Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://rhn.redhat.com/errata/RHSA-2014-0376.html - http://marc.info/?l=bugtraq&m=139835844111589&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://www.cert.fi/en/reports/2014/vulnerability788210.html - http://secunia.com/advisories/57721 - http://secunia.com/advisories/57968 - http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ - http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 - http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html - http://marc.info/?l=bugtraq&m=139905405728262&w=2 - http://www.securitytracker.com/id/1030082 - http://marc.info/?l=bugtraq&m=139757819327350&w=2 - http://www.exploit-db.c
http://www.securitytracker.com/id/1030082 - http://marc.info/?l=bugtraq&m=139757819327350&w=2 - http://www.exploit-db.com/exploits/32745 - http://seclists.org/fulldisclosure/2014/Apr/190 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ - http://marc.info/?l=bugtraq&m=139817727317190&w=2 - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 - http://www.openssl.org/news/secadv_20140407.txt - https://gist.github.com/chapmajs/10473815 - http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1 - http://www.securitytracker.com/id/1030074 - http://support.citrix.com/article/CTX140605 - http://secunia.
pt.aspx?ID=1 - http://www.securitytracker.com/id/1030074 - http://support.citrix.com/article/CTX140605 - http://secunia.com/advisories/59139 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ - http://secunia.com/advisories/57966 - http://www.securitytracker.com/id/1030026 - http://secunia.com/advisories/59347 - https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E - https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html - https://lists.apache.org/thread
g%3E - https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html - https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E - https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf - https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E - https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd
CVE ID: CVE-2014-0161 State: PUBLISHED Published: 2020-01-02T17:30:53 Last Updated: 2024-08-06T09:05:38.992Z Vendors: ovirt-engine-sdk-python Products: ovirt-engine-sdk-python Problem Types: does not verify that the remote endpoint's hostname matches a domain name in the subject's CN or subjectAltName field of the x.509 certificate Description: ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate. Additional Analyst Notes: - CVE
an-in-the-middle attackers to spoof remote endpoints via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0161 - https://access.redhat.com/security/cve/cve-2014-0161
CVE ID: CVE-2014-0162 State: PUBLISHED Published: 2014-04-27T20:00:00 Last Updated: 2024-08-06T09:05:39.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2193-1 - https://launchpad.net/bugs/1298698 - http://www.openwall.com/lists/oss-security/2014/04/10/13 - http://rhn.redhat.com/errata/RHSA-2014-0455.html
CVE ID: CVE-2014-0163 State: PUBLISHED Published: 2019-12-11T15:33:33 Last Updated: 2024-08-06T09:05:38.899Z Vendors: Openshift Products: Openshift Problem Types: Multiple shell command injection flaws Description: Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0163 - https://access.redhat.com/security/cve/cve-2014-0163
CVE ID: CVE-2014-0164 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T09:05:39.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0461.html - http://rhn.redhat.com/errata/RHSA-2014-0460.html
CVE ID: CVE-2014-0165 State: PUBLISHED Published: 2014-04-09T23:00:00 Last Updated: 2024-08-06T09:05:38.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Version_3.7.2 - http://core.trac.wordpress.org/changeset/27976 - http://codex.wordpress.org/Version_3.8.2 - http://www.debian.org/security/2014/dsa-2901 - https://bugzilla.redhat.com/show_bug.cgi?id=1085866
CVE ID: CVE-2014-0166 State: PUBLISHED Published: 2014-04-09T23:00:00 Last Updated: 2024-08-06T09:05:39.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Version_3.7.2 - https://bugzilla.redhat.com/show_bug.cgi?id=1085858 - http://codex.wordpress.org/Version_3.8.2 - http://www.debian.org/security/2014/dsa-2901 - http://core.trac
?id=1085858 - http://codex.wordpress.org/Version_3.8.2 - http://www.debian.org/security/2014/dsa-2901 - http://core.trac.wordpress.org/changeset/28054
CVE ID: CVE-2014-0167 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T09:05:38.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/04/09/26 - https://launchpad.net/bugs/12905
ram Container: References: - http://www.openwall.com/lists/oss-security/2014/04/09/26 - https://launchpad.net/bugs/1290537 - http://www.ubuntu.com/usn/USN-2247-1
CVE ID: CVE-2014-0168 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T09:05:38.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rhuss/jolokia/commit/2d9b168cfbbf5a6d16fa6e8a5b34503e3dc42364 - http://rhn.redhat.com/errata/RHSA-2014-1351.html
CVE ID: CVE-2014-0169 State: PUBLISHED Published: 2020-01-02T19:09:51 Last Updated: 2024-08-06T09:05:39.132Z Vendors: Red Hat Products: JBoss EAP Problem Types: Other Description: In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another application without proper authorization. Although this is an intended functionality, it was not clearly documented which can mislead users into thinking that a security domain cache is isolated to a single application. Additional Analyst Notes: - CVE Program Container: References: - h
ity domain cache is isolated to a single application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0169 - https://access.redhat.com/security/cve/cve-2014-0169
CVE ID: CVE-2014-0170 State: PUBLISHED Published: 2014-09-30T14:00:00 Last Updated: 2024-08-06T09:05:39.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96192 - http://secunia.com/advisories/61530 - http://www.securitytracker.com/id/1030886 - https://issues.jboss.org/browse/TEIID-2911 - http://rhn.redhat.com/errata/RHSA-2014-1284.html
CVE ID: CVE-2014-0171 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T09:05:39.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0034.html - https://issues.jboss.org/browse/TEIID-2911
CVE ID: CVE-2014-0172 State: PUBLISHED Published: 2014-04-11T15:00:00 Last Updated: 2024-08-06T09:05:39.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q2/54 - https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-April/003921
es: - http://seclists.org/oss-sec/2014/q2/54 - https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-April/003921.html - https://security.gentoo.org/glsa/201612-32 - http://www.securityfocus.com/bid/66714 - https://bugzilla.redhat.com/show_bug.cgi?id=1085663 - http://www.ubuntu.com/usn/USN-2188-1
