Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0080 State: PUBLISHED Published: 2014-02-20T11:00:00 Last Updated: 2024-08-06T09:05:37.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ (backslash) characters that are not properly handled in operations on array columns. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/Wu96YkTUR6s/pPLBMZrlwvYJ - http:/
er: References: - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/Wu96YkTUR6s/pPLBMZrlwvYJ - http://openwall.com/lists/oss-security/2014/02/18/9
CVE ID: CVE-2014-0081 State: PUBLISHED Published: 2014-02-20T11:00:00 Last Updated: 2024-08-06T09:05:38.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0215.html - http://rhn.red
Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0215.html - http://rhn.redhat.com/errata/RHSA-2014-0306.html - http://www.securityfocus.com/bid/65647 - http://www.securitytracker.com/id/1029782 - http://openwall.com/lists/oss-security/2014/02/18/8 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html - http://secunia.com/advisories/57376 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ
CVE ID: CVE-2014-0082 State: PUBLISHED Published: 2014-02-20T11:00:00 Last Updated: 2024-08-06T09:05:37.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ - http://rhn.redhat.com/errata/RHSA-2014-0215.html - http://secunia.c
?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ - http://rhn.redhat.com/errata/RHSA-2014-0215.html - http://secunia.com/advisories/57836 - http://rhn.redhat.com/errata/RHSA-2014-0306.html - https://puppet.com/security/cve/cve-2014-0082 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html - http://secunia.com/advisories/57376 - http://openwall.com/lists/oss-security/2014/02/18/10 - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
CVE ID: CVE-2014-0083 State: PUBLISHED Published: 2019-11-21T13:57:00 Last Updated: 2024-08-06T09:05:38.571Z Vendors: ruby-net-ldap Products: ruby-net-ldap Problem Types: Password Description: The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0083 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0083 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0083 - https://github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04a
CVE ID: CVE-2014-0084 State: PUBLISHED Published: 2019-11-21T14:04:01 Last Updated: 2024-08-06T09:05:38.346Z Vendors: rubygem-openshift-origin-node Products: rubygem-openshift-origin-node Problem Types: Other Description: Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0084
CVE ID: CVE-2014-0085 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:05:38.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=C
the log. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0085
CVE ID: CVE-2014-0086 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0335.html - https://issues.jboss.org/browse/RF-13250 - https://bugzilla.redhat.com/show_bug.cgi?id=1067268 - https://github.com/pslegr/core-1/commit/8131f15003f5bec73d475d2b724
ttps://bugzilla.redhat.com/show_bug.cgi?id=1067268 - https://github.com/pslegr/core-1/commit/8131f15003f5bec73d475d2b724472e4b87d0757 - http://secunia.com/advisories/57053
CVE ID: CVE-2014-0087 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-06T09:05:38.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbac_user_edit action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1067623 - https://github.com/ManageIQ/manageiq/issues/1581
CVE ID: CVE-2014-0088 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T09:05:38.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html - http://www.securitytracker.com/id/1030150
CVE ID: CVE-2014-0089 State: PUBLISHED Published: 2014-03-27T16:00:00 Last Updated: 2024-08-06T09:05:37.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1071741 - http://projects.theforeman.org/issues/4456 - http://theforeman.org/security.html - http://secunia.com/advisories/57575
CVE ID: CVE-2014-0090 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1072151 - http://projects.theforeman.org/issues/4457 - http://theforeman.org/security.html
CVE ID: CVE-2014-0091 State: PUBLISHED Published: 2019-12-11T14:11:04 Last Updated: 2024-08-06T09:05:38.172Z Vendors: Foreman Products: Foreman Problem Types: Improper input validation Description: Foreman has improper input validation which could lead to partial Denial of Service Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0091 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0091 - https://access.redhat.com/security/cve/cve-2014-0091
CVE ID: CVE-2014-0092 State: PUBLISHED Published: 2014-03-06T18:00:00 Last Updated: 2024-08-06T09:05:38.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57321 - http://secunia.com/advisories/57260 - http://rhn.redhat.com/errata/RHSA-2014-0288.html - http://gnutls.org/security.html#GNUTLS-SA-2014-2 - http://lists.opensuse.org/opensuse-securit
rata/RHSA-2014-0288.html - http://gnutls.org/security.html#GNUTLS-SA-2014-2 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html - http://secunia.com/advisories/57274 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html - http://rhn.redhat.com/errata/RHSA-2014-0247.html - http://www.securityfocus.com/bid/65919 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html - http://secunia.com/advisories/57254 - http://rhn.redhat.com/errata/RHSA-2014-0339.html - http://secunia.com
00005.html - http://secunia.com/advisories/57254 - http://rhn.redhat.com/errata/RHSA-2014-0339.html - http://secunia.com/advisories/56933 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html - http://rhn.redhat.com/errata/RHSA-2014-0246.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=1069865 - http://www.ubuntu.com/usn/USN-2127-1 - http://secunia.com/advisories/57204 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html - http://secunia.com/advisories/57103 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html - http://lists.opensuse.org/opensu
es/57103 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html - http://www.debian.org/security/2014/dsa-2869
CVE ID: CVE-2014-0093 State: PUBLISHED Published: 2014-04-03T15:00:00 Last Updated: 2024-08-06T09:05:38.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0345.html - http://secunia.com/advisories/57675 - http://rhn.redhat.com/errata/RHSA-2014-0344.html - http://rhn.
