Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
curity/security-bulletins/typo3-extensions/typo3-ext-sa-2014-007 - http://www.openwall.com/lists/oss-security/2014/06/03/3
CVE ID: CVE-2014-3949 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T10:57:18.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2.0.3 for TYPO3 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-008 - http://typo3.org/extensions/repository/view/gridelements - http://secunia.com/advisories/58592 - http://www.openwal
08 - http://typo3.org/extensions/repository/view/gridelements - http://secunia.com/advisories/58592 - http://www.openwall.com/lists/oss-security/2014/06/03/3
CVE ID: CVE-2014-3951 State: PUBLISHED Published: 2014-08-21T22:00:00 Last Updated: 2024-08-06T10:57:17.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted argument to the iconv_open function. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2014-5384 is used for the NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:15.iconv.asc - http://www.securitytracker.com/id/1030458 -
: - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:15.iconv.asc - http://www.securitytracker.com/id/1030458 - http://mail-index.netbsd.org/source-changes/2014/06/24/msg055822.html
CVE ID: CVE-2014-3952 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T10:57:18.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain sensitive information from kernel memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3070 - http://www.securitytracker.com/id/1030539 - http://secunia.com/advisories/62218 - http://www.securityfocus.com/bid/68466 - https://exchange.xforce.ibmclou
1030539 - http://secunia.com/advisories/62218 - http://www.securityfocus.com/bid/68466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94448 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc
CVE ID: CVE-2014-3953 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T10:57:17.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3070 - http://www.securitytracker.com/id/1030539 -
gram Container: References: - http://www.debian.org/security/2014/dsa-3070 - http://www.securitytracker.com/id/1030539 - http://secunia.com/advisories/62218 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc
CVE ID: CVE-2014-3954 State: PUBLISHED Published: 2014-10-27T15:00:00 Last Updated: 2024-08-06T10:57:18.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031098 - https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A20.rtsold.asc
CVE ID: CVE-2014-3955 State: PUBLISHED Published: 2014-10-27T15:00:00 Last Updated: 2024-08-06T10:57:17.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from a source not on a directly connected network. Additional Analyst Notes: - CVE Program Container: References: - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:21.routed.asc - http://secunia.com/advisories/61865 - http://www.securitytracker.com/id/1031099
CVE ID: CVE-2014-3956 State: PUBLISHED Published: 2014-06-04T10:00:00 Last Updated: 2024-08-06T10:57:18.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05216368 - http://secunia.com/advisories/58628 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A11.sendm
na-c05216368 - http://secunia.com/advisories/58628 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A11.sendmail.asc - http://www.mandriva.com/security/advisories?name=MDVSA-2015:128 - http://packetstormsecurity.com/files/126975/Slackware-Security-Advisory-sendmail-Updates.html - ftp://ftp.sendmail.org/pub/sendmail/RELEASE_NOTES - http://security.gentoo.org/glsa/glsa-201412-32.xml - http://www.sendmail.com/sm/open_source/download/8.14.9/ - http://lists.opensuse.org/opensuse-updates/2014-06/msg00032.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:147 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134349.html - http://lists.opensuse.org/open
4:147 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134349.html - http://lists.opensuse.org/opensuse-updates/2014-06/msg00033.html - http://secunia.com/advisories/57455 - http://www.securityfocus.com/bid/67791 - http://advisories.mageia.org/MGASA-2014-0270.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.728644 - http://www.securitytracker.com/id/1030331
CVE ID: CVE-2014-3959 State: PUBLISHED Published: 2014-06-03T14:00:00 Last Updated: 2024-08-06T10:57:18.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 through 11.5.1, AAM 11.4.0 through 11.5.1 PEM 11.3.0 through 11.5.1, PSM 11.2.1 through 11.4.1, WebAccelerator and WOM 11.2.1 through 11.3.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/589
specified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58969 - http://www.securitytracker.com/id/1030319 - http://support.f5.com/kb/en-us/solutions/public/15000/200/sol15296.html - http://www.securitytracker.com/id/1030320 - http://www.securityfocus.com/bid/67771
