Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8104 State: PUBLISHED Published: 2014-12-03T18:00:00 Last Updated: 2024-08-06T13:10:50.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:139 - http://advisories.mageia.org/MGASA-2014-0512.html - http://www.ubuntu.com/usn/USN-2430-1 - http://www.debian.org/security/2014/dsa-3084 - https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e73
http://www.debian.org/security/2014/dsa-3084 - https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e732b - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html
CVE ID: CVE-2014-8105 State: PUBLISHED Published: 2015-03-10T14:00:00 Last Updated: 2024-08-06T13:10:50.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-2-27.html - http://rhn.redhat.com/errata/RHSA-2015-0416.html - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-9.html - http://rhn.redhat.
a/RHSA-2015-0416.html - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-9.html - http://rhn.redhat.com/errata/RHSA-2015-0628.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153991.html
CVE ID: CVE-2014-8106 State: PUBLISHED Published: 2014-12-08T16:00:00 Last Updated: 2024-08-06T13:10:50.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/12/04/8 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a - http://rhn.redhat.com/errata/RHSA-2015-0795.html - ht
qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a - http://rhn.redhat.com/errata/RHSA-2015-0795.html - http://rhn.redhat.com/errata/RHSA-2015-0624.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html - http://rhn.redhat.com/errata/RHSA-2015-0891.html - http://www.securityfocus.com/bid/71477 - http://rhn.redhat.com/errata/RHSA-2015-0643.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99126 - http://secunia.com/advisories/60364 - http://rhn.redhat.com/errata/RHSA-2015-0349.html - http://rhn.redhat.com/errata/RHSA-2015-0868.html - http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html - http://git.qemu.org/?p=qemu.git%3Ba
015-0868.html - http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0 - http://www.debian.org/security/2014/dsa-3088 - http://support.citrix.com/article/CTX200892 - http://www.debian.org/security/2014/dsa-3087 - http://rhn.redhat.com/errata/RHSA-2015-0867.html
CVE ID: CVE-2014-8107 State: REJECTED Published: 2017-07-20T15:00:00 Last Updated: 2017-07-20T14:57:01 Description: No description available.
CVE ID: CVE-2014-8108 State: PUBLISHED Published: 2014-12-18T15:00:00 Last Updated: 2024-08-06T13:10:50.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://subversion.apache.org/security/CVE-2014-8108-advisory.txt - http://rhn.redhat.com/errata/RHSA-2015-0166.html - https://support.apple.com/HT204427 - http://www.secu
8-advisory.txt - http://rhn.redhat.com/errata/RHSA-2015-0166.html - https://support.apple.com/HT204427 - http://www.securityfocus.com/bid/71725 - http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html - http://secunia.com/advisories/61131 - http://www.ubuntu.com/usn/USN-2721-1
CVE ID: CVE-2014-8109 State: PUBLISHED Published: 2014-12-29T23:00:00 Last Updated: 2024-08-06T13:10:50.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access
that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/httpd/commit/3f1693d558d0758f829c8b53993f1749ddf6ffcb - https://bugzilla.redhat.com/show_bug.cgi?id=1174077 - http://www.ubuntu.com/usn/USN-2523-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.openwall.com/lists/oss-security/2014/11/28/5 - http://www.securityfocus.com/bid/73040 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://advisories.mageia.org/MGASA-2015-0011.html - https://issues.ap
rchives/security-announce/2015/Aug/msg00001.html - http://advisories.mageia.org/MGASA-2015-0011.html - https://issues.apache.org/bugzilla/show_bug.cgi?id=57204 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159352.html - https://support.apple.com/HT205219 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9
73d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - http
sts.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37
071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-8110 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T13:10:50.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q1/427 - http://www.securityfocus.com/bid/72511 - http://secunia.com/advisories/62649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100724 - http://activemq.apache.org/security-advisories.data/CVE-2014-8110-an
change.xforce.ibmcloud.com/vulnerabilities/100724 - http://activemq.apache.org/security-advisories.data/CVE-2014-8110-announcement.txt - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2014-8111 State: PUBLISHED Published: 2015-04-21T17:00:00 Last Updated: 2024-08-06T13:10:50.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1641.html - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://www.debian.org/security/2015/dsa-3278 - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - http://r
sa-3278 - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - http://rhn.redhat.com/errata/RHSA-2015-1642.html - http://rhn.redhat.com/errata/RHSA-2015-0847.html - http://www.securityfocus.com/bid/74265 - https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a1
91d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-8112 State: PUBLISHED Published: 2015-03-10T14:00:00 Last Updated: 2024-08-06T13:10:50.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog. Additional Analyst Notes: - CVE Program Container: References: - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-2-27.html - https://bugzilla.redhat.com/show_bug.cgi?id=1172729 - http://rhn.redhat.com/errata/RHSA-2015-0416.html - http://direc
- https://bugzilla.redhat.com/show_bug.cgi?id=1172729 - http://rhn.redhat.com/errata/RHSA-2015-0416.html - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-9.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153991.html
CVE ID: CVE-2014-8113 State: REJECTED Published: 2022-07-07T16:04:26 Last Updated: 2022-07-07T16:04:26 Description: No description available.
