Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6427 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:24.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - ht
- http://linux.oracle.com/errata/ELSA-2014-1676 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10381 - http://www.wireshark.org/security/wnpa-sec-2014-17.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73959159dbf34b4a0b50fbd19e05cb1b470be9b0 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6428 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:23.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10454 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-update
ark.org/bugzilla/show_bug.cgi?id=10454 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - http://rhn.redhat.com/errata/RHSA-2014-1677.html - http://www.wireshark.org/security/wnpa-sec-2014-18.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - http://linux.oracle.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=433a444d148f86f2562f804d25a57d00dc277cc0 - http://secunia.com/advisories/6
/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=433a444d148f86f2562f804d25a57d00dc277cc0 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6429 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:23.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/
ia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461 - http://www.wireshark.org/security/wnpa-sec-2014-19.html - http://rhn.redhat.com/errata/RHSA-2014-1677.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - http://linux.oracle.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://secunia.com/advis
ark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6430 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:23.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/sh
sories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461 - http://www.wireshark.org/security/wnpa-sec-2014-19.html - http://rhn.redhat.com/errata/RHSA-2014-1677.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - http://linux.oracle.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6431 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:23.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted file that triggers writes of uncompressed bytes beyond the end of the output buffer. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/20
x.oracle.com/errata/ELSA-2014-1676 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461 - http://www.wireshark.org/security/wnpa-sec-2014-19.html - http://rhn.redhat.com/errata/RHSA-2014-1677.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - http://linux.oracle.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caea
e.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6432 State: PUBLISHED Published: 2014-09-20T10:00:00 Last Updated: 2024-08-06T12:17:23.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1676 - http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.
- http://secunia.com/advisories/61933 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461 - http://www.wireshark.org/security/wnpa-sec-2014-19.html - http://rhn.redhat.com/errata/RHSA-2014-1677.html - http://rhn.redhat.com/errata/RHSA-2014-1676.html - http://www.debian.org/security/2014/dsa-3049 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html - http://secunia.com/advisories/60280 - http://secunia.com/advisories/60578 - http://linux.oracle.com/errata/ELSA-2014-1677 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://sec
://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2 - http://secunia.com/advisories/61929
CVE ID: CVE-2014-6433 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:17:24.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-347/
CVE ID: CVE-2014-6434 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:17:24.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-348/
CVE ID: CVE-2014-6435 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T12:17:23.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity reset) via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html - http://www.securityfocus.com/bid/69809
CVE ID: CVE-2014-6436 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T12:17:24.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69811 - http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html - http://www.securityfocus.com/arc
com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html - http://www.securityfocus.com/archive/1/533489/100/0/threaded
CVE ID: CVE-2014-6437 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T12:17:23.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69808 - http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html - http://www.securityfocus.com/archive/1/533489/100/0/threaded
CVE ID: CVE-2014-6438 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T12:17:23.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service (catastrophic regular expression backtracking, resource consumption, or application crash) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032874 - https://www.ruby-lang.org/en/news/2014/08/19/ruby-1-9-2-p330-released/ - https://github.com/ruby/www.ruby-lang.org/issues/817 - http://www.openwall.com/lists/oss-security/2015/07/13/6
CVE ID: CVE-2014-6439 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T12:17:23.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.elasticsearch.org/blog/elasticsearch-1-4-0-beta-released/ - http://www.securityfocus.com/archive/1/533602/100/0/threaded - http://www.securityfocus.com/bid/70233 - http://packetstormsecurity.com/files/128556/Elasticsearch-1.3.x-CORS-Issue.html - https://www.elastic
us.com/bid/70233 - http://packetstormsecurity.com/files/128556/Elasticsearch-1.3.x-CORS-Issue.html - https://www.elastic.co/community/security/
