Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2851 State: PUBLISHED Published: 2014-04-14T23:00:00 Last Updated: 2024-08-06T10:28:46.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac - https://bugzilla.redhat.com/show_bug.cgi?id=1086730 - http:/
t.git/commit/?id=b04c46190219a4f845e46a459e3102137b7f6cac - https://bugzilla.redhat.com/show_bug.cgi?id=1086730 - http://www.securitytracker.com/id/1030769 - http://secunia.com/advisories/59386 - https://lkml.org/lkml/2014/4/10/736 - http://secunia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - http://www.securityfocus.com/bid/66779 - http://www.openwall.com/lists/oss-security/2014/04/11/4
CVE ID: CVE-2014-2852 State: PUBLISHED Published: 2014-04-14T15:00:00Z Last Updated: 2024-09-17T00:26:40.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openafs.org/frameset/dl/openafs/1.6.7/ChangeLog - http://www.debian.org/security/2014/dsa-2899
CVE ID: CVE-2014-2853 State: PUBLISHED Published: 2014-04-29T18:00:00 Last Updated: 2024-08-06T10:28:46.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67068 - http://www.securitytracker.com/id/1030161 - http://secunia.com/advisories/58262 - https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6 - http://lists.wikimedia.
- https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-April/000149.html - https://www.mediawiki.org/wiki/Release_notes/1.22#Changes_since_1.22.5 - https://bugzilla.wikimedia.org/show_bug.cgi?id=63251 - https://www.mediawiki.org/wiki/Release_notes/1.21#Changes_since_1.21.8 - https://bugzilla.redhat.com/show_bug.cgi?id=1091967
CVE ID: CVE-2014-2854 State: PUBLISHED Published: 2014-05-08T18:00:00 Last Updated: 2024-08-06T10:28:46.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SemanticTitle extension before 1.1.0 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mediawiki.org/wiki/Extension:SemanticTitle#Version_1.1.0
CVE ID: CVE-2014-2855 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T10:28:46.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file. Additional Analyst Notes: - CVE Program Container: References: - https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=0dedfbce2c1b851684ba658861fe9d620636c56a - http://www.ubuntu.com/usn/USN-2171-1 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00006.html - http://www.openwall.com/lists/oss-security/2014/04
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00006.html - http://www.openwall.com/lists/oss-security/2014/04/14/5 - http://secunia.com/advisories/57948 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131910.html - https://bugs.launchpad.net/ubuntu/+source/rsync/+bug/1307230 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:131 - https://bugzilla.samba.org/show_bug.cgi?id=10551 - http://advisories.mageia.org/MGASA-2015-0065.html - http://www.openwall.com/lists/oss-security/2014/04/15/1
CVE ID: CVE-2014-2856 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T10:28:46.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57880 - http://www.securityfocus.com/bid/66788 - http://www.ubuntu.com/usn/USN-2172-1 - http://www.openwall.com/lists/oss-security/2014/04/14/2 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - htt
172-1 - http://www.openwall.com/lists/oss-security/2014/04/14/2 - http://rhn.redhat.com/errata/RHSA-2014-1388.html - http://advisories.mageia.org/MGASA-2014-0193.html - http://www.cups.org/documentation.php/relnotes.html - http://www.cups.org/str.php?L4356 - http://www.openwall.com/lists/oss-security/2014/04/15/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:108
CVE ID: CVE-2014-2857 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T10:28:46.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the META-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this issue was SPLIT from CVE-2014-0053 due to different researchers per ADT5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531281/100/0/threaded - http://www.gopivotal.com/security/cve-2014-0053 - http://
http://www.securityfocus.com/archive/1/531281/100/0/threaded - http://www.gopivotal.com/security/cve-2014-0053 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html
CVE ID: CVE-2014-2858 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T10:28:46.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/531281/100/0/threaded - http://www.gopivotal.com/security/cve-2014-0053 - http://archives.neohapsis.com/ar
com/archive/1/531281/100/0/threaded - http://www.gopivotal.com/security/cve-2014-0053 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html
CVE ID: CVE-2014-2859 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T03:43:32.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2860 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T20:43:10.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to inject arbitrary web script or HTML via a crafted HTTP request to a (1) ColdFusion or (2) JavaScript component. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2861 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T03:34:22.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string, as demonstrated by bypassing a protection mechanism that removes only the "alert" string. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2862 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T19:41:35.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2863 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T02:00:44.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a full pathname in a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2864 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T02:41:18.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a filename parameter containing directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2865 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T22:24:52.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2866 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T16:12:39.