05-19T10:00:00 Last Updated: 2015-05-19T02:57:00 Description: No description available.
CVE ID: CVE-2014-3686 State: PUBLISHED Published: 2014-10-16T00:00:00 Last Updated: 2024-08-06T10:50:18.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60366 - http://www.debian.org/security/2014/dsa-3052 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00028.html - http://secunia.com/advisories/60428 - http://w1.fi/security/2014-1/ - http://advisories.mageia.org/
4-10/msg00028.html - http://secunia.com/advisories/60428 - http://w1.fi/security/2014-1/ - http://advisories.mageia.org/MGASA-2014-0429.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:120 - http://www.openwall.com/lists/oss-security/2014/10/09/28 - http://rhn.redhat.com/errata/RHSA-2014-1956.html - http://secunia.com/advisories/61271 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00027.html - https://security.gentoo.org/glsa/201606-17 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1151259 - http://www.ubuntu.com/usn/USN-2383-1 - http://www.securityfocus.com/bid/70396
CVE ID: CVE-2014-3687 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:18.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-3087.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://marc.info/?l=bugtraq&m=142722450701342&w=2 -
ists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2418-1 - http://linux.oracle.com/errata/ELSA-2014-3089.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2015-0062.html - http://www.ubuntu.com/usn/USN-2417-1 - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html - https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395 - http://git.kernel.org/?p=linux
tml - https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69040d8e39f20d5215a03502a8e8b4c6ab78395 - http://linux.oracle.com/errata/ELSA-2014-3088.html - http://www.debian.org/security/2014/dsa-3060 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://secunia.com/advisories/62428 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.securityfocus.com/bid/70766 - https://bugzilla.redhat.com/show_bug.cgi?id=1155731 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://rhn.redhat.com/e
ug.cgi?id=1155731 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://rhn.redhat.com/errata/RHSA-2015-0115.html
CVE ID: CVE-2014-3688 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T10:50:18.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/13/8 - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-0
1/13/8 - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2418-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2015-0062.html - http://www.ubuntu.com/usn/USN-2417-1 - http://marc.info/?l=bugtraq&m=142722544401658&w=2 - http://www.debian.org/security/2014/dsa-3060 - https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4 - http://lists.opensuse.org/opensuse-security-announ
nux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=1155745 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 - http://rhn.redhat.com/errata/RHSA-2015-0115.html
CVE ID: CVE-2014-3689 State: PUBLISHED Published: 2014-11-14T15:00:00 Last Updated: 2024-08-06T10:50:17.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62144 - http://secunia.com/advisories/62143 - http://www.debian.org/security/2014/dsa-3067 - https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html - http://www.ubuntu.com/usn/USN-2409-1 - http://secunia.com/advisories/60923 - http
mu-devel%40nongnu.org/msg261580.html - http://www.ubuntu.com/usn/USN-2409-1 - http://secunia.com/advisories/60923 - http://www.debian.org/security/2014/dsa-3066 - http://www.osvdb.org/114397
CVE ID: CVE-2014-3690 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T10:50:18.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/29/7 - http://lists
yst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/10/29/7 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2418-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2 - http://www.ubuntu.com/usn/USN-2417-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html - http://www.ubuntu.com/usn/USN-2419-1 - http://www.debian.org/security/2014/dsa-3060 - http://www.securityfocus.com/bid/70691 - http://rhn.redhat.com/errata/RHSA-2015-0864.htm
an.org/security/2014/dsa-3060 - http://www.securityfocus.com/bid/70691 - http://rhn.redhat.com/errata/RHSA-2015-0864.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a - http://rhn.redhat.com/errata/RHSA-2015-0782.html - http://secunia.com/advisories/60174 - http://www.ubuntu.com/usn/USN-2421-1 - http://www.ubuntu.com/usn/USN-2420-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1153322 -
buntu.com/usn/USN-2421-1 - http://www.ubuntu.com/usn/USN-2420-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1153322 - http://www.openwall.com/lists/oss-security/2014/10/21/4
CVE ID: CVE-2014-3691 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T10:50:17.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/smart-proxy/pull/217 - http://projects.theforeman.org/issues/7822 - http://rhn.redhat.com/errata/RHSA-2015-0287.html - http://rhn.redhat.com/errata/RHSA-2015-0288.html -
org/issues/7822 - http://rhn.redhat.com/errata/RHSA-2015-0287.html - http://rhn.redhat.com/errata/RHSA-2015-0288.html - https://groups.google.com/forum/#%21topic/foreman-announce/jXC5ixybjqo
CVE ID: CVE-2014-3692 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T10:50:18.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62255 - http://rhn.redhat.com/errata/RHSA-2015-0028.html
CVE ID: CVE-2014-3693 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T10:50:18.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/ - http://secunia.com/advisories/62396 - http://www.securityfocus.com/bid/71351 - http://www.ubuntu.com/usn/USN-2398-1 - http://rhn.redh
a.com/advisories/62396 - http://www.securityfocus.com/bid/71351 - http://www.ubuntu.com/usn/USN-2398-1 - http://rhn.redhat.com/errata/RHSA-2015-0377.html - http://secunia.com/advisories/62132 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html - http://secunia.com/advisories/62111 - https://security.gentoo.org/glsa/201603-05
