Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9183 State: PUBLISHED Published: 2014-12-02T18:00:00Z Last Updated: 2024-09-17T00:31:12.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129016/ZTE-831CII-Hardcoded-Credential-XSS-CSRF.html
CVE ID: CVE-2014-9184 State: PUBLISHED Published: 2014-12-02T18:00:00Z Last Updated: 2024-09-17T03:12:55.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129015/ZTE-ZXDSL-831CII-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2014-9185 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:40:24.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/70 - http://www.vulnerability-lab.com/get_content.php?id=1367 - https://github.com/Awilum/monstra-cms/issues/351 - http://www.securityfocus.com/archive/1/534271/100/0/threaded - http://packetstormsecurity.com/files/129624/Morfy-CMS-1.05-Remote-Com
ecurityfocus.com/archive/1/534271/100/0/threaded - http://packetstormsecurity.com/files/129624/Morfy-CMS-1.05-Remote-Command-Execution.html
CVE ID: CVE-2014-9186 State: PUBLISHED Published: 2019-04-08T15:09:55 Last Updated: 2024-08-06T13:40:24.560Z Vendors: Honeywell Products: Experion PKS Problem Types: CWE-98 Description: A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-ce
upgrade to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE ID: CVE-2014-9187 State: PUBLISHED Published: 2019-03-25T19:19:10 Last Updated: 2024-08-06T13:40:24.531Z Vendors: Honeywell Products: Experion PKS Problem Types: CWE-122 Description: Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA
d version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE ID: CVE-2014-9188 State: PUBLISHED Published: 2014-12-27T15:00:00 Last Updated: 2025-07-24T22:39:42.287Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Schneider Electric Products: ProClima Problem Types: CWE-77 Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided by researchers. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - https
- CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-350-01
CVE ID: CVE-2014-9189 State: PUBLISHED Published: 2019-03-25T19:10:47 Last Updated: 2024-08-06T13:40:23.163Z Vendors: Honeywell Products: Experion PKS Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-
to R400 to upgrade to a supported version. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE ID: CVE-2014-9190 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2025-07-24T22:42:57.203Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Schneider Electric Products: InTouch Access Anywhere Server Problem Types: CWE-121 Description: Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist. Additional Analyst Notes: - CVE Program Container: References: - https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000104.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-15-008
ocs/_SecurityBulletins/Security_Bulletin_LFSEC00000104.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-15-008-02
CVE ID: CVE-2014-9191 State: PUBLISHED Published: 2015-01-10T02:00:00 Last Updated: 2024-08-06T13:40:24.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service (DTM outage and FDT Frame application hang) by transmitting crafted response packets on the 4-20 mA current loop. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-008-01A - http://www2.emersonprocess.com/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf - http://www.securityfocus.com/bid/7195
nprocess.com/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf - http://www.securityfocus.com/bid/71952 - https://ics-cert.us-cert.gov/advisories/ICSA-15-237-01
CVE ID: CVE-2014-9192 State: PUBLISHED Published: 2014-12-11T15:00:00 Last Updated: 2025-07-25T16:46:02.667Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: Trihedral Engineering Products: VTS Problem Types: CWE-190 Description: Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02 - http://www.securityfocus.com/bid/71591 - http://www.tr
https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02 - http://www.securityfocus.com/bid/71591 - http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm
CVE ID: CVE-2014-9193 State: PUBLISHED Published: 2014-12-20T00:00:00 Last Updated: 2025-07-28T20:35:16.302Z Severity: N/A (CVSS 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C) Vendors: Innominate Products: mGuard Problem Types: CWE-269 Description: Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.innominate.com/data/downloads/software/innominate_security_advisory_20141217_001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-14-352-02
CVE ID: CVE-2014-9194 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-07-29T16:56:53.800Z Severity: N/A (CVSS 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C) Vendors: Arbiter Systems Products: Model 1094B GPS Substation Clock Problem Types: CWE-345 Description: Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-14-345-01 - http://www.arbiter.com/contact/index.php
CVE ID: CVE-2014-9195 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-09-05T21:03:14.656Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Phoenix Contact Products: ProConOs, MultiProg Problem Types: CWE-306 Description: Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-03 - https://www.exploit-db.com/exploits/37066/
CVE ID: CVE-2014-9196 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2025-09-05T21:11:15.864Z Severity: N/A (CVSS 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C) Vendors: Eaton’s Cooper Power Systems Products: Series Form 6, Idea/IdeaPLUS relays Problem Types: CWE-342 Description: Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75936 - https://www.cisa.gov/news-events/ics-advisories/ic
ram Container: References: - http://www.securityfocus.com/bid/75936 - https://www.cisa.gov/news-events/ics-advisories/icsa-15-006-01 - https://www.eaton.com/cybersecurity
CVE ID: CVE-2014-9197 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2025-09-05T21:19:01.472Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Schneider Electric Products: ETG3000 FactoryCast HMI Gateway Problem Types: CWE-306 Description: The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-020-02
CVE ID: CVE-2014-9198 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2025-09-05T21:18:01.615Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Schneider Electric Products: ETG3000 FactoryCast HMI Gateway Problem Types: CWE-798 Description: The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-020-02
