Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6036 State: PUBLISHED Published: 2014-12-04T17:00:00 Last Updated: 2024-08-06T12:03:02.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or remote authenticated users to delete arbitrary files via a .. (dot dot) in the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_
nter/articles/servlet-vulnerability-fix - https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt - http://seclists.org/fulldisclosure/2014/Sep/110
CVE ID: CVE-2014-6037 State: PUBLISHED Published: 2014-10-26T19:00:00 Last Updated: 2024-08-06T12:03:02.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. (dot dot) sequences in its name, then accessing the executable via a direct request to the file under the web root. Fixed in Build 11072. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128102/ManageEngine-EventLog-Analyzer-9.9-
: - CVE Program Container: References: - http://packetstormsecurity.com/files/128102/ManageEngine-EventLog-Analyzer-9.9-Authorization-Code-Execution.html - http://www.exploit-db.com/exploits/34519 - http://seclists.org/fulldisclosure/2014/Aug/86 - http://seclists.org/fulldisclosure/2014/Sep/1 - https://github.com/rapid7/metasploit-framework/pull/3732 - http://seclists.org/fulldisclosure/2014/Sep/19 - http://www.securityfocus.com/bid/69482 - http://seclists.org/fulldisclosure/2014/Sep/20 - https://www.mogwaisecurity.de/advisories/MSA-2014-01.txt - http://osvdb.org/show/osvdb/110642
CVE ID: CVE-2014-6038 State: PUBLISHED Published: 2020-01-13T12:42:47 Last Updated: 2024-08-06T12:03:02.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.html - http://www.securityfocus.com/bid/70959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98540 - http://seclists.org/fulldisclosure/2014/Nov/12
CVE ID: CVE-2014-6039 State: PUBLISHED Published: 2020-01-13T12:47:13 Last Updated: 2024-08-06T12:03:02.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed version 10 Build 10000. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.html - http://seclists.org/fulldisclosure/2014/Nov/12 - http://www.securityfocus.com/bid/70960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98539
CVE ID: CVE-2014-6040 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T12:03:02.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69472 - http://linux.oracle.com/errata/ELSA-2015-0016.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=414
//linux.oracle.com/errata/ELSA-2015-0016.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=41488498b6 - https://security.gentoo.org/glsa/201602-02 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:175 - http://www.openwall.com/lists/oss-security/2014/08/29/3 - http://ubuntu.com/usn/usn-2432-1 - https://sourceware.org/bugzilla/show_bug.cgi?id=17325 - http://secunia.com/advisories/62100 - http://www.openwall.com/lists/oss-security/2014/09/02/1 - http://secunia.com/advisories/62146 - http://www.debian.org/security/2015/dsa-3142
CVE ID: CVE-2014-6041 State: PUBLISHED Published: 2014-09-02T10:00:00 Last Updated: 2024-08-06T12:03:02.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character, as demonstrated by an onclick="window.open('\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69548 - http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html - https://news.ycombinator.com/item?id=8325807
.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html - https://news.ycombinator.com/item?id=8325807 - https://android.googlesource.com/platform/external/webkit/+/1368e05e8875f00e8d2529fe6050d08b55ea4d87 - https://community.rapid7.com/community/metasploit/blog/2014/09/15/major-android-bug-is-a-privacy-disaster-cve-2014-6041 - https://android.googlesource.com/platform/external/webkit/+/7e4405a7a12750ee27325f065b9825c25b40598c - https://exchange.xforce.ibmcloud.com/vulnerabilities/95693 - https://news.ycombinator.com/item?id=8321185
CVE ID: CVE-2014-6043 State: PUBLISHED Published: 2014-09-11T15:00:00 Last Updated: 2024-08-06T12:03:02.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128102/ManageEngine-EventLog-Analyzer-9.9-Authorization-Code-Execution.html - http://www.exploit-db.com/exploits/34519 - http://seclists.org/fulldisclosure/2014/Au
uthorization-Code-Execution.html - http://www.exploit-db.com/exploits/34519 - http://seclists.org/fulldisclosure/2014/Aug/86 - http://seclists.org/fulldisclosure/2014/Sep/19 - http://www.securityfocus.com/bid/69482 - https://www.mogwaisecurity.de/advisories/MSA-2014-01.txt
CVE ID: CVE-2014-6045 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6046 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate users, (4) publish FAQs, (5) add or delete Glossary, (6) add or delete FAQ news, or (7) add or delete comments or add votes by leveraging lack of a CSRF token. Additional Analyst Notes: - CVE Program Container: References: - http://tec
dd votes by leveraging lack of a CSRF token. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6047 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6048 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6049 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6050 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-06T12:03:02.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. Additional Analyst Notes: - CVE Program Container: References: - http://techdefencelabs.com/security-advisories.html - https://www.phpmyfaq.de/security/advisory-2014-09-16
CVE ID: CVE-2014-6051 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T12:03:02.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - https://security.gentoo.org/glsa/201612-36 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - https://git
ps://security.gentoo.org/glsa/201612-36 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - https://github.com/newsoft/libvncserver/commit/045a044e8ae79db9244593fbce154cdf6e843273 - http://secunia.com/advisories/61506 - https://www.kde.org/info/security/advisory-20140923-1.txt - http://rhn.redhat.com/errata/RHSA-2015-0113.html - http://www.openwall.com/lists/oss-security/2014/09/25/11 - http://seclists.org/oss-sec/2014/q3/639 - https://security.gentoo.org/glsa/201507-07 - http://www.securityfocus.com/bid/70093 - http://www.debian.org/security/2014/dsa-3081 - http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html - http://lists.fedoraproject.org/
- http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2014-6052 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:03:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - http://secunia.com/advisories
CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - http://secunia.com/advisories/61682 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - http://secunia.com/advisories/61506 - https://github.com/newsoft/libvncserver/commit/85a778c0e45e87e35ee7199f1f25020648e8b812 - http://www.openwall.com/lists/oss-security/2014/09/25/11 - http://seclists.org/oss-sec/2014/q3/639 - http://ubuntu.com/usn/usn-2365-1 - https://security.gentoo.org/glsa/201507-07 - http://www.securityfocus.com/bid/70091 - http://www.debian.org/security/2014/dsa-3081 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.debian.org/d
4/dsa-3081 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2014-6053 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T12:03:02.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - https://github.com/newsoft/libvncserver/commit/6037a9074
rences: - http://www.ocert.org/advisories/ocert-2014-007.html - https://github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28 - http://secunia.com/advisories/61682 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - http://secunia.com/advisories/61506 - http://www.openwall.com/lists/oss-security/2014/09/25/11 - http://seclists.org/oss-sec/2014/q3/639 - http://ubuntu.com/usn/usn-2365-1 - https://security.gentoo.org/glsa/201507-07 - http://www.debian.org/security/2014/dsa-3081 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html - https://lists.debian.org/debian-lts-a
g00042.html - https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html - https://usn.ubuntu.com/4573-1/ - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2014-6054 State: PUBLISHED Published: 2014-10-06T14:00:00 Last Updated: 2024-08-06T12:03:02.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - http://www.securityfocus.com/bid/70094 - http://secunia.com/advisories/61682 - http://lists.opensuse.org/opensuse-update
http://www.securityfocus.com/bid/70094 - http://secunia.com/advisories/61682 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - https://github.com/newsoft/libvncserver/commit/05a9bd41a8ec0a9d580a8f420f41718bdd235446 - http://secunia.com/advisories/61506 - http://www.openwall.com/lists/oss-security/2014/09/25/11 - http://seclists.org/oss-sec/2014/q3/639 - https://security.gentoo.org/glsa/201507-07 - http://www.ubuntu.com/usn/USN-2365-1 - http://www.debian.org/security/2014/dsa-3081 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2014-6055 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T12:03:02.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2014-007.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - http://secunia.co
rg/advisories/ocert-2014-007.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html - http://secunia.com/advisories/61506 - https://www.kde.org/info/security/advisory-20140923-1.txt - http://rhn.redhat.com/errata/RHSA-2015-0113.html - https://github.com/newsoft/libvncserver/commit/f528072216dec01cee7ca35d94e171a3b909e677 - http://www.openwall.com/lists/oss-security/2014/09/25/11 - http://seclists.org/oss-sec/2014/q3/639 - https://security.gentoo.org/glsa/201507-07 - http://www.securityfocus.com/bid/70096 - http://www.debian.org/security/2014/dsa-3081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96187 - http://lists.fedoraproject.org/pipermail/package-announce/2014-
s://exchange.xforce.ibmcloud.com/vulnerabilities/96187 - http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html - https://github.com/newsoft/libvncserver/commit/06ccdf016154fde8eccb5355613ba04c59127b2e - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2014-6059 State: PUBLISHED Published: 2020-01-13T12:22:23 Last Updated: 2024-08-06T12:03:02.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128137/WordPress-Advanced-Access-Manager-2.8.2-File-Write-Code-Execution.html - http://www.securityfocus.com/bid/69549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95694
CVE ID: CVE-2014-6060 State: PUBLISHED Published: 2014-09-04T17:00:00 Last Updated: 2024-08-06T12:03:02.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:171 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.462420 - http://www.openwall.com/lists/oss-s
re.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.462420 - http://www.openwall.com/lists/oss-security/2014/09/01/11 - http://www.openwall.com/lists/oss-security/2014/07/30/5 - http://advisories.mageia.org/MGASA-2014-0334.html - http://roy.marples.name/projects/dhcpcd/ci/1d2b93aa5ce25a8a710082fe2d36a6bf7f5794d5?sbs=0 - http://www.securityfocus.com/bid/68970 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2014-6064 State: PUBLISHED Published: 2014-09-02T14:00:00 Last Updated: 2024-08-06T12:03:02.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030675 - https://kc.mcafee.com/corporate/index?page=content&id=SB10080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95690
CVE ID: CVE-2014-6070 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T12:03:02.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1) index.php or (2) detail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34525 - http://packetstormsecurity.com/files/128121/LogAnalyzer-3.6.5-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2014/Sep/17 - http://loganalyzer.adiscon.com/downloads/loganalyzer-3-6-6-v3-stable - https://exc
ists.org/fulldisclosure/2014/Sep/17 - http://loganalyzer.adiscon.com/downloads/loganalyzer-3-6-6-v3-stable - https://exchange.xforce.ibmcloud.com/vulnerabilities/95677
CVE ID: CVE-2014-6071 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T12:03:02.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Sep/10 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://bugzilla.redhat.com/show_bug.cgi?id=1136683
CVE ID: CVE-2014-6074 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T12:03:02.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95726 - http://www-01.ibm.com/support/docview.wss?uid=swg21683551 - http://www.securityfocus.com/bid/69640
CVE ID: CVE-2014-6075 State: PUBLISHED Published: 2014-11-28T02:00:00 Last Updated: 2024-08-06T12:03:02.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21691211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95727
CVE ID: CVE-2014-6076 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T12:03:02.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21684475 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95729 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581