Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8688 State: PUBLISHED Published: 2017-03-14T09:02:00 Last Updated: 2024-08-06T13:26:02.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zimperium.com/telegram-hack/
CVE ID: CVE-2014-8690 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T13:26:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, and 2.3.x before 2.3.1 patch 4 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) src parameter in a none action to index.php, or the (3) "First Name" or (4) "Last Name" field to users/edituser. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130382/Exponent-CMS-2.3.1-Cross-Site-Scripting.html - http://www.securitytr
nces: - http://packetstormsecurity.com/files/130382/Exponent-CMS-2.3.1-Cross-Site-Scripting.html - http://www.securitytracker.com/id/1031775 - http://osvdb.org/show/osvdb/118263 - http://osvdb.org/show/osvdb/118345 - http://www.exponentcms.org/news/show/title/corrected-security-patches-released-for-v2-1-4-v2-2-3-and-v2-3-0 - http://www.exploit-db.com/exploits/36059 - http://exponentcms.lighthouseapp.com/projects/61783/tickets/1230-universal-cross-site-scripting-in-exponent-cms-231-and-prior - https://exchange.xforce.ibmcloud.com/vulnerabilities/100877
CVE ID: CVE-2014-8701 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/portfolio.php - http://rossmarks.uk/whitepapers/wonder_cms_2014.txt
CVE ID: CVE-2014-8702 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97192 - http://rossmarks.uk/portfolio.php - http://rossmarks.uk/whitepapers/wonder_cms_2014.txt
CVE ID: CVE-2014-8703 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/portfolio.php - http://rossmarks.uk/whitepapers/wonder_cms_2014.txt
CVE ID: CVE-2014-8704 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2014-8705 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/portfolio.php - http://rossmarks.uk/whitepapers/wonder_cms_2014.txt
CVE ID: CVE-2014-8706 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) adding non-alphanumeric chars to "PHPSESSID"; (3) changing the image parameter to an array; or (4) changing the image parameter to a string, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2014-8707 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2014-8708 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2014-8709 State: PUBLISHED Published: 2014-11-10T11:00:00 Last Updated: 2024-08-06T13:26:02.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037968 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f - http://rhn.redhat.com/errata/RHS
l - https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.openwall.com/lists/oss-security/2014/11/09/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98922 - http://rhn.redhat.com/errata/RHSA-2015-1272.html - http://www.securityfocus.com/bid/70965 - https://source.android.com/security/bulletin/2017-03-01.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=c
e.android.com/security/bulletin/2017-03-01.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338f977f4eb441e69bb9a46eaa0ac715c931a67f
CVE ID: CVE-2014-8710 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:02.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60290 - http://secunia.com/advisories/60231 - http://www.wireshark.org/security/wnpa-sec-2014-20.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10662 - http://www.oracle.com/technet
curity/wnpa-sec-2014-20.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10662 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/71069 - http://rhn.redhat.com/errata/RHSA-2015-1460.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2bd15c7cefcf87aa6b2d9d53477f0ece897ba620 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2014/dsa-3076 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html
CVE ID: CVE-2014-8711 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:02.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71070 - http://secunia.com/advisories/60290 - http://secunia.com/advisories/60231 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rh
a.com/advisories/60231 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1460.html - http://www.wireshark.org/security/wnpa-sec-2014-21.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2014/dsa-3076 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8f62bb7cce5a82baa543b14800fd7c12548b497a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10582 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html - https://code.wireshark.o
04.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8def8ef9c40189472a46d9b1ad95289780e09af5
CVE ID: CVE-2014-8712 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:02.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=41f6923b3049dfb57bef544a4c580f256f807e85 - http://secunia.com/advisories/60290 - http://secunia.c
ark.git%3Ba=commit%3Bh=41f6923b3049dfb57bef544a4c580f256f807e85 - http://secunia.com/advisories/60290 - http://secunia.com/advisories/60231 - http://www.securityfocus.com/bid/71071 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.wireshark.org/security/wnpa-sec-2014-22.html - http://rhn.redhat.com/errata/RHSA-2015-1460.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2014/dsa-3076 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10628 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-Dece
pensuse.org/opensuse-updates/2014-11/msg00104.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html
CVE ID: CVE-2014-8713 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:02.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60290 - http://secunia.com/advisories/60231 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10552 - http://www.oracle.com/technetwork/security-advisory/cpu
31 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10552 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b9988e2bbfc7c6c41ef82c559bd11a8c19170491 - http://www.wireshark.org/security/wnpa-sec-2014-22.html - http://rhn.redhat.com/errata/RHSA-2015-1460.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2014/dsa-3076 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - http://www.securityfocus.com/bid/71073 - http://list
http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - http://www.securityfocus.com/bid/71073 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html