CVE ID: CVE-2014-9199 State: PUBLISHED Published: 2015-01-17T02:00:00 Last Updated: 2025-09-05T21:23:35.441Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Clorius Controls Products: A/S Java web client Problem Types: CWE-326 Description: The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-02 - http://www.cloriuscontrols.com
CVE ID: CVE-2014-9200 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2025-09-05T21:34:15.852Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Schneider Electric Products: Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library, CANopen Communication Library, EtherNet/IP Communication Library, EM X80 Gateway DTM (MB TCP/SL), Advantys DTMs (OTB, STB), KINOS DTM, SOLO DTM, Xantrex DTM Problem Types: CWE-121 Description: Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and ea
Machine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01 - http://www.securityfocus.com/bid/72335 - https://www.cisa.gov/news-events/ics-advisories/icsa-15-027-02
CVE ID: CVE-2014-9201 State: PUBLISHED Published: 2015-06-05T10:00:00 Last Updated: 2024-08-06T13:40:24.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00, M-6200A Digital Voltage Regulator Control with firmware before D-0228V02.01.07, M-2001D Digital Tapchanger Control with firmware before D-0214V01.10.04, M-6283A Three Phase Digital Capacitor Bank Control with firmware before D-0346V03.00.02, M-6280A Digital Capacitor Bank Control with firmware before D-0254V03.05.05, and M-6280 Digital Capacitor Bank Control do not properly generate TCP initial sequence number (ISN) values, which m
05, and M-6280 Digital Capacitor Bank Control do not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-153-01
CVE ID: CVE-2014-9202 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T13:40:24.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-258-04
CVE ID: CVE-2014-9203 State: PUBLISHED Published: 2015-02-07T15:00:00 Last Updated: 2024-08-06T13:40:24.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.geoilandgas.com/securityadvisory - https://ics-cert.us-cert.gov/advisories/ICSA-15-03
ontainer: References: - http://www.geoilandgas.com/securityadvisory - https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01
CVE ID: CVE-2014-9204 State: PUBLISHED Published: 2015-05-17T01:00:00 Last Updated: 2024-08-06T13:40:24.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-111-02 - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646324
CVE ID: CVE-2014-9205 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T13:40:24.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01 - http://www.promotic.eu/en/pmdoc/News.htm - http://www.zerodayinitiative.com/advisories/ZDI-15-091/
CVE ID: CVE-2014-9206 State: PUBLISHED Published: 2015-03-14T01:00:00 Last Updated: 2024-08-06T13:40:25.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-055-03 - http://download.schneider-electric.com/files?p_File_Id=745435959&p_File_Name=SEVD-2015-050-01.pdf
CVE ID: CVE-2014-9207 State: PUBLISHED Published: 2015-03-14T01:00:00 Last Updated: 2024-08-06T13:40:24.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before UltimateAccess 3.02 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-069-01
CVE ID: CVE-2014-9208 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T13:40:24.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-251-01 - https://www.exploit-db.com/exploits/38108/
CVE ID: CVE-2014-9209 State: PUBLISHED Published: 2015-03-31T01:00:00 Last Updated: 2024-08-06T13:40:24.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323 - https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
CVE ID: CVE-2014-9210 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-9211 State: PUBLISHED Published: 2020-01-14T13:54:47 Last Updated: 2024-08-06T13:40:23.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClickDesk version 4.3 and below has persistent cross site scripting Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65971 - https://packetstormsecurity.com/files/author/11084/
CVE ID: CVE-2014-9212 State: PUBLISHED Published: 2014-12-05T15:00:00 Last Updated: 2024-08-06T13:40:24.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attackers to inject arbitrary web script or HTML via (1) an email hyperlink or the (2) style parameter in the image attribute section. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129372/Altitude-uAgent-Altitude-uCI-7.5-XSS.html
CVE ID: CVE-2014-9215 State: PUBLISHED Published: 2014-12-05T15:00:00 Last Updated: 2024-08-06T13:40:23.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128 allows remote attackers to execute arbitrary SQL commands via the email parameter in the register page to index.php. NOTE: the email parameter in the forget page vector is already covered by CVE-2012-4034.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534149/100/0/threaded - https://www.youtube.com/watch?v=AQiGvH5xrJg - http://www.itas.vn/news/ITAS-T
focus.com/archive/1/534149/100/0/threaded - https://www.youtube.com/watch?v=AQiGvH5xrJg - http://www.itas.vn/news/ITAS-Team-discovered-SQL-Injection-in-PBBoard-CMS-68.html
CVE ID: CVE-2014-9217 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T13:40:24.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99571 - http://www.graylog2.org/news/post/0010-graylog2-v0-92 - http://seclists.org/oss-sec/2014/q4/1130
CVE ID: CVE-2014-9218 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T13:40:24.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3382 - http://www.securityfocus.com/bid/71434 - https://github.com/phpmyadmin/phpmyadmin/commit/1ac863c7573d12012374d5d41e5c7dc5505ea6e1 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:243 - https://github
863c7573d12012374d5d41e5c7dc5505ea6e1 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:243 - https://github.com/phpmyadmin/phpmyadmin/commit/62b2c918d26cc78d1763945e3d44d1a63294a819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99140 - https://github.com/phpmyadmin/phpmyadmin/commit/095729d81205f15f40d216d25917017da4c2fff8 - http://www.phpmyadmin.net/home_page/security/PMASA-2014-17.php
CVE ID: CVE-2014-9219 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T13:40:24.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2014-18.php - http://www.mandriva.com/security/advisories?name=MDVSA-2014:243 - https://github.com/phpmyadmin/phpmyadmin/commit/9b2479b7216dd91a6cc2f231c0fd6b85d457f6e2 - https://exchange.xforce.ibmcloud.com/vulnera
com/phpmyadmin/phpmyadmin/commit/9b2479b7216dd91a6cc2f231c0fd6b85d457f6e2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99137