Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4
0%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd3
195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-0099 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T09:05:38.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2014-0268.html - http://secunia.com/advisories/59121 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://secunia.com/advisories/59732 - http:/
a.com/advisories/59121 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://secunia.com/advisories/59732 - http://secunia.com/advisories/59835 - http://www.securityfocus.com/archive/1/532221/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://seclists.org/fulldisclosure/2014/May/140 - http://secunia.com/advisories/59849 - http://linux.oracle.com/errata/ELSA-2014-0865.html - http://www.securityfocus.com/bid/67668 - http://www.
sories/59849 - http://linux.oracle.com/errata/ELSA-2014-0865.html - http://www.securityfocus.com/bid/67668 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-3530 - http://secunia.com/advisories/59678 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.securityfocus.com/archive/1/532218/100/0/threaded - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://lists.fedoraproj
/security-advisory/cpuoct2016-2881722.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://secunia.com/advisories/59873 - http://svn.apache.org/viewvc?view=revision&revision=1578814 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.securitytracker.com/id/1030302 - http://marc
ision=1578814 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.securitytracker.com/id/1030302 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1578812 - http://svn.apache.org/viewvc?view=revision&revision=1580473 - http://www.debian.org/security/2016/dsa-3447 - http://secunia.com/advisories/60729 - http://secunia.com/advisories/60793 - http://seclists.org/fulldisclosure/2014/May/138 - http://www-01.ibm.com/support/docview.wss?uid=swg21680603 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - http
sts.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc
fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0100 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T09:05:38.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/04/4 - http://patchwork.ozlabs.org/patch/325844/ - https://bugzilla.redhat.com/show_bug.cgi?i
lists/oss-security/2014/03/04/4 - http://patchwork.ozlabs.org/patch/325844/ - https://bugzilla.redhat.com/show_bug.cgi?id=1070618
CVE ID: CVE-2014-0101 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T09:05:38.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65943 - http://support.f5.com
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65943 - http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15317.html - http://rhn.redhat.com/errata/RHSA-2014-0328.html - http://www.ubuntu.com/usn/USN-2173-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ec0223ec48a90cb605244b45f7c62de856403729 - http://rhn.redhat.com/errata/RHSA-2014-0432.html - http://www.ubuntu.com/usn/USN-2174-1 - http://rhn.redhat.com/errata/RHSA-2014-0419.html - http://secunia.com/advisories/59216 - https://bugzilla.redhat.com/show_bug.cgi?id=1070705 - https://github.com/torvalds/linux/commit/ec0223ec48a90cb605244b45f7c62de856403729
a.redhat.com/show_bug.cgi?id=1070705 - https://github.com/torvalds/linux/commit/ec0223ec48a90cb605244b45f7c62de856403729 - http://www.openwall.com/lists/oss-security/2014/03/04/6
CVE ID: CVE-2014-0102 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T09:05:38.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/04/21 - http://www.kernelhub.org/?msg=425013&p=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1072419 - http://lkml.org/lkml/2014/2/27/507
CVE ID: CVE-2014-0103 State: PUBLISHED Published: 2014-07-29T14:00:00 Last Updated: 2024-08-06T09:05:39.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136044.html - https://bugzilla.redhat.com/show_bug.cgi?id=1073618 - http://www.securityfocus.com/bid/68247 - http://advisories.mageia.org/MGASA-2014-0380.html - http://lists.fedoraproject.org/pipermail/package-an
.com/bid/68247 - http://advisories.mageia.org/MGASA-2014-0380.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136033.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:182
CVE ID: CVE-2014-0104 State: PUBLISHED Published: 2020-01-02T16:54:58 Last Updated: 2024-08-06T09:05:38.996Z Vendors: fence-agents Products: fence-agents Problem Types: no verification of remote SSL certificates Description: In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0104 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0104 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0104 - https://access.r
la.redhat.com/show_bug.cgi?id=CVE-2014-0104 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0104 - https://access.redhat.com/security/cve/cve-2014-0104
CVE ID: CVE-2014-0105 State: PUBLISHED Published: 2014-04-15T14:00:00 Last Updated: 2024-08-06T09:05:38.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/python-keystoneclient/+bug/1282865 - http://www.openwall.com/lists/oss-securit
References: - https://bugs.launchpad.net/python-keystoneclient/+bug/1282865 - http://www.openwall.com/lists/oss-security/2014/03/27/4 - http://rhn.redhat.com/errata/RHSA-2014-0382.html - http://rhn.redhat.com/errata/RHSA-2014-0409.html
CVE ID: CVE-2014-0106 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T09:05:38.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.sudo.ws/sudo/alerts/env_add.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00003.html - http:/
w.sudo.ws/sudo/alerts/env_add.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00003.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2146-1 - http://rhn.redhat.com/errata/RHSA-2014-0266.html - http://www.openwall.com/lists/oss-security/2014/03/06/2 - https://support.apple.com/kb/HT205031 - http://www.securityfocus.com/bid/65997
CVE ID: CVE-2014-0107 State: PUBLISHED Published: 2014-04-15T17:00:00 Last Updated: 2024-08-06T09:05:38.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function. Additional Analyst Notes: - CVE Program Container: References: - ht
t is bound to the XSLT 1.0 system-property function. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201604-02 - http://secunia.com/advisories/59291 - http://secunia.com/advisories/59290 - http://rhn.redhat.com/errata/RHSA-2015-1888.html - http://secunia.com/advisories/59151 - http://secunia.com/advisories/59247 - http://secunia.com/advisories/59515 - http://www.debian.org/security/2014/dsa-2886 - http://secunia.com/advisories/60502 - http://secunia.com/advisories/59369 - http://secunia.com/advisories/59711 - http://secunia.com/advisories/57563 - http://www.securityfocus.com/bid/66397 - http://www.securitytracker.com/id/1034711 - http://www.s
com/advisories/57563 - http://www.securityfocus.com/bid/66397 - http://www.securitytracker.com/id/1034711 - http://www.securitytracker.com/id/1034716 - http://rhn.redhat.com/errata/RHSA-2014-1351.html - http://rhn.redhat.com/errata/RHSA-2014-0348.html - http://secunia.com/advisories/59036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92023 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - http://www.oracle.