SA-2014-0345.html - http://secunia.com/advisories/57675 - http://rhn.redhat.com/errata/RHSA-2014-0344.html - http://rhn.redhat.com/errata/RHSA-2014-0343.html - http://www.securityfocus.com/bid/66596
CVE ID: CVE-2014-0094 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T09:05:37.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html - http://secunia.com/advisories/59178 - http://www.vmware.com/security/advisories/VMSA-2014-0007.html - http://www.konakart.com/downloads/ver-7-3-0-0-whats-new - http://www.securityfocus.com/archive/1/53
MSA-2014-0007.html - http://www.konakart.com/downloads/ver-7-3-0-0-whats-new - http://www.securityfocus.com/archive/1/531362/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm - http://jvn.jp/en/jp/JVN19294237/index.html - http://struts.apache.org/release/2.3.x/docs/s2-020.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045 - http://www-01.ibm.com/support/docview.wss?uid=swg21676706 - http://secunia.com/advisories/56440 - http://www.securitytracker.com/id/1029876 - http://www.securityfocus.com/archive/1/532549/100/0/threaded - http://www.securityfocus.com/bid/
racker.com/id/1029876 - http://www.securityfocus.com/archive/1/532549/100/0/threaded - http://www.securityfocus.com/bid/65999
CVE ID: CVE-2014-0095 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T09:05:38.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://seclists.org/fulldisclosure/2014/May/134 - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://se
y/134 - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://secunia.com/advisories/59873 - http://www.securityfocus.com/bid/67673 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://svn.apache.org/viewvc?view=revision&revision=1578392 - http://www.securitytracker.com/id/1030300 - http://secunia.com/advisories/60729
CVE ID: CVE-2014-0096 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T09:05:38.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://advi
ated to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2014-0268.html - http://www.novell.com/support/kb/doc.php?id=7010166 - http://www.securityfocus.com/bid/67667 - http://secunia.com/advisories/59121 - http://rhn.redhat.com/errata/RHSA-2015-0765.html - http://secunia.com/advisories/59732 - http://secunia.com/advisories/59835 - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21681528 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://rhn.redhat.com/errata/RHSA-2015
d=swg21681528 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://secunia.com/advisories/59849 - http://linux.oracle.com/errata/ELSA-2014-0865.html - http://svn.apache.org/viewvc?view=revision&revision=1578637 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.securitytracker.com/id/1030301 - http://www.debian.org/security/2016/dsa-3530 - http://secunia.com/advisories/59678 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://tomcat.apache.org/security-7.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2015:0
://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2015:053 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://svn.apache.org/viewvc?view=revision&revision=1585853 - http://secunia.com/advisories/59616 - http://seclists.org/fulldisclosure/2014/May/135 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://www.oracle.com/te
ml - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://svn.apache.org/viewvc?view=revision&revision=1578655 - http://secunia.com/advisories/59873 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://svn.apache.org/viewvc?view=revision&revision=1578610 - http://svn.apache.org/viewvc?view=revision&revision=1578611 - http://www.debian.org/security/2016/dsa-3552 - http://secunia.com/advisorie
.org/viewvc?view=revision&revision=1578611 - http://www.debian.org/security/2016/dsa-3552 - http://secunia.com/advisories/60729 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa
b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2014-0097 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T09:05:38.302Z Vendors: Pivotal Products: Spring Security Problem Types: Authentication Bypass Description: The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://pivotal.io/security/cve-2014-0097
CVE ID: CVE-2014-0098 State: PUBLISHED Published: 2014-03-18T01:00:00 Last Updated: 2024-08-06T09:05:38.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1 - http://secunia.com/advisories/59315 - http://secunia.com/advisories/58230 - https://support.apple.com/HT
abilities_in1 - http://secunia.com/advisories/59315 - http://secunia.com/advisories/58230 - https://support.apple.com/HT204659 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c - http://advisories.mageia.org/MGASA-2014-0135.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15320.html - http://security.gentoo.org/glsa/glsa-201408-12.xml - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://secunia.com/advisories/58915 - http://secuni
12.xml - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://secunia.com/advisories/58915 - http://secunia.com/advisories/60536 - https://puppet.com/security/cve/cve-2014-0098 - http://www.securityfocus.com/bid/66303 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://secunia.com/advisories/59219 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html - http://secunia.com/advisories/59345 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http
- http://secunia.com/advisories/59345 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/kb/HT6535 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c?r1=1575394&r2=1575400&diff_format=h - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - https://httpd.apache.org/security/vulnerabilities_24.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www.ubuntu.com/usn/USN-2152-1 - http://www.apache.org/dist/httpd/CHANGES_2.4.9 - http://www-01.ibm.com/support/docview.wss?ui
buntu.com/usn/USN-2152-1 - http://www.apache.org/dist/httpd/CHANGES_2.4.9 - http://www-01.ibm.com/support/docview.wss?uid=swg21668973 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f5
0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.