Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8145 State: PUBLISHED Published: 2014-12-31T22:00:00 Last Updated: 2024-08-06T13:10:50.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:015 - http://www.debian.org/security/2014/dsa-3112 - http://packetstormsecurity.com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.html - http://www.securityfocus.com/bid/71774 - https://lists.debian.or
com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.html - http://www.securityfocus.com/bid/71774 - https://lists.debian.org/debian-lts-announce/2019/02/msg00034.html - https://security.gentoo.org/glsa/201612-30 - http://advisories.mageia.org/MGASA-2014-0561.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.ocert.org/advisories/ocert-2014-010.html
CVE ID: CVE-2014-8146 State: PUBLISHED Published: 2015-05-25T22:00:00 Last Updated: 2024-08-06T13:10:51.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - https://raw.githubusercontent.com/pedrib/PoC/master/
ogram Container: References: - https://support.apple.com/HT205221 - https://raw.githubusercontent.com/pedrib/PoC/master/generic/i-c-u-fail.txt - http://bugs.icu-project.org/trac/changeset/37162 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://security.gentoo.org/glsa/201507-04 - http://www.kb.cert.org/vuls/id/602540 - https://support.apple.com/HT205267 - http://seclists.org/fulldisclosure/2015/May/14 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.ht
chives/security-announce/2015/Sep/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - http://openwall.com/lists/oss-security/2015/05/05/6 - https://support.apple.com/HT205213 - http://www.securityfocus.com/bid/74457 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html - http://www.debian.org/security/2015/dsa-3323 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2014-8147 State: PUBLISHED Published: 2015-05-25T22:00:00 Last Updated: 2024-08-06T13:10:50.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/pedrib/PoC/master/generic/i-c-u-fail
yst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/pedrib/PoC/master/generic/i-c-u-fail.txt - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://security.gentoo.org/glsa/201507-04 - http://www.kb.cert.org/vuls/id/602540 - https://support.apple.com/HT205267 - http://seclists.org/fulldisclosure/2015/May/14 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - http://openwall.com/lists/oss-security/2015/05/05/6 - https://support.apple.com/HT205213 - http://www.securityfocus.com/bid/74457 - http://www.debian.org/security/2015/dsa-3323
tps://support.apple.com/HT205213 - http://www.securityfocus.com/bid/74457 - http://www.debian.org/security/2015/dsa-3323 - http://bugs.icu-project.org/trac/changeset/37080 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2014-8148 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T13:10:50.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/05/2 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html
CVE ID: CVE-2014-8149 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T13:10:51.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72280 - https://git.opendaylight.org/gerrit/#/c/14088/ - https://git.opendaylight.org/gerrit/#/c/13972/ - https://wiki.opendaylight.org/view/Security_Advisories - http://www.openwall.com/lists/oss-security/2015/01/22/1
CVE ID: CVE-2014-8150 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:10:50.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62361 - https://kc.mcafee.com/corporate/index?page=content&id=SB10131 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html - http://advisories.mageia.org/MGASA-2015-0020.html - http:
aproject.org/pipermail/package-announce/2015-May/157188.html - http://advisories.mageia.org/MGASA-2015-0020.html - http://www.securityfocus.com/bid/71964 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://www.securitytracker.com/id/1032768 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147856.html - http://curl.haxx.se/docs/adv_20150108B.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1254.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html -
edhat.com/errata/RHSA-2015-1254.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147876.html - http://www.ubuntu.com/usn/USN-2474-1 - https://security.gentoo.org/glsa/201701-47 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:021 - http://secunia.com/advisories/62075 - http://www.debian.org/security/2015/dsa-3122 - http:/
sories?name=MDVSA-2015:021 - http://secunia.com/advisories/62075 - http://www.debian.org/security/2015/dsa-3122 - http://secunia.com/advisories/61925
CVE ID: CVE-2014-8151 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:10:51.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, when using the DarwinSSL (aka SecureTransport) back-end for TLS, does not check if a cached TLS session validated the certificate when reusing the session, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://curl.haxx.se/docs/adv_20150108A.html - http:
/lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://curl.haxx.se/docs/adv_20150108A.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743 - https://support.apple.com/kb/HT205031 - https://security.gentoo.org/glsa/201701-47 - http://secunia.com/advisories/61925
CVE ID: CVE-2014-8152 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T13:10:51.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99993 - http://santuario.apache.org/secadv.data/CVE-2014-8152.txt.asc - http://www.securityfocus.com/bid/72115 - http://www.securitytracker.com/id/1031556 - http://seclists.org/oss-sec/2015/q1/181 - https://lists.apache.org/thread.html/680e6938b
ecuritytracker.com/id/1031556 - http://seclists.org/oss-sec/2015/q1/181 - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2014-8153 State: PUBLISHED Published: 2015-01-15T15:00:00 Last Updated: 2024-08-06T13:10:50.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71961 - https://bugs.launchpad.net/neutron/+bug/1398779 - https://bugs.launchpad.net/neutron/+bug/1399172 - http://lists.openstack.org/pipermail/openstack-announce/2015-January
- https://bugs.launchpad.net/neutron/+bug/1399172 - http://lists.openstack.org/pipermail/openstack-announce/2015-January/000320.html - https://bugzilla.redhat.com/show_bug.cgi?id=1169408
CVE ID: CVE-2014-8154 State: PUBLISHED Published: 2015-01-27T15:00:00 Last Updated: 2024-08-06T13:10:51.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-01/msg00069.html - https://bugzilla.redhat.com/show_bug.cgi?id=1177840 - https://bugzilla.redhat.com/show_bug.cgi?
