Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-5277 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T11:