Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-3758 State: PUBLISHED Published: 2014-05-16T14:00:00 Last Updated: 2024-08-06T10:57:16.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors related to the import functionality. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/314 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140430-0_Typo3_si_bibtex_extension_SQL_injection_and_XSS_vulnerabilities_v10.txt - http://www.securityfocus.com/bid/67145 - ht
-0_Typo3_si_bibtex_extension_SQL_injection_and_XSS_vulnerabilities_v10.txt - http://www.securityfocus.com/bid/67145 - http://www.securityfocus.com/archive/1/531980/100/0/threaded
CVE ID: CVE-2014-3759 State: PUBLISHED Published: 2014-05-16T14:00:00 Last Updated: 2024-08-06T10:57:16.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the (1) search or (2) list functionality. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/314 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140430-0_Typo3_si_bibtex_extension_SQL_injection_and_XSS_vulnerabilities_v10.txt - http://www.securityfocus.com/bid/67
20140430-0_Typo3_si_bibtex_extension_SQL_injection_and_XSS_vulnerabilities_v10.txt - http://www.securityfocus.com/bid/67145 - http://www.securityfocus.com/archive/1/531980/100/0/threaded
CVE ID: CVE-2014-3760 State: PUBLISHED Published: 2014-05-16T14:00:00Z Last Updated: 2024-09-16T23:50:40.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable the DMZ in the Firewall/DMZ section via a request to index.cgi or (3) add, (4) modify, or (5) delete URL-filter settings in the Control/URL-filter section via a request to index.cgi, as demonstrated by adding a rule that blocks access to google.com. Additional Analyst Notes: - CVE Program Container: References: - htt
by adding a rule that blocks access to google.com. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/246 - http://websecurity.com.ua/7112
CVE ID: CVE-2014-3761 State: PUBLISHED Published: 2014-05-16T14:00:00Z Last Updated: 2024-09-17T01:32:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi in the Control/URL-filter section. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/246 - http://websecurity.com.ua/7112
CVE ID: CVE-2014-3764 State: PUBLISHED Published: 2015-01-06T15:00:00 Last Updated: 2024-08-06T10:57:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61811 - https://security.paloaltonetworks.com/CVE-2014-3764
CVE ID: CVE-2014-3771 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:57:17.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2) "change_user_language" request to sources/main.queries.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/18/2 - https://github.com/nilsteampassnet/TeamPass/commit/fd549b245c0f639a8d47bf4f74f92c37c053706f - http://teampass.net/installation/2.1.20-released.html - http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE ID: CVE-2014-3772 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:57:16.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/18/2 - https://github.com/nilsteampassnet/TeamPass/commit/7715512f2bd5659cc69e063a1c513c19e384340f - http://teampass.net/installation/2.1.20-
.com/nilsteampassnet/TeamPass/commit/7715512f2bd5659cc69e063a1c513c19e384340f - http://teampass.net/installation/2.1.20-released.html - http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE ID: CVE-2014-3773 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:57:16.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login parameter in a (1) send_pw_by_email or (2) generate_new_password action in sources/main.queries.php; iDisplayStart parameter to (3) datatable.logs.php or (4) a file in source/datatable/; or iDisplayLength parameter to (5) datatable.logs.php or (6) a file in source/datatable/; or allow remote authenticated users to execute arbitrary SQL commands via a sSortDir_ parameter to (7) datatable.logs.p
or allow remote authenticated users to execute arbitrary SQL commands via a sSortDir_ parameter to (7) datatable.logs.php or (8) a file in source/datatable/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/18/2 - https://github.com/nilsteampassnet/TeamPass/commit/8820c8934d9ba0508ac345e73ad0be29049ec6de - https://github.com/nilsteampassnet/TeamPass/commit/7715512f2bd5659cc69e063a1c513c19e384340f - http://teampass.net/installation/2.1.20-released.html - http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE ID: CVE-2014-3774 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:57:16.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a (1) hid_cat or (2) open_folder form element, or (3) id parameter, which is not properly handled in the open_id form element. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/18/2 - https://github.com/nilsteampassnet/TeamPass/commit/8820c8934d9ba0508ac3