CVE ID: CVE-2014-3960 State: PUBLISHED Published: 2014-06-04T14:00:00Z Last Updated: 2024-09-17T00:20:54.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.opennms.org/documentation/ReleaseNotesStable.html#opennms-1.12.7 - http://www.securityfocus.com/bid/67774 - http://secunia.com/advisories/58748
CVE ID: CVE-2014-3961 State: PUBLISHED Published: 2014-06-04T14:00:00Z Last Updated: 2024-09-16T16:27:38.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126878/WordPress-Participants-Database-1.5.4.8-SQL-Injection.html - https://www.yarubo.com/advisories/1 - http://www.exploit-db.com/exploits/33613 - https://wordpress.org/plugins/participan
ttps://www.yarubo.com/advisories/1 - http://www.exploit-db.com/exploits/33613 - https://wordpress.org/plugins/participants-database/changelog - http://seclists.org/fulldisclosure/2014/Jun/0 - http://osvdb.org/show/osvdb/107626 - http://www.securityfocus.com/bid/67769
CVE ID: CVE-2014-3962 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T10:57:18.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to (1) videocat.php or (2) single.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33514 - http://secunia.com/advisories/58844 - http://www.securityfocus.com/bid/67766 - http://packetstormsecurity.com/files/126866/Videos-Tube-1.0-SQL-Injection.html
CVE ID: CVE-2014-3963 State: PUBLISHED Published: 2014-06-04T14:00:00Z Last Updated: 2024-09-16T23:55:52.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2014-009/
CVE ID: CVE-2014-3966 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T10:57:18.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58896 - http://www.securitytracker.com/id/1030364 - http://www.openwall.com/lists/oss-security/2014/06/04/15 - https://bugzilla.wikimedia.org/show_bug.cgi?id=65501 - http://lists
/www.openwall.com/lists/oss-security/2014/06/04/15 - https://bugzilla.wikimedia.org/show_bug.cgi?id=65501 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-May/000151.html - http://www.debian.org/security/2014/dsa-2957 - http://www.securityfocus.com/bid/67787 - http://secunia.com/advisories/58834
CVE ID: CVE-2014-3967 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:57:18.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://xenbits.xen.org/xsa/advisory-96.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://lists.opensuse.org/opensuse-s
html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134710.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134739.html - http://www.securitytracker.com/id/1030322 - http://www.securityfocus.com/bid/67794 - http://www.openwall.com/lists/oss-security/2014/06/04/13
CVE ID: CVE-2014-3968 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:57:18.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://xenbits.xen.org/xsa/advisory-96.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.ht
nsuse-security-announce/2014-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://www.securityfocus.com/bid/67824 - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134710.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134739.html - http://www.securitytracker.com/id/1030322 - http://www.securityfocus.com/bid/67794 - http://www.openwall.com/lists/oss-security/2014/06/04/13
CVE ID: CVE-2014-3969 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:57:18.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030333 - http://xenbits.xen.org/xsa/advisory-98.html - http://secunia.com/advisories/58975 - http://www.securityfocus.com/bid/67819 - http://www.openwall.com/lists/oss-security/2014/06/04/14
CVE ID: CVE-2014-3970 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T10:57:18.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67814 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:134 - http://seclists.org/oss-sec/2014/q2/429 - http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html - http://advisories.mageia
c/2014/q2/429 - http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html - http://advisories.mageia.org/MGASA-2014-0440.html - http://secunia.com/advisories/60624 - http://seclists.org/oss-sec/2014/q2/437
CVE ID: CVE-2014-3971 State: PUBLISHED Published: 2014-12-25T11:00:00 Last Updated: 2024-08-06T10:57:17.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mongodb/mongo/commit/c151e0660b9736fe66b224f1129a16871165251b - https://jira.mongodb.org/browse/SERVER-13753
CVE ID: CVE-2014-3972 State: PUBLISHED Published: 2018-02-19T19:00:00 Last Updated: 2024-08-06T10:57:17.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-14-004
CVE ID: CVE-2014-3973 State: PUBLISHED Published: 2014-06-05T17:00:00Z Last Updated: 2024-09-17T04:20:41.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://frontaccounting.com/wb3/pages/posts/release-2.3.21201.php - http://sourceforge.net/p/frontaccounting/mercurial/ci/7ab9e443a8eb9d1b03cbed33006b7665bda9383e - http://secunia.com/advisories/58848
