Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9479 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T13:47:41.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/03/13 - http://www.openwall.com/lists/oss-security/2014/12/21/2 - https://phabricator.wikimedia.org/T76195 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html
CVE ID: CVE-2014-9480 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T13:47:41.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/03/13 - http://www.openwall.com/lists/oss-security/2014/12/21/2 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html - https://phabricator.wikimedia.org/T69180
CVE ID: CVE-2014-9481 State: PUBLISHED Published: 2020-01-27T15:38:50 Last Updated: 2024-08-06T13:47:41.063Z Vendors: Scribunto Products: Scribunto Problem Types: Other Description: The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/12/21/2 - http://www.openwall.com/lists/oss-security/2015/01/03/13 - https://phabricator.wikimedia.org/T73167 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html
CVE ID: CVE-2014-9482 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T13:47:41.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/03/14 - http://www.openwall.com/lists/oss-security/2014/12/31/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1178725 - http://www.securityfocus.com/bid/71839
CVE ID: CVE-2014-9483 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:47:40.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emacs 24.4 allows remote attackers to bypass security restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1181599 - http://www.openwall.com/lists/oss-security/2015/01/03/15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99688
CVE ID: CVE-2014-9485 State: PUBLISHED Published: 2018-01-16T00:00:00 Last Updated: 2024-08-06T13:47:41.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71846 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774321 - http://www.openwall.com/lists/oss-security/2014/12/31/11 - http://www.openwall.com/lists/oss-security/2015/01/03/16 - http://www.openwall.com/lists/o
/oss-security/2014/12/31/11 - http://www.openwall.com/lists/oss-security/2015/01/03/16 - http://www.openwall.com/lists/oss-security/2024/01/24/10
CVE ID: CVE-2014-9486 State: REJECTED Published: 2015-01-07T15:00:00 Last Updated: 2015-01-07T13:57:00 Description: No description available.
CVE ID: CVE-2014-9487 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:47:41.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/03/13 - https://security.gentoo.org/glsa/201502-04 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html - https://bugzilla.redhat.
01502-04 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html - https://bugzilla.redhat.com/show_bug.cgi?id=1175828
CVE ID: CVE-2014-9488 State: PUBLISHED Published: 2015-04-14T18:00:00 Last Updated: 2024-08-06T13:47:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159449.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00077.html - https://blog.fuzzing-project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html - http://advisories.mageia.org/MGASA-2015-0139.html - htt
project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html - http://advisories.mageia.org/MGASA-2015-0139.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:199
CVE ID: CVE-2014-9489 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:47:41.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/03/19 - http://www.securityfocus.com/bid/71499 - https://github.com/gollum/grit_adapter/commit/4520d973c81fecfebbeacd2ef2f1849d
http://www.securityfocus.com/bid/71499 - https://github.com/gollum/grit_adapter/commit/4520d973c81fecfebbeacd2ef2f1849d763951c7 - https://github.com/gollum/gollum/issues/913
CVE ID: CVE-2014-9490 State: PUBLISHED Published: 2015-01-20T15:00:00 Last Updated: 2024-08-06T13:47:40.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getsentry/raven-ruby/commit/477ee93a3f735be33bc1e726820654cdf6e22d8f - https://exchange.xforce.ibmcloud.com/vulnerabilities/99687 - http://seclists.org/oss-sec/2015/q1/26 - https://groups.google.com/forum/#%21topic/getsentry/Cz5bih0ZY1U
CVE ID: CVE-2014-9491 State: PUBLISHED Published: 2015-01-20T15:00:00 Last Updated: 2024-08-06T13:47:40.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.illumos.org/issues/5421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99686 - https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5 - http://seclists.org/oss-sec/2015/q1/27
CVE ID: CVE-2014-9492 State: REJECTED Published: 2015-01-05T18:00:00 Last Updated: 2015-01-05T16:57:01 Description: No description available.