/2015-01/msg00069.html - https://bugzilla.redhat.com/show_bug.cgi?id=1177840 - https://bugzilla.redhat.com/show_bug.cgi?id=1181404
CVE ID: CVE-2014-8155 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T13:10:50.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73317 - http://rhn.redhat.com/errata/RHSA-2015-1457.html - https://gitlab.com/gnutls/gnutls/commit/897cbce62c0263a498088ac3e465aa5f05f8719c - https://support.f5.com/csp/article/K53330207
CVE ID: CVE-2014-8156 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-06T13:10:51.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.12.0-2 as packaged in Debian, the upstream cornucopia.git (fsoaudiod, fsodatad, fsodeviced, fsogsmd, fsonetworkd, fsotdld, fsousaged) git master on 2015-01-19, the upstream framework.git 0.10.1 and git master on 2015-01-19, phonefsod 0.1+git20121018-1 as packaged in Debian, Ubuntu and potentially other packages, and potentially other fso modules do not properly filter D-Bus message paths,
n, Ubuntu and potentially other packages, and potentially other fso modules do not properly filter D-Bus message paths, which might allow local users to cause a denial of service (dbus-daemon memory consumption), or execute arbitrary code as root by sending a crafted D-Bus message to any D-Bus system service. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100488 - http://www.openwall.com/lists/oss-security/2015/01/27/25 - http://www.securityfocus.com/bid/72363
CVE ID: CVE-2014-8157 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T13:10:51.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62583 - http://www.ocert.org/advisories/ocert-2015-001.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://bugzilla.redhat.com/show_bug.cgi?i
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://bugzilla.redhat.com/show_bug.cgi?id=1179282 - http://secunia.com/advisories/62619 - http://www.securityfocus.com/bid/72296 - http://secunia.com/advisories/62765 - http://www.ubuntu.com/usn/USN-2483-2 - http://www.ubuntu.com/usn/USN-2483-1 - http://advisories.mageia.org/MGASA-2015-0038.html - http://secunia.com/advisories/62615 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:034 - http://www.debian.org/security/2015/dsa-3138 - http://rhn.redhat.com/errata/RHSA-2015-0074.html - h
ame=MDVSA-2015:034 - http://www.debian.org/security/2015/dsa-3138 - http://rhn.redhat.com/errata/RHSA-2015-0074.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:159
CVE ID: CVE-2014-8158 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T13:10:51.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62583 - http://www.ocert.org/advisories/ocert-2015-001.html - http://secunia.com/advisories/62619 - http://www.securityfocus.com/bid/72293 - http://secunia.com/advisories/62765 - http://www.ubuntu.com/usn/USN-2483-2 - http://www.
w.securityfocus.com/bid/72293 - http://secunia.com/advisories/62765 - http://www.ubuntu.com/usn/USN-2483-2 - http://www.ubuntu.com/usn/USN-2483-1 - http://advisories.mageia.org/MGASA-2015-0038.html - http://secunia.com/advisories/62615 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:034 - http://www.debian.org/security/2015/dsa-3138 - http://rhn.redhat.com/errata/RHSA-2015-0074.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:159
CVE ID: CVE-2014-8159 State: PUBLISHED Published: 2015-03-16T10:00:00 Last Updated: 2024-08-06T13:10:50.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0783.