CVE ID: CVE-2014-3974 State: PUBLISHED Published: 2014-06-05T17:00:00Z Last Updated: 2024-09-16T16:42:47.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33555 - http://packetstormsecurity.com/files/126843/AuraCMS-3.0-Cross-Site-Scripting-Local-File-Inclusion.html - http://secunia.com/advisories/58850 - http://bot24.blogspot.com/2014/05/auracms-30-cross-site-scripting-local.html - http://osvdb.org/show/os
visories/58850 - http://bot24.blogspot.com/2014/05/auracms-30-cross-site-scripting-local.html - http://osvdb.org/show/osvdb/107554
CVE ID: CVE-2014-3975 State: PUBLISHED Published: 2014-06-05T17:00:00Z Last Updated: 2024-09-17T03:48:32.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/107555 - http://www.exploit-db.com/exploits/33555 - http://packetstormsecurity.com/files/126843/AuraCMS-3.0-Cross-Site-Scripting-Local-File-Inclusion.html - http://bot24.blogspot.com/2014/05/auracms-30-cross-site-scripting-local.html
CVE ID: CVE-2014-3976 State: PUBLISHED Published: 2014-06-05T17:00:00 Last Updated: 2024-08-06T10:57:18.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125979/A10-Networks-ACOS-2.7.0-P2-Buffer-Overflow.html - http://www.exploit-db.com/exploits/32
etstormsecurity.com/files/125979/A10-Networks-ACOS-2.7.0-P2-Buffer-Overflow.html - http://www.exploit-db.com/exploits/32702 - http://seclists.org/fulldisclosure/2014/Apr/16 - http://www.securityfocus.com/bid/66588 - http://osvdb.org/show/osvdb/105354 - http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax - http://secunia.com/advisories/57640
CVE ID: CVE-2014-3977 State: PUBLISHED Published: 2014-06-08T23:00:00 Last Updated: 2024-08-06T10:57:18.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV60312 - http://www.ibm.com/support/docview.wss?uid=isg1IV60314 - http://www.ibm.com/support/docview.wss?uid=isg1IV60299 - http://packetstormsecurity.com/files/127067/IBM-AIX-6.1.8-Privilege-Escalatio
.com/support/docview.wss?uid=isg1IV60299 - http://packetstormsecurity.com/files/127067/IBM-AIX-6.1.8-Privilege-Escalation.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/93595 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3977/ - http://www.securitytracker.com/id/1030401 - http://www.ibm.com/support/docview.wss?uid=isg1IV60313 - http://www.exploit-db.com/exploits/33725 - http://www.ibm.com/support/docview.wss?uid=isg1IV60303 - http://www.ibm.com/support/docview.wss?uid=isg1IV60311 - http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc
CVE ID: CVE-2014-3978 State: PUBLISHED Published: 2014-10-20T16:00:00 Last Updated: 2024-08-06T11:04:26.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name and Last Name fields in a new address book contact. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127785/TomatoCart-1.x-Cross-Site-Scripting-SQL-Injection.html - https://breaking.technology/advisories/CVE-2014-3978.txt
CVE ID: CVE-2014-3979 State: PUBLISHED Published: 2020-01-27T18:00:03 Last Updated: 2024-08-06T11:04:26.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firewall to blacklist the IP. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/06/06/10 - http://www.openwall.com/lists/oss-security/2014/06/11/2 - http://www.securityfocus.com/bid/67948
CVE ID: CVE-2014-3980 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T11:04:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67903 - https://github.com/ueno/libfep/commit/293d9d3f - http://www.openwall.com/lists/oss-security/2014/06/05/16 - http://www.openwall.com/lists/oss-security/2014/06/06/11
CVE ID: CVE-2014-3981 State: PUBLISHED Published: 2014-06-08T18:00:00 Last Updated: 2024-08-06T11:04:26.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www-01.ibm.com/support/docview.wss?uid=swg21683486 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - https://bugs.php.net/bug.php?id=67390 - https://bugzilla.redhat.com/show_bug.cgi?id=1104978
raq&m=141390017113542&w=2 - https://bugs.php.net/bug.php?id=67390 - https://bugzilla.redhat.com/show_bug.cgi?id=1104978 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://seclists.org/fulldisclosure/2014/Jun/21 - http://openwall.com/lists/oss-security/2014/06/06/12 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16
CVE ID: CVE-2014-3982 State: PUBLISHED Published: 2014-06-08T18:00:00 Last Updated: 2024-08-06T11:04:26.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file. Additional Analyst Notes: - CVE Program Container: References: - http://cisofy.com/files/lynis-1.5.5.tar.gz - http://openwall.com/lists/oss-security/2014/06/07/3 - http://openwall.com/lists/oss-security/2014/06/05/14 - http://openwall.com/lists/oss-security/2014/06/06/12