CVE ID: CVE-2014-8714 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:02.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60290 - http://secunia.com/advisories/60231 - http://www.wireshark.org/security/wnpa-sec-2014-23.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - h
ark.org/security/wnpa-sec-2014-23.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bc2726578156f3608960fc65ce1f691639e6addc - http://rhn.redhat.com/errata/RHSA-2015-1460.html - http://www.securityfocus.com/bid/71072 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.debian.org/security/2014/dsa-3076 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1463db37d9bbc9cd532afdf2817caaf8eb367831 - http://lists.opensuse.org/opensuse-updates/20
?p=wireshark.git%3Ba=commit%3Bh=1463db37d9bbc9cd532afdf2817caaf8eb367831 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10596 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html
CVE ID: CVE-2014-8716 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T13:26:02.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456 - http://www.securityfocus.com/bid/70992 - https://bugzilla.redhat.com/show_bug.cgi?id=1164248
CVE ID: CVE-2014-8722 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3) data/other/authorization.xml, or (4) data/other/appid.xml. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/getSimple_cms_3.3.4.txt - http://rossmarks.uk/portfolio.php - http://packetstormsecurity.com/files/162906/GetSimple-CMS-3.3.4-Information-Disclosure.html
CVE ID: CVE-2014-8723 State: PUBLISHED Published: 2017-03-17T14:00:00 Last Updated: 2024-08-06T13:26:02.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) plugins/InnovationPlugin.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://rossmarks.uk/whitepapers/getSimple_cms_3.3.4.txt - http://rossmarks.uk/portfolio.php
CVE ID: CVE-2014-8724 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:26:02.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the "Cache key" in the HTML-Comments, as demonstrated by the PATH_INFO to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/w3-total-cache/changelog/ - https://www.secuvera.de/advisories/secuvera-SA-2014-01.txt - http://packetstormsecurity.com/files/129626/W3-Total-Cache-0.9
ps://www.secuvera.de/advisories/secuvera-SA-2014-01.txt - http://packetstormsecurity.com/files/129626/W3-Total-Cache-0.9.4-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534266/100/0/threaded
CVE ID: CVE-2014-8727 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:26:02.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrator" or "Administrator" role to enumerate and delete arbitrary files via a .. (dot dot) in the name parameter to (1) tmui/Control/jspmap/tmui/system/archive/properties.jsp or (2) tmui/Control/form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031216 - http://packetstormsecurity.com/files/129084/F5-BIG-IP-10.1.0-Directory-Traversal.html - https://exchange.x
/id/1031216 - http://packetstormsecurity.com/files/129084/F5-BIG-IP-10.1.0-Directory-Traversal.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98676 - http://www.securityfocus.com/bid/71063 - http://www.exploit-db.com/exploits/35222 - https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote_11_0_0_ltm.html - https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13109.html
CVE ID: CVE-2014-8728 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:26:02.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_user[name] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35214
CVE ID: CVE-2014-8730 State: PUBLISHED Published: 2014-12-10T00:00:00 Last Updated: 2024-08-06T13:26:02.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when term
0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62167 - http://www.openwall.com/lists/oss-security/2014/12/09/27 - http://marc.info/?l=bugtraq&m=1443
nia.com/advisories/62167 - http://www.openwall.com/lists/oss-security/2014/12/09/27 - http://marc.info/?l=bugtraq&m=144372772101168&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21693495 - https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151 - http://secunia.com/advisories/62224 - https://support.lenovo.com/us/en/product_security/poodle - https://www.imperialviolet.org/2014/12/08/poodleagain.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635 - http://www-01.ibm.com/support/docview.wss?uid=swg21693271 - http://www-01.ibm.com/support/docview.wss?uid=swg21693337 - http://secunia.com/advisories/62388 - https://support.lenovo.co
p://www-01.ibm.com/support/docview.wss?uid=swg21693337 - http://secunia.com/advisories/62388 - https://support.lenovo.com/product_security/poodle - https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html
CVE ID: CVE-2014-8731 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T13:26:02.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/533968/100/0/threaded - http://www.securityfocus.com/bid/71059 - http://www.securityfocus.com/archive/1/533980/100/0/threaded - http://packetstormsecurity.com/files/129089/PHPMemcachedAdmin-1.2.2-Remote-Code-Execution.h
ve/1/533980/100/0/threaded - http://packetstormsecurity.com/files/129089/PHPMemcachedAdmin-1.2.2-Remote-Code-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98638
CVE ID: CVE-2014-8732 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:26:02.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129090/PHPMemcachedAdmin-1.2.2-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/71058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98639 - http://www.securityfocus.com/archive/1/533969/100/0/threaded - http://www.securityfocus.com/archive/1
rabilities/98639 - http://www.securityfocus.com/archive/1/533969/100/0/threaded - http://www.securityfocus.com/archive/1/533981/100/0/threaded
CVE ID: CVE-2014-8733 State: PUBLISHED Published: 2015-02-10T19:00:00 Last Updated: 2024-08-06T13:26:02.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudera.com/content/cloudera/en/documentation/security-bulletins/Security-Bulletin/csb_topic_2.html
CVE ID: CVE-2014-8734 State: PUBLISHED Published: 2014-11-12T16:00:00 Last Updated: 2024-08-06T13:26:02.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2365259 - https://www.drupal.org/node/2365685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98445