CVE ID: CVE-2014-9493 State: PUBLISHED Published: 2015-01-07T19:00:00 Last Updated: 2024-08-06T13:47:41.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0246.html - https://bugs.launchpad.net/glance/+bug/1400966 - https://security.openstack.org/ossa/OSSA-2014-041.html - http://www.securityfocus.com/bid/71688 - http://lists.openstack.org/pipermail
ty.openstack.org/ossa/OSSA-2014-041.html - http://www.securityfocus.com/bid/71688 - http://lists.openstack.org/pipermail/openstack-announce/2014-December/000317.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
CVE ID: CVE-2014-9494 State: PUBLISHED Published: 2015-01-20T15:00:00 Last Updated: 2024-08-06T13:47:41.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99685 - https://groups.google.com/forum/#%21topic/rabbitmq-users/DMkypbSvIyM - http://seclists.org/oss-sec/2015/q1/30 - http://www.rabbitmq.com/release-notes/README-3.4.0.txt
CVE ID: CVE-2014-9495 State: PUBLISHED Published: 2015-01-10T19:00:00.000Z Last Updated: 2025-06-09T15:16:20.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2015/01/04/3 - http://www.securityfocus.com/bid/71820 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.a
curityfocus.com/bid/71820 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - http://sourceforge.net/p/png-mng/mailman/message/33173461/ - http://www.openwall.com/lists/oss-security/2015/01/10/1 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.openwall.com/lists/oss-security/2015/01/10/3 - http://sourceforge.net/p/png-mng/mailman/message/33172831/ - http://www.securitytracker.com/id/1031444 - http://secunia.com/advisories/62725
CVE ID: CVE-2014-9496 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T13:47:41.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71796 - https://github.com/erikd/libsndfile/issues/93 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00016.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:024 - https://github.com/erikd/libsndfile/commit/dbe1
html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:024 - https://github.com/erikd/libsndfile/commit/dbe14f00030af5d3577f4cabbf9861db59e9c378 - http://www.ubuntu.com/usn/USN-2832-1 - http://secunia.com/advisories/62320 - https://security.gentoo.org/glsa/201612-03 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://advisories.mageia.org/MGASA-2015-0015.html - http://www.openwall.com/lists/oss-security/2015/01/04/4 - https://seclists.org/bugtraq/2019/Apr/23
CVE ID: CVE-2014-9497 State: PUBLISHED Published: 2017-08-29T20:00:00 Last Updated: 2024-08-06T13:47:40.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mpg123 before 1.18.0. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mpg123/bugs/201/ - https://security.gentoo.org/glsa/201502-01 - http://www.openwall.com/lists/oss-security/2015/01/04/5
CVE ID: CVE-2014-9498 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:41.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit any content permission to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2386011 - http://www.openwall.com/lists/oss-security/2015/01/04/6 - http://www.openwall.com/lists/oss-securi
al.org/node/2386011 - http://www.openwall.com/lists/oss-security/2015/01/04/6 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://www.drupal.org/node/2386013 - https://www.drupal.org/node/2386387
CVE ID: CVE-2014-9499 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:41.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2390191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99678 - http://www.openwall.com/lists/oss-security/2015/01/04/6 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://www.drupal.org/node/239
ts/oss-security/2015/01/04/6 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://www.drupal.org/node/2390839
CVE ID: CVE-2014-9500 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:41.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Moip module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the notification page callback. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://www.drupal.org/node/2390699 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://www.drupal.org/node/2390849
CVE ID: CVE-2014-9501 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:40.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://www.drupal.org/node/2390897 - https://www.drupal.org/node/2390097 - http://www.openwall.com/lists/oss-security/2015/01/03/2
CVE ID: CVE-2014-9502 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T13:47:41.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://www.drupal.org/node/2394979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99655 - https://www.drupal.org/node/2395045
CVE ID: CVE-2014-9503 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T13:47:40.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99656 - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://www.drupal.org/node/2394979 - https://www.drupal.org/node/2395045
CVE ID: CVE-2014-9504 State: PUBLISHED Published: 2018-02-01T17:00:00 Last Updated: 2024-08-06T13:47:41.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99657 - https://www.drupal.org/node/2394979 - https://www.drupal.org/node/2395045
CVE ID: CVE-2014-9505 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:41.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2395015 - http://www.openwall.com/lists/oss-security/2015/01/04/6 - https://www.drupal.org/node/2391119 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://exchange.xforce.ib
tps://www.drupal.org/node/2391119 - http://www.openwall.com/lists/oss-security/2015/01/03/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99654
CVE ID: CVE-2014-9506 State: PUBLISHED Published: 2015-01-04T21:00:00 Last Updated: 2024-08-06T13:47:41.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/955 - http://secunia.com/advisories/62101 - https://www.mantisbt.org/bugs/changelog_page.php?version_id=191 - https://www.mantisbt.org/bugs/view.php?id=9885 - http://www.debian.org/secur
rg/bugs/changelog_page.php?version_id=191 - https://www.mantisbt.org/bugs/view.php?id=9885 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-9507 State: PUBLISHED Published: 2015-01-04T21:00:00 Last Updated: 2024-08-06T13:47:40.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks by setting the content model for a revision to JS. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T72901 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-November/000170.html
CVE ID: CVE-2014-9508 State: PUBLISHED Published: 2015-01-04T21:00:00 Last Updated: 2024-08-06T13:47:41.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
CVE ID: CVE-2014-9509 State: PUBLISHED Published: 2015-01-04T21:00:00Z Last Updated: 2024-09-17T03:13:04.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
CVE ID: CVE-2014-9510 State: PUBLISHED Published: 2015-01-09T18:00:00 Last Updated: 2024-08-06T13:47:41.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/14 - http://www.securityfocus.com/bid/71913 - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2015-001/
http://www.securityfocus.com/bid/71913 - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2015-001/ - http://www.tp-link.com/en/support/download/?model=TL-WR840N&version=V1
CVE ID: CVE-2014-9512 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T13:47:41.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034786 - http://www.securityfocus.com/bid/76093 - https://security.gentoo.org/glsa/201605-04 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00112.html - http://lists.opensuse.org/opensuse-updates/2016-06/msg00095.html - https://bugzilla.samba.org/show_bug.cgi?id=10977 - http://xteam.baidu.com/?p=16
opensuse-updates/2016-06/msg00095.html - https://bugzilla.samba.org/show_bug.cgi?id=10977 - http://xteam.baidu.com/?p=169 - http://www.ubuntu.com/usn/USN-2879-1 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00041.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://support.apple.com/kb/HT211170 - https://support.apple.com/kb/HT211175 - https://support.apple.com/kb/HT211171 - https://support.apple.com/kb/HT211168 - https://support.apple.com/kb/HT211289
CVE ID: CVE-2014-9513 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:47:41.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71868 - http://www.openwall.com/lists/oss-security/2015/01/05/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99649
CVE ID: CVE-2014-9514 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:47:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534648