CVE ID: CVE-2014-0173 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T09:05:39.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.7.2, 2.8.x before 2.8.2, and 2.9.x before 2.9.3 for WordPress does not properly restrict access to the XML-RPC service, which allows remote attackers to bypass intended restrictions and publish posts via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Progr
ed vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://jetpack.me/2014/04/10/jetpack-security-update/ - http://www.securityfocus.com/bid/66789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92560 - http://secunia.com/advisories/57729
CVE ID: CVE-2014-0174 State: PUBLISHED Published: 2014-07-11T14:00:00 Last Updated: 2024-08-06T09:05:39.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0858.html - http://rhn.redhat.com/errata/RHSA-2014-0859.html
CVE ID: CVE-2014-0175 State: PUBLISHED Published: 2019-12-13T12:40:38 Last Updated: 2024-08-06T09:05:39.212Z Vendors: mcollective Products: mcollective Problem Types: password set at install Description: mcollective has a default password set at install Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0175 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0175 - https://access.redhat.com/security/cve/cve-2014-0175
CVE ID: CVE-2014-0176 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T09:05:39.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE ID: CVE-2014-0177 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T09:05:39.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58273 - https://github.com/github/hub/commit/016ec99d25b1cb83cb4367e541177aa431beb600
CVE ID: CVE-2014-0178 State: PUBLISHED Published: 2014-05-28T01:00:00 Last Updated: 2024-08-06T09:05:39.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67686 - http://www.mandriva.com/security/advisori
CVE Program Container: References: - http://www.securityfocus.com/bid/67686 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:136 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.org/samba/security/CVE-2014-0178 - http://www.securitytracker.com/id/1030308 - http://www.securityfocus.com/archive/1/532757/100/0/threaded - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://secunia.com/advisories/59407 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://advisories.mageia.org/MGASA-2014-0279.html - http://secunia.com/advisories/59378 - http://www.mandriva.com/security/advisories?name=
ageia.org/MGASA-2014-0279.html - http://secunia.com/advisories/59378 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 - http://secunia.com/advisories/59579 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
CVE ID: CVE-2014-0179 State: PUBLISHED Published: 2014-08-03T18:00:00 Last Updated: 2024-08-06T09:05:39.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods. Additional Analyst Notes: - CVE Program Container: Refe
ns of some vectors. CVE-2014-5177 is used for other API methods. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0560.html - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html - http://www.debian.org/security/2014/dsa-3038 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html - http://www.ubuntu.com/usn/USN-2366-1 - http://security.libvirt.org/2014/0003.html
CVE ID: CVE-2014-0180 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T09:05:39.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE ID: CVE-2014-0181 State: PUBLISHED Published: 2014-04-27T00:00:00.000Z Last Updated: 2025-02-13T16:27:11.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program. Additional Analyst Notes: - CVE Program Container: References: - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.45 - http://lists.opensuse.org/opensuse-security-announce/2015-04/
//www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.45 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://www.openwall.com/lists/oss-security/2014/04/23/6 - https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=90f62cf30a78721641e08737bda787552428061e - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://rhn.redhat.com/errata/RHSA-2014-1959.html - http://marc.info/?l=linux-netdev&m=139828832919
15-03/msg00025.html - http://rhn.redhat.com/errata/RHSA-2014-1959.html - http://marc.info/?l=linux-netdev&m=139828832919748&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html - http://www.openwall.com/lists/oss-security/2023/04/16/3
CVE ID: CVE-2014-0182 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T09:05:39.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.
rrata/RHSA-2014-0744.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=a890a2f9137ac3cf5b607649e66a6f3a5512d8dc
CVE ID: CVE-2014-0183 State: PUBLISHED Published: 2020-01-02T19:20:35 Last Updated: 2024-08-06T09:05:39.183Z Vendors: Katello Products: Katello Problem Types: Cross-Site Scripting Description: Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0183 - https://access.redhat.com/security/cve/cve-2014-0183
CVE ID: CVE-2014-0184 State: PUBLISHED Published: 2014-07-07T14:00:00 Last Updated: 2024-08-06T09:05:39.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE ID: CVE-2014-0185 State: PUBLISHED Published: 2014-05-06T10:00:00 Last Updated: 2024-08-06T09:05:39.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59329 - https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d - https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch - https://bugs.launchpad.net/u
://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027 - https://bugs.php.net/bug.php?id=67060 - http://secunia.com/advisories/59061 - http://www.php.net/ChangeLog-5.php - http://www.php.net/archive/2014.php#id2014-05-01-1 - http://support.apple.com/kb/HT6443 - http://www.openwall.com/lists/oss-security/2014/04/29/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1092815 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html
CVE ID: CVE-2014-0186 State: PUBLISHED Published: 2014-06-14T10:00:00 Last Updated: 2024-08-06T09:05:39.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote attackers to cause a denial of service (CPU consumption) via a crafted request. NOTE: this vulnerability exists because of an unspecified regression. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2014-0686.html - https://bugzilla.redhat.com/show_bug.cgi?id=1089884 - http://www.osvdb.org/108060 - https://security-tracker.debian.org/tracker/CVE-2014-0186
CVE ID: CVE-2014-0187 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T09:05:39.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-08/msg00035.html - http://www.openwall.com/lists/oss-security/2014/04/22/8 - http://secunia.com/advisories/59533 - http://www.ubuntu.com/usn/USN-2255-1