Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1946 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-06T09:58:14.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91577 - https://www.htbridge.com/advisory/HTB23202 - http://www.securityfocus.com/archive/1/531351/100/0/threaded
CVE ID: CVE-2014-1947 State: PUBLISHED Published: 2020-02-17T20:56:17 Last Updated: 2024-08-06T09:58:15.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/12/13 - http://www.openwall.com/lists/oss-security/2014/02/12/2 - http://www.openwall.com/li
/lists/oss-security/2014/02/12/13 - http://www.openwall.com/lists/oss-security/2014/02/12/2 - http://www.openwall.com/lists/oss-security/2014/02/13/2 - http://www.openwall.com/lists/oss-security/2014/02/13/5 - http://www.openwall.com/lists/oss-security/2014/02/19/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1064098 - https://www.suse.com/support/update/announcement/2014/suse-su-20140359-1.html
CVE ID: CVE-2014-1948 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:15.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/glance/+bug/1275062 - http://secunia.com/advisories/56419 - http://rhn.redhat.com/errata/RHSA-2014-0229.html - http://www.securityfocu
75062 - http://secunia.com/advisories/56419 - http://rhn.redhat.com/errata/RHSA-2014-0229.html - http://www.securityfocus.com/bid/65507 - http://www.openwall.com/lists/oss-security/2014/02/12/18
CVE ID: CVE-2014-1949 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T09:58:15.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/327 - http://www.ubuntu.com/usn/USN-2475-1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:162 - https://github.com/linuxmint/cinnamon-screensaver/issues/44 - http:
ndriva.com/security/advisories?name=MDVSA-2015:162 - https://github.com/linuxmint/cinnamon-screensaver/issues/44 - http://advisories.mageia.org/MGASA-2014-0374.html - https://bugzilla.redhat.com/show_bug.cgi?id=1064695 - http://seclists.org/oss-sec/2014/q1/331
CVE ID: CVE-2014-1950 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:15.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://www.openwall.com/lists/
eferences: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://www.openwall.com/lists/oss-security/2014/02/12/17 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html - http://xenbits.xen.org/xsa/advisory-88.html - http://www.debian.org/security/2014/dsa-3006
CVE ID: CVE-2014-1955 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T09:58:15.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-13-009/
CVE ID: CVE-2014-1956 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T09:58:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-13-009/
CVE ID: CVE-2014-1957 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T09:58:16.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-13-009/
CVE ID: CVE-2014-1958 State: PUBLISHED Published: 2020-02-06T14:58:59 Last Updated: 2024-08-06T09:58:15.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030. Additional Analyst Notes: - CVE Program Container: References: - http://trac.imagemagick.org/changeset/14801 - http://www.openwall.com/lists/oss-security/2014/02/13/2 - http://www.openwall.com/lists/oss-security/2014/02/13/5 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00
3/2 - http://www.openwall.com/lists/oss-security/2014/02/13/5 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00032.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00039.html - http://ubuntu.com/usn/usn-2132-1 - https://www.openwall.com/lists/oss-security/2014/02/19/13
CVE ID: CVE-2014-1959 State: PUBLISHED Published: 2014-03-06T18:00:00 Last Updated: 2024-08-06T09:58:15.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnutls.org/security.html - http://seclists.org/oss-sec/2014/q1/344 - http://seclists.org/oss-sec/2014/q1/345 - http://www.securityfocus.com/bid/65559 - http://www.ubuntu.com/usn/USN-2121-1
http://seclists.org/oss-sec/2014/q1/345 - http://www.securityfocus.com/bid/65559 - http://www.ubuntu.com/usn/USN-2121-1 - https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d182d68539900092eb42fc62cf1bb7e7c - http://www.debian.org/security/2014/dsa-2866
CVE ID: CVE-2014-1960 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:16.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1828885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91093 - http://scn.sap.com/docs/DOC-8218 - http://secunia.com/advisories/56942 - https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-discl
ttps://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
CVE ID: CVE-2014-1961 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:16.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91096 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1852146 - https://erpscan.io/advisories/erpscan-14-002-sap-portal-webdynpro-path-disclosure/
CVE ID: CVE-2014-1962 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:15.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-14-003-sap-crm-gwsync-xxe/ - https://service.sap.com/sap/support/notes/1917054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91098 - http://secunia.com/advisories/56944 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2014-1963 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:15.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91097 - https://service.sap.com/sap/support/notes/1773912 - http://secunia.com/advisories/56947 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/erpscan-14-001-sap-netweaver-message-server-dos/
CVE ID: CVE-2014-1964 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:16.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1788080 - https://erpscan.io/advisories/erpscan-14-005-sap-netweaver-dir-error-xss/ - http://secunia.com/advisories/56947 - http://scn.sap.com/docs/DOC-8218 - ht
rpscan-14-005-sap-netweaver-dir-error-xss/ - http://secunia.com/advisories/56947 - http://scn.sap.com/docs/DOC-8218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91095