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2867 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T19:20:47.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2868 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T00:05:47.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2869 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T02:01:05.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2870 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T17:02:43.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2871 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T17:14:07.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2872 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T17:48:50.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive information from a directory listing via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2873 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-17T02:57:37.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2874 State: PUBLISHED Published: 2014-04-15T23:00:00Z Last Updated: 2024-09-16T16:27:24.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unspecified context. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/437385
CVE ID: CVE-2014-2875 State: PUBLISHED Published: 2020-02-06T15:26:27 Last Updated: 2024-08-06T10:28:46.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/318 - http://www.securityfocus.com/archive/1/531981/100/0/threaded - http://www.syhunt.com/en/index.php?n=Advisories.Cgilua-weaksessionid
CVE ID: CVE-2014-2879 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T10:28:46.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the uploadPatch parameter to the System/Advanced page (settings_advanced.html) or (2) the uploadLicenses parameter in the License management (settings_upload_dlicense.html) page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029965 - http://www.vulnerability-lab.com/get_content.php?id=
ontainer: References: - http://www.securitytracker.com/id/1029965 - http://www.vulnerability-lab.com/get_content.php?id=1191 - http://www.securityfocus.com/archive/1/531642/100/0/threaded - http://www.securityfocus.com/bid/66501 - http://seclists.org/fulldisclosure/2014/Mar/409 - http://www.sonicwall.com/us/shared/download/Support-Bulletin_Email-Security_Scripting_Vulnerability__Resolved_in__ES746.pdf
CVE ID: CVE-2014-2880 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T10:28:46.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity/faces/firstlogin. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32670 - http://www.securityfocus.com/bid/66615 - http://www.osvdb.org/105384 - http://www.oracle.com/technetwor
exploits/32670 - http://www.securityfocus.com/bid/66615 - http://www.osvdb.org/105384 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://packetstormsecurity.com/files/125992/Oracle-Identity-Manager-11g-R2-SP1-Unvalidated-Redirect.html
CVE ID: CVE-2014-2881 State: PUBLISHED Published: 2014-05-01T14:00:00 Last Updated: 2024-08-06T10:28:46.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030180 - http://support.citrix.com/article/CTX140651
CVE ID: CVE-2014-2882 State: PUBLISHED Published: 2014-05-01T14:00:00 Last Updated: 2024-08-06T10:28:46.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030180 - http://support.citrix.com/article/CTX140651
CVE ID: CVE-2014-2884 State: PUBLISHED Published: 2018-03-19T21:00:00 Last Updated: 2024-08-06T10:28:46.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a (1) TC_IOCTL_OPEN_TEST or (2) TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf - http://www.openwall.com/lists/oss-security/2014/04/17/7
CVE ID: CVE-2014-2885 State: PUBLISHED Published: 2018-03-19T21:00:00 Last Updated: 2024-08-06T10:28:46.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c. Additional Analyst Notes: - CVE Program Container: References: - https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCry
- CVE Program Container: References: - https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf - http://www.openwall.com/lists/oss-security/2014/04/17/7
CVE ID: CVE-2014-2886 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T10:28:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain situations involving an untrusted substring within this argument, as demonstrated by an untrusted filename encountered during installation of a VirtualBox extension pack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201812-10 - https://launchpad.net/bugs/1186676 - http://savannah.nongnu.org/bugs/?40023 - ht
://security.gentoo.org/glsa/201812-10 - https://launchpad.net/bugs/1186676 - http://savannah.nongnu.org/bugs/?40023 - https://community.rapid7.com/community/metasploit/blog/2014/07/07/virtualbox-filename-command-execution-via-gksu
CVE ID: CVE-2014-2887 State: REJECTED Published: 2022-07-07T15:58:53 Last Updated: 2022-07-07T15:58:53 Description: No description available.
CVE ID: CVE-2014-2888 State: PUBLISHED Published: 2014-04-23T14:00:00 Last Updated: 2024-08-06T10:28:46.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/04/16/1 - http://www.openwall.com/lists/oss-security/2014/04/18/4 - http://seclists.org/fulldisclosure/2014/Apr/243 - http://www.vapid.dhs.org/advisories/spfagent-remotecmd.html
CVE ID: CVE-2014-2889 State: PUBLISHED Published: 2014-04-27T00:00:00 Last Updated: 2024-08-06T10:28:46.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a03ffcf873fe0f2565386ca8ef832144c42e67fa - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8 - https://gi
%3Bh=a03ffcf873fe0f2565386ca8ef832144c42e67fa - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8 - https://github.com/torvalds/linux/commit/a03ffcf873fe0f2565386ca8ef832144c42e67fa - http://www.openwall.com/lists/oss-security/2014/04/18/6
CVE ID: CVE-2014-2890 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T10:28:46.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_error parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66665 - http://seclists.org/oss-sec/2014/q2/122 - http://seclists.org/oss-sec/2014/q2/141