.drill.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://issues.apache.org/jira/browse/XALANJ-2435 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 - http://www-01.ibm.com/support/docview.wss?uid=swg21676093 - http://www.ibm.com/support/docview.wss?uid=swg21677967 - https://www.tenable.com/security/tns-2018-15 - http://www-01.ibm.com/support/docview.wss?uid=swg21677145 - http://www-01.ibm.c
//www.tenable.com/security/tns-2018-15 - http://www-01.ibm.com/support/docview.wss?uid=swg21677145 - http://www-01.ibm.com/support/docview.wss?uid=swg21681933 - http://www-01.ibm.com/support/docview.wss?uid=swg21674334 - http://www.ocert.org/advisories/ocert-2014-002.html - http://svn.apache.org/viewvc?view=revision&revision=1581058 - http://www-01.ibm.com/support/docview.wss?uid=swg21680703 - https://lists.apache.org/thread.html/r0c00afcab8f238562e27b3ae7b8af1913c62bc60838fb8b34c19e26b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r2900489bc665a2e32d021bb21f6ce2cb8e6bb5973490eebb9a346bca%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021
021bb21f6ce2cb8e6bb5973490eebb9a346bca%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2014-0108 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-0109 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:38.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - https://cxf.apache.org/security-advisories.data/CVE-2014-0109.txt.asc?version=1&modificationDate=1398873370740&api=v2 - http://www.securit
.org/security-advisories.data/CVE-2014-0109.txt.asc?version=1&modificationDate=1398873370740&api=v2 - http://www.securitytracker.com/id/1030201 - http://rhn.redhat.com/errata/RHSA-2014-1351.html - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.
https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2014-0110 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:38.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message. Additional Analyst Notes: - CVE Program Container: References: - http://cxf.apache.org/security-advisories.data/CVE-2014-0110.txt.asc?version=1&modificationDate=1398873378628&api=v2 - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - http://www.securitytracker.com/id/1030202 - http://rhn.redhat.com/errata/RHSA-2014-135
.com/errata/RHSA-2015-0851.html - http://www.securitytracker.com/id/1030202 - http://rhn.redhat.com/errata/RHSA-2014-1351.html - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad01
05f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2014-0111 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:05:38.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings." Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.us.apache.org/mod_mbox/www-announce/201404.mbox/%3C534CE273.9020601%40apache.org%3E - http://syncope.apache.org/security.html - http://www.securityfocus.com/archive/1/531841/100
73.9020601%40apache.org%3E - http://syncope.apache.org/security.html - http://www.securityfocus.com/archive/1/531841/100/0/threaded
CVE ID: CVE-2014-0112 State: PUBLISHED Published: 2014-04-29T10:00:00 Last Updated: 2024-08-06T09:05:38.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html - https://cwiki.apache.org/confluence/display/WW/S2-021 - http://secunia.com/adv
VMware-Security-Advisory-2014-0007.html - https://cwiki.apache.org/confluence/display/WW/S2-021 - http://secunia.com/advisories/59178 - http://www.vmware.com/security/advisories/VMSA-2014-0007.html - http://www.securityfocus.com/archive/1/531952/100/0/threaded - http://secunia.com/advisories/59500 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.securityfocus.com/bid/67064 - http://jvn.jp/en/jp/JVN19294237/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045 - http://www-01.ibm.com/support/docview.wss?uid=swg21676706 - https://bugzilla.redhat.com/show_bug.cgi?id=1091939 - http://www.securityfocus.com/archive/1/532549/100/0/threaded - https://access
zilla.redhat.com/show_bug.cgi?id=1091939 - http://www.securityfocus.com/archive/1/532549/100/0/threaded - https://access.redhat.com/errata/RHSA-2019:0910
CVE ID: CVE-2014-0113 State: PUBLISHED Published: 2014-04-29T10:00:00 Last Updated: 2024-08-06T09:05:39.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/WW/S2-021 - http://secunia.com/advisories/59178 - http://www.securityfocus.com/a
s://cwiki.apache.org/confluence/display/WW/S2-021 - http://secunia.com/advisories/59178 - http://www.securityfocus.com/archive/1/531952/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676706