CVE ID: CVE-2014-1965 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T09:58:15.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91094 - http://secunia.com/advisories/56947 - https://erpscan.io/advisories/erpscan-14-006-sap-netweaver-pip-xss/ - ht
s/91094 - http://secunia.com/advisories/56947 - https://erpscan.io/advisories/erpscan-14-006-sap-netweaver-pip-xss/ - https://service.sap.com/sap/support/notes/1442517 - http://www.stechno.net/sap-notes.html?view=sapnote&id=1442517
CVE ID: CVE-2014-1966 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T09:58:15.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03
CVE ID: CVE-2014-1967 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:58:15.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.denimoba - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000022 - http://jvn.jp/en/jp/JVN48810179/index.html
CVE ID: CVE-2014-1968 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:58:15.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN87797318/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000025 - http://www.securityfocus.com/bid/65807 - http://xoonips.sourceforge.jp
CVE ID: CVE-2014-1969 State: PUBLISHED Published: 2014-04-11T16:00:00 Last Updated: 2024-08-06T09:58:15.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000035 - http://jvn.jp/en/jp/JVN47386847/index.html
CVE ID: CVE-2014-1970 State: PUBLISHED Published: 2014-03-20T15:00:00 Last Updated: 2024-08-06T09:58:15.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4 for Android allows remote attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70029459/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000033
CVE ID: CVE-2014-1971 State: PUBLISHED Published: 2014-03-20T15:00:00 Last Updated: 2024-08-06T09:58:15.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Silex before 2.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN14282890/index.html - http://www.securityfocus.com/bid/66329 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000032 - https://github.com/silexlabs/Silex/blob/master/docs/change-log.md
CVE ID: CVE-2014-1972 State: PUBLISHED Published: 2015-08-22T23:00:00 Last Updated: 2024-08-06T09:58:15.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - https://tapestry.apache.org/release-notes-536.html - https://issues.apache.org/jira/browse/TAP5-2008 - http://jvn.jp/en/jp/JVN17611367/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000118 - http://www.o
owse/TAP5-2008 - http://jvn.jp/en/jp/JVN17611367/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000118 - http://www.openwall.com/lists/oss-security/2019/08/23/5 - http://seclists.org/fulldisclosure/2019/Aug/20 - https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f514707f3d9%40%3Cusers.tapestry.apache.org%3E - https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138f851c%40%3Cusers.tapestry.apache.org%3E - https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068dc30843%40%3Ccommits.tapestry.apache.org%3E - https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e
ts.tapestry.apache.org%3E - https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e0c%40%3Ccommits.tapestry.apache.org%3E
CVE ID: CVE-2014-1973 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:58:15.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68726 - http://jvn.jp/en/jp/JVN84335912/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000081
CVE ID: CVE-2014-1974 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T09:58:16.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=lysesoft.andexplorer - https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro - http://jvn.jp/en/jp/JVN22670349/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
CVE ID: CVE-2014-1975 State: PUBLISHED Published: 2014-03-18T01:00:00 Last Updated: 2024-08-06T09:58:16.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000031 - http://jvn.jp/en/jp/JVN38227002/995495/index.html - http://jvn.jp/en/jp/JVN38227002/index.html - http://www.securityfocus.com/bid/66250 - https://play.google.com/store/apps/details?id=org.rhorita777.unzipper
CVE ID: CVE-2014-1976 State: PUBLISHED Published: 2014-03-18T01:00:00 Last Updated: 2024-08-06T09:58:16.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000030 - http://jvn.jp/en/jp/JVN16263849/index.html - https://play.google.com/store/apps/details?id=com.demaecan.androidapp
CVE ID: CVE-2014-1977 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T09:58:16.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000027 - http://jvn.jp/en/jp/JVN81739241/index.html
CVE ID: CVE-2014-1978 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T09:58:15.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN05951929/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000028
CVE ID: CVE-2014-1979 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T09:58:15.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN89260331/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000029
CVE ID: CVE-2014-1980 State: PUBLISHED Published: 2014-08-14T01:00:00 Last Updated: 2024-08-06T09:58:15.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80310172/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000092 - http://piwigo.org/bugs/view.php?id=2805
CVE ID: CVE-2014-1981 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1982 State: PUBLISHED Published: 2014-03-28T21:00:00 Last Updated: 2024-08-06T09:58:16.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32545 - http://seclists.org/fulldisclosure/2014/Mar/340
CVE ID: CVE-2014-1983 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T09:58:15.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN10319260/index.html - http://cs.cybozu.co.jp/information/20130317notice01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000039
CVE ID: CVE-2014-1984 State: PUBLISHED Published: 2014-04-19T19:00:00 Last Updated: 2024-08-06T09:58:16.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20130317notice02.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000040 - http://jvn.jp/en/jp/JVN00058727/index.html