w.openwall.com/lists/oss-security/2014/05/18/2 - https://github.com/nilsteampassnet/TeamPass/commit/8820c8934d9ba0508ac345e73ad0be29049ec6de - https://github.com/nilsteampassnet/TeamPass/commit/fd549b245c0f639a8d47bf4f74f92c37c053706f - http://teampass.net/installation/2.1.20-released.html - http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE ID: CVE-2014-3775 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T10:57:17.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201508-02 - https://bugzilla.redhat.com/show_bug.cgi?id=1099776 - http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001180.html - http://www.ubuntu.com/usn/USN-2215-1 - http://secunia.com/ad
sts.ziew.org/pipermail/libgadu-devel/2014-May/001180.html - http://www.ubuntu.com/usn/USN-2215-1 - http://secunia.com/advisories/58870 - http://www.debian.org/security/2014/dsa-2935 - http://www.openwall.com/lists/oss-security/2014/05/19/3 - http://secunia.com/advisories/58668 - http://www.ubuntu.com/usn/USN-2216-1 - http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001171.html - http://secunia.com/advisories/58871 - http://www.securityfocus.com/bid/67471
CVE ID: CVE-2014-3776 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T10:57:16.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67468 - http://lists.gnu.org/archive/html/chicken-hackers/2014-05/msg00032.html - https://bugs.call-cc.org/ticket/1124 - http://sec
p://lists.gnu.org/archive/html/chicken-hackers/2014-05/msg00032.html - https://bugs.call-cc.org/ticket/1124 - http://seclists.org/oss-sec/2014/q2/334 - http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commit%3Bh=1d06ce7e21c7e903ca5dca11fda6fcf2cc52de5e - https://security.gentoo.org/glsa/201612-54 - http://seclists.org/oss-sec/2014/q2/328 - http://lists.gnu.org/archive/html/chicken-announce/2014-05/msg00001.html
CVE ID: CVE-2014-3777 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T10:57:17.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/108612 - http://seclists.org/fulldisclosure/2014/Jun/144 - http://packetstormsecurity.com/files/127280/Reportico-Admin-Credential-Leak.html - http://www.secveritas.com/secv-05-1402.html
CVE ID: CVE-2014-3778 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-06T10:57:16.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the dns service via the DdnsService parameter, (2) change the username via the DdnsUserName parameter, (3) change the password via the DdnsPassword parameter, or (4) change the host name via the DdnsHostName parameter. Additional Analyst Notes: - CVE Program Container: References: - http:/
ge the host name via the DdnsHostName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33792
CVE ID: CVE-2014-3779 State: PUBLISHED Published: 2015-01-07T18:00:00 Last Updated: 2024-08-06T10:57:16.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arbitrary web script or HTML via the name parameter to GroupSubscription.do. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99612 - http://packetstormsecurity.com/files/129803/ADSelfservice-Plus-5.1-Cross-Site-Scripting.html
CVE ID: CVE-2014-3780 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T10:57:16.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX140779 - http://www.securitytracker.com/id/1030305 - http://www.securityfocus.com/bid/67687 - http://secunia.com/advisories/58431
CVE ID: CVE-2014-3781 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T10:57:17.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request. Additional Analyst Notes: - CVE Program Container: References: - http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3 - http://seclists.org/fulldisclosure/2014/May/107 - http://secunia.com/advisories/58675 - http://packetstormsecurity.com/files/126766/Dotclear-2.6.2-Authentication-Bypass.html - http://karmainsecurity.com/KIS-2014-05
CVE ID: CVE-2014-3782 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T10:57:17.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) double extension or (2) .php5, (3) .phtml, or some other PHP file extension. Additional Analyst Notes: - CVE Program Container: References: - http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3 - http://seclists.org/fulldisclosure/2014/May/122 - http://seclists.org/fulldisclosure/2014/May/116 - http:
tclear-2.6.3 - http://seclists.org/fulldisclosure/2014/May/122 - http://seclists.org/fulldisclosure/2014/May/116 - http://secunia.com/advisories/58675 - http://karmainsecurity.com/KIS-2014-06 - http://seclists.org/fulldisclosure/2014/May/108
CVE ID: CVE-2014-3783 State: PUBLISHED Published: 2014-05-22T15:00:00 Last Updated: 2024-08-06T10:57:17.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3 - http://packetstormsecurity.com/files/126768/Dotclear-2.6.2-SQL-Injection.html - http://karmainsecurity.com/KIS-2014-07 - http://www.securityfocus.com/archive/1/532185/100/0/threaded - http:/
on.html - http://karmainsecurity.com/KIS-2014-07 - http://www.securityfocus.com/archive/1/532185/100/0/threaded - http://seclists.org/fulldisclosure/2014/May/109