CVE ID: CVE-2014-3694 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:17.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/news/security/?id=86 - https://access.redhat.com/errata/RHSA-2017:1854 - http://hg.pidgin.im/pid
ces: - http://pidgin.im/news/security/?id=86 - https://access.redhat.com/errata/RHSA-2017:1854 - http://hg.pidgin.im/pidgin/main/rev/2e4475087f04 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http://secunia.com/advisories/60741 - http://www.debian.org/security/2014/dsa-3055 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html - http://secunia.com/advisories/61968
CVE ID: CVE-2014-3695 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/news/security/?id=87 - https://access.redhat.com/errata/RHSA-2017:1854 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http://secunia.com/advisories/60741 - http://hg.pidgin.im/pidgin/main/rev/6
org/opensuse-updates/2014-11/msg00023.html - http://secunia.com/advisories/60741 - http://hg.pidgin.im/pidgin/main/rev/6436e14bdb9d - http://www.debian.org/security/2014/dsa-3055 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html - http://secunia.com/advisories/61968
CVE ID: CVE-2014-3696 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/news/security/?id=88 - http://hg.pidgin.im/pidgin/main/rev/44fd89158777 - https://access.redhat.com/errata/RHSA-2017:1854 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg0002
rrata/RHSA-2017:1854 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http://secunia.com/advisories/60741 - http://www.debian.org/security/2014/dsa-3055 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html - http://secunia.com/advisories/61968
CVE ID: CVE-2014-3697 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme. Additional Analyst Notes: - CVE Program Container: References: - http://pidgin.im/news/security/?id=89 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html - http://hg.pidgin.im/pidgin/main/rev/68b8eb10977f
CVE ID: CVE-2014-3698 State: PUBLISHED Published: 2014-10-29T10:00:00 Last Updated: 2024-08-06T10:50:18.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message. Additional Analyst Notes: - CVE Program Container: References: - http://hg.pidgin.im/pidgin/main/rev/ea46ab68f0dc - http://pidgin.im/news/security/?id=90 - https://access.redhat.com/errata/RHSA-2017:1854 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http
17:1854 - http://www.ubuntu.com/usn/USN-2390-1 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html - http://secunia.com/advisories/60741 - http://www.debian.org/security/2014/dsa-3055 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html - http://secunia.com/advisories/61968
CVE ID: CVE-2014-3699 State: PUBLISHED Published: 2019-12-15T21:19:39 Last Updated: 2024-08-06T10:50:18.266Z Vendors: eDeploy Products: eDeploy Problem Types: Remote code execution due to cPickle deserialization of untrusted data Description: eDeploy has RCE via cPickle deserialization of untrusted data Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-3699 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3699 - https://access.redhat.com/security/cve/cve-2014-3699
CVE ID: CVE-2014-3700 State: PUBLISHED Published: 2019-11-21T14:31:58 Last Updated: 2024-08-06T10:50:17.971Z Vendors: eDeploy Products: eDeploy Problem Types: Remote code execution due to eval() of untrusted data Description: eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-3700 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3700
CVE ID: CVE-2014-3701 State: PUBLISHED Published: 2019-12-15T21:21:24 Last Updated: 2024-08-06T10:50:18.265Z Vendors: eDeploy Products: eDeploy Problem Types: Multiple tmp file race condition flaws Description: eDeploy has tmp file race condition flaws Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-3701 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701 - https://access.redhat.com/security/cve/cve-2014-3701
CVE ID: CVE-2014-3702 State: PUBLISHED Published: 2017-10-16T15:00:00 Last Updated: 2024-08-06T10:50:17.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redhat-cip/edeploy/issues/231 - https://bugzilla.redhat.com/show_bug.cgi?id=1153470
CVE ID: CVE-2014-3703 State: PUBLISHED Published: 2014-12-02T01:00:00 Last Updated: 2024-08-06T10:50:18.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1691.html
CVE ID: CVE-2014-3704 State: PUBLISHED Published: 2014-10-16T00:00:00 Last Updated: 2024-08-06T10:50:17.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/SA-CORE-2014-005 - http://seclists.org/fulldisclosure/2014/Oct/75 - http://www.securityfocus.com/archive/1/533706/100/0/threaded - https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-aut
urityfocus.com/archive/1/533706/100/0/threaded - https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.html - http://www.exploit-db.com/exploits/34984 - http://www.exploit-db.com/exploits/35150 - http://www.openwall.com/lists/oss-security/2014/10/15/23 - http://secunia.com/advisories/59972 - http://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.html - http://www.exploit-db.com/exploits/34992 - http://www.debian.org/security/2014/dsa-3051 - http://www.securityfocus.com/bid/70595 - http://www.exploit-db.com/exploits/34993 - http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.html - http://osvdb
xploit-db.com/exploits/34993 - http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.html - http://osvdb.org/show/osvdb/113371 - https://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.html - http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.html
CVE ID: CVE-2014-3705 State: REJECTED Published: 2022-07-07T16:02:43 Last Updated: 2022-07-07T16:02:43 Description: No description available.
CVE ID: CVE-2014-3706 State: PUBLISHED Published: 2017-10-18T14:00:00 Last Updated: 2024-08-06T10:50:18.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101507 - https://bugzilla.redhat.com/show_bug.cgi?id=1154977