CVE ID: CVE-2014-6440 State: PUBLISHED Published: 2017-03-28T15:00:00 Last Updated: 2024-08-06T12:17:23.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/developers/vlc-branch/NEWS - http://www.securityfocus.com/bid/72950 - https://security.gentoo.org/glsa/201603-08 - http://seclists.org/oss-sec/2015/q1/751 - http://billblough.net/blog/2015/03/04/cve-2014-6440-heap-overflow-in-vlc-transcode-module/
CVE ID: CVE-2014-6444 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-06T12:17:23.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to iframe-googlefont-preview.php or the (2) text parameter to iframe-font-preview.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8233 - https://research.g0blin.co.uk/cve-2014-6444/
CVE ID: CVE-2014-6445 State: PUBLISHED Published: 2014-09-26T21:00:00 Last Updated: 2024-08-06T12:17:23.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter. Additional Analyst Notes: - CVE Program Container: References: - http://research.g0blin.co.uk/cve-2014-6445/ - https://wordpress.org/plugins/contact-form-7-integrations/changelog/
CVE ID: CVE-2014-6446 State: PUBLISHED Published: 2014-09-26T21:00:00 Last Updated: 2024-08-06T12:17:23.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131002/Wordpress-InfusionSoft-Shell-Upload.html - http://www.exploit-db.com/exploits/34925 - https://wordpress.org/plugins/infusionsoft/changelog/ - http://research.g0blin.co.uk/cve-2014-6
-db.com/exploits/34925 - https://wordpress.org/plugins/infusionsoft/changelog/ - http://research.g0blin.co.uk/cve-2014-6446/ - http://osvdb.org/show/osvdb/112171
CVE ID: CVE-2014-6447 State: PUBLISHED Published: 2020-02-11T16:40:15 Last Updated: 2024-08-06T12:17:24.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, 14.2 before 14.2R1, and 15.1 before 15.1R1. Additional Analyst Notes: - CVE Program Container: References: -
4.1X53-D10, 14.2 before 14.2R1, and 15.1 before 15.1R1. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10682 - http://www.securitytracker.com/id/1032846
CVE ID: CVE-2014-6448 State: PUBLISHED Published: 2020-01-15T18:01:00 Last Updated: 2024-08-06T12:17:24.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10695
CVE ID: CVE-2014-6449 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T12:17:23.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote attackers to cause a denial of service (buffer consumption) via a crafted sequence of packets "destined to the device." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033853 - http://kb.ju
dditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033853 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10696
CVE ID: CVE-2014-6450 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T12:17:23.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/D15, 12.2 before 12.2R9, 12.2X50 before 12.2X50-D70, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 12.3X50 before 12.3X50-D42, 13.1 before 13.1R4-S3, 13.1X49 before 13.1X49-D42, 13.1X50 before 13.1X50-D30, 13.2 before 13.2R6, 13.2X51 before 13.2X51-D26, 13.2X52 before 13.2X52-D15, 13.3 before 13.3R3-S3, 14.1 before 14.1R3, 14.2 before 14.2R1, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D10, when configure
re 13.3R3-S3, 14.1 before 14.1R3, 14.2 before 14.2R1, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D10, when configured for IPv6, allow remote attackers to cause a denial of service (mbuf chain corruption and kernel panic) via crafted IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10699 - http://www.securitytracker.com/id/1033855
CVE ID: CVE-2014-6451 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T12:17:24.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service (system reboot) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033857 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10700
CVE ID: CVE-2014-6452 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T12:17:24.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6454, and CVE-2014-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70528 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-6453 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T12:17:23.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-6467, CVE-2014-6545, and CVE-2014-6560. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70474 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-6454 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T12:17:23.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, and CVE-2014-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70529 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-6455 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T12:17:24.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70473 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CVE ID: CVE-2014-6456 State: PUBLISHED Published: 2014-10-15T15:15:00 Last Updated: 2024-08-06T12:17:24.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1880.html - http://rhn.redhat.com/errata/RHSA-2014-1657.html - http://secunia.com/advisories/61609 - http://www-01.ibm.com/support/docview.wss?uid=swg21688283 - http://marc.info/?l=bugtraq&m=141775382904016&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014
21688283 - http://marc.info/?l=bugtraq&m=141775382904016&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html - http://rhn.redhat.com/errata/RHSA-2014-1876.html - http://www.securityfocus.com/bid/70522 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html - http://rhn.redhat.com/errata/RHSA-2014-1882.html - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://secunia.com/advisories/61164 - http://marc.info/?l=bugtraq&m=141775382904016&w=2 - http://security.gentoo.org/glsa/glsa-201502-12.xml - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html