CVE ID: CVE-2014-3786 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T10:57:17.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemail or (2) subject parameter in the Contact form to contact/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67768 - http://packetstormsecurity.com/files/126870/Pixie-CMS-1.04-Cross-Site-Scripting.html
CVE ID: CVE-2014-3787 State: PUBLISHED Published: 2014-05-19T14:00:00Z Last Updated: 2024-09-16T16:13:23.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2014-09 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1997455 - http://secunia.com/advisories/58671
CVE ID: CVE-2014-3788 State: PUBLISHED Published: 2014-05-22T23:00:00 Last Updated: 2024-08-06T10:57:17.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary code via a negative value in the Content-Length field in a request. Additional Analyst Notes: - CVE Program Container: References: - http://cogentdatahub.com/ReleaseNotes.html - http://www.zerodayinitiative.com/advisories/ZDI-14-135/
CVE ID: CVE-2014-3789 State: PUBLISHED Published: 2014-05-22T23:00:00 Last Updated: 2024-08-06T10:57:17.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-01 - http://cogentdatahub.com/ReleaseNotes.html - http://www.zerodayinitiative.com/advisories/ZDI-14-136/ - http://www.securityfocus.com/bid/67486
CVE ID: CVE-2014-3790 State: PUBLISHED Published: 2014-06-01T01:00:00 Last Updated: 2024-08-06T10:57:17.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030436 - http://secunia.com/advisories/58823 - http://zerodayinitiative.com/advisories/ZDI-14-159/ - http://www.securityfocus.com/bid/67756
CVE ID: CVE-2014-3791 State: PUBLISHED Published: 2014-05-20T14:00:00Z Last Updated: 2024-09-17T00:10:45.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/106965 - http://www.securityfocus.com/bid/67406 - http://www.exploit-db.com/exploits/33352 - http://blog.techorganic.com/2014/05/14/from-fuzzing-to-0-day - http://packetstormsecurity.com/files/126614/Easy-File-Sharing-Web-Server-6.8-Buffer-Overflow.html
CVE ID: CVE-2014-3792 State: PUBLISHED Published: 2014-05-20T14:00:00Z Last Updated: 2024-09-16T18:48:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the uiViewTools_Password and uiViewTools_PasswordConfirm parameters to Forms/tools_admin_1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/106468 - http://secunia.com/advisories/58365 - http://packetstormsecurity.com/files/126426/Beetel-450TC2-Cross-Site
svdb/106468 - http://secunia.com/advisories/58365 - http://packetstormsecurity.com/files/126426/Beetel-450TC2-Cross-Site-Request-Forgery.html - http://www.exploit-db.com/exploits/33129
CVE ID: CVE-2014-3793 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T10:57:17.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereference and guest OS crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0005.html - http://packetstormsecurity.com/files/126869/VMware-Securi
ttp://www.vmware.com/security/advisories/VMSA-2014-0005.html - http://packetstormsecurity.com/files/126869/VMware-Security-Advisory-2014-0005.html - http://www.securitytracker.com/id/1030310 - http://www.securitytracker.com/id/1030311 - http://www.securityfocus.com/archive/1/532236/100/0/threaded - http://secunia.com/advisories/58894
CVE ID: CVE-2014-3794 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-3795 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-3796 State: PUBLISHED Published: 2014-09-15T14:00:00 Last Updated: 2024-08-06T10:57:17.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0009.html - http://www.securitytracker.com/id/1030835 - http://secunia.com/advisories/59938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95926
CVE ID: CVE-2014-3797 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T10:57:17.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://seclists.org/fulldisclosure/2014/Dec/23
CVE ID: CVE-2014-3798 State: PUBLISHED Published: 2019-07-11T19:14:08 Last Updated: 2024-08-06T10:57:17.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030304 - http://www.securityfocus.com/bid/67693 - http://support.citrix.com/article/CTX140814 - http://secunia.com/advisories/58455
CVE ID: CVE-2014-3799 State: REJECTED Published: 2014-08-18T10:00:00 Last Updated: 2014-08-18T04:57:00 Description: No description available.
CVE ID: CVE-2014-3800 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:57:17.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747428 - http://www.openwall.com/lists/oss-security/2014/05/20/4 - http://trac.xbmc.org/ticket/15198 - http://www.openwall.com/lists/oss-security/2014/05/20/5
CVE ID: CVE-2014-3801 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T10:57:17.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67505 - http://www.ubuntu.com/usn/USN-2249-1 - http://www.openwall.com/lists/oss-security/2014/05/20/1 - http://www.openwall.com/lists/oss-security/2014/05/20/6 - https://bugs.launchpad.net/heat/+bug
s-security/2014/05/20/1 - http://www.openwall.com/lists/oss-security/2014/05/20/6 - https://bugs.launchpad.net/heat/+bug/1311223 - http://rhn.redhat.com/errata/RHSA-2014-1687.html