CVE ID: CVE-2014-8114 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T13:10:50.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RHSA-2015-0235.html - https://github.com/uberfire/uberfire/commit/21ec50eb15 - http://www.securityfocus.com/bid/88199
CVE ID: CVE-2014-8115 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T13:10:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly have other unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0234.html - http://rhn.redhat.com/errata/RHSA-2015-0235.html - https://github.com/droolsjbpm/kie-wb-distributions/commit/90eed433d3
CVE ID: CVE-2014-8116 State: PUBLISHED Published: 2014-12-17T19:00:00 Last Updated: 2024-08-06T13:10:51.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6 - http://secunia.com/advisories/61944 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.freebsd.org/security/advisories/FreeBSD
.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc - http://www.securityfocus.com/bid/71700 - http://rhn.redhat.com/errata/RHSA-2016-0760.html - https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8 - http://www.ubuntu.com/usn/USN-2494-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securitytracker.com/id/1031344 - http://secunia.com/advisories/62081 - http://seclists.org/oss-sec/2014/q4/1056 - http://advisories.mageia.org/MGASA-2015-0040.html - https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog
CVE ID: CVE-2014-8117 State: PUBLISHED Published: 2014-12-17T19:00:00 Last Updated: 2024-08-06T13:10:50.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2535-1 - http://www.securityfocus.com/bid/71692 - http://secunia.com/advisories/61944 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc - http://rhn.re
inuxbulletinapr2016-2952096.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc - http://rhn.redhat.com/errata/RHSA-2016-0760.html - http://www.ubuntu.com/usn/USN-2494-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c - http://www.securitytracker.com/id/1031344 - http://secunia.com/advisories/62081 - http://seclists.org/oss-sec/2014/q4/1056 - http://advisories.mageia.org/MGASA-2015-0040.html - https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog
CVE ID: CVE-2014-8118 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T13:10:50.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:056 - https://security.gentoo.org/glsa/201811-22 - http://advisories.mageia.org/MGASA-2014-0529.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:251 - http://www.debian.org/security/2015/
-2014-0529.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:251 - http://www.debian.org/security/2015/dsa-3129 - http://rhn.redhat.com/errata/RHSA-2014-1976.html
CVE ID: CVE-2014-8119 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T13:10:50.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157508.html - https://bugzilla.redhat.com/show_bug.cgi?id=1172176 - https://pagure.io/netcf/blob/050b05c880a6b343baf86780d94764b1aafece37/f/NEWS - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html - h
43baf86780d94764b1aafece37/f/NEWS - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156571.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157713.html - http://rhn.redhat.com/errata/RHSA-2015-2248.html - http://www.securityfocus.com/bid/78046
CVE ID: CVE-2014-8120 State: PUBLISHED Published: 2014-12-18T15:00:00 Last Updated: 2024-08-06T13:10:50.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines and gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://icedtea.classpath.org/pipermail/thermostat-announce/2014-December/000013.html - http://rhn.redhat.com/errata/RHSA-2014-2000.html
CVE ID: CVE-2014-8121 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T13:10:50.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html - https://bugzilla.redhat.com/show_bug.cgi?
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html - https://bugzilla.redhat.com/show_bug.cgi?id=1165192 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://www.ubuntu.com/usn/USN-2985-2 - https://security.gentoo.org/glsa/201602-02 - https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html - http://rhn.redhat.com/errata/RHSA-2015-0327.html - http://www.securityfocus.com/bid/73038 - http://www.debian.org/security/2016/dsa-3480 - http://www.ubuntu.com/usn/USN-2985-1
CVE ID: CVE-2014-8122 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T13:10:50.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745 - https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100892 - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/100892 - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://rhn.redhat.com/errata/RHSA-2015-0773.html - http://rhn.redhat.com/errata/RHSA-2015-0920.html - http://rhn.redhat.com/errata/RHSA-2015-0850.html - https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086 - http://www.securityfocus.com/bid/74252 - http://rhn.redhat.com/errata/RHSA-2015-0215.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml - http://rhn.redhat.com/errata/RHSA-2015-0217.html - http://rhn.redhat.com/errata/RHSA-2015-0218.html - http://rhn.redhat.com/er
/rhn.redhat.com/errata/RHSA-2015-0217.html - http://rhn.redhat.com/errata/RHSA-2015-0218.html - http://rhn.redhat.com/errata/RHSA-2015-0216.html - http://www.securitytracker.com/id/1031741
CVE ID: CVE-2014-8123 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T13:10:50.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service (crash) via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71386 - http://www.openwall.com/lists/oss-security/2014/12/01/4 - http://www.openwall.com/lists/oss-security/2014/12/02/1
CVE ID: CVE-2014-8124 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:10:50.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/horizon/+bug/1394370 - http://secunia.com/advisories/61186 - http://rhn.redhat.com/errata/RHSA-2015-0845.html - http://lists.openstack.org/pipermail/openstack-announce/20
es/61186 - http://rhn.redhat.com/errata/RHSA-2015-0845.html - http://lists.openstack.org/pipermail/openstack-announce/2014-December/000308.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147520.html - http://rhn.redhat.com/errata/RHSA-2015-0839.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
CVE ID: CVE-2014-8125 State: PUBLISHED Published: 2015-04-21T17:00:00 Last Updated: 2024-08-06T13:10:50.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1169553 - http://rhn.redhat.com/errata/RHSA-2015-0850.html - https://github.com/droolsjbpm/jbpm/commit/713e8073ecf45623cfc5c918c5cbf700203f46e5 - https://github.com/droolsjbpm/drools/commit/c48464c3b246e6ef0d4cd0dbf67e83ccd532c6d3 - ht
5623cfc5c918c5cbf700203f46e5 - https://github.com/droolsjbpm/drools/commit/c48464c3b246e6ef0d4cd0dbf67e83ccd532c6d3 - http://rhn.redhat.com/errata/RHSA-2015-0851.html