finiband/. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0783.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://www.ubuntu.com/usn/USN-2529-1 - http://www.ubuntu.com/usn/USN-2530-1 - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2561-1 - http://rhn.redhat.com/errata/RHSA-2015-0751.html - http://rhn.redhat.com/errata/RHSA-2015-0803.html - http://www.debian.org/security/2015/dsa-3237 - http://www.ubuntu.com/usn
p://rhn.redhat.com/errata/RHSA-2015-0803.html - http://www.debian.org/security/2015/dsa-3237 - http://www.ubuntu.com/usn/USN-2528-1 - http://www.ubuntu.com/usn/USN-2527-1 - http://rhn.redhat.com/errata/RHSA-2015-0919.html - http://rhn.redhat.com/errata/RHSA-2015-0782.html - http://www.ubuntu.com/usn/USN-2526-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html - http://www.securitytracker.com/id/1032224 - http://www.securityfocus.com/bid/73060 - https://bugzilla.redhat.com/show_bug.cgi?id=1181166 - http://www.ubuntu.com/usn/USN-2525-1 - http://kb.juniper.net/InfoCenter/index?page=cont
at.com/show_bug.cgi?id=1181166 - http://www.ubuntu.com/usn/USN-2525-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://rhn.redhat.com/errata/RHSA-2015-0870.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://rhn.redhat.com/errata/RHSA-2015-0726.html - http://rhn.redhat.com/errata/RHSA-2015-0674.html
CVE ID: CVE-2014-8160 State: PUBLISHED Published: 2015-03-02T11:00:00 Last Updated: 2024-08-06T13:10:51.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2515-1 - http://www.debian.org/security/2015/dsa-3170 - https://github.com/torvalds/linux/commit/db29a9508a9246e77087c
N-2515-1 - http://www.debian.org/security/2015/dsa-3170 - https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.securityfocus.com/bid/72061 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://www.ubuntu.com/usn/USN-2514-1 - http://www.ubuntu.com/usn/USN-2518-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:057 - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://www.spinics.net/lists/netfilter-devel/msg33430.html - http://git.kernel.org/?p=linux/kernel/git
=MDVSA-2015:058 - http://www.spinics.net/lists/netfilter-devel/msg33430.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b - https://bugzilla.redhat.com/show_bug.cgi?id=1182059 - http://rhn.redhat.com/errata/RHSA-2015-0284.html - http://www.openwall.com/lists/oss-security/2015/01/14/3 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html - http://www.ubuntu.com/usn/USN-2517-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html - http://www.ubuntu.com/usn/USN-2516-1 - http://www.ubuntu.com/usn/USN-2513-1 - http://rhn.redhat.com/errata/RHSA-2015-0674.html
CVE ID: CVE-2014-8161 State: PUBLISHED Published: 2020-01-27T15:29:21 Last Updated: 2024-08-06T13:10:51.110Z Vendors: PostgreSQL Global Development Group Products: PostgreSQL Problem Types: Path Disclosure Description: PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/9.4/static/release-9-4-1.html - http://www.postgresql.org/docs/current/static/release-9-0-19.html - http://www.postgresql.org/docs/curr
ase-9-4-1.html - http://www.postgresql.org/docs/current/static/release-9-0-19.html - http://www.postgresql.org/docs/current/static/release-9-1-15.html - http://www.postgresql.org/docs/current/static/release-9-2-10.html - http://www.postgresql.org/docs/current/static/release-9-3-6.html - http://www.postgresql.org/about/news/1569/ - http://www.debian.org/security/2015/dsa-3155
CVE ID: CVE-2014-8162 State: PUBLISHED Published: 2015-05-14T14:00:00 Last Updated: 2024-08-06T13:10:50.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74595 - http://rhn.redhat.com/errata/RHSA-2015-0957.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
CVE ID: CVE-2014-8163 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-06T13:10:51.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1187340 - https://access.redhat.com/security/cve/cve-2014-8163
CVE ID: CVE-2014-8164 State: PUBLISHED Published: 2022-07-06T19:06:41 Last Updated: 2024-08-06T13:10:51.170Z Vendors: n/a Products: Red Hat CloudForms Problem Types: CWE-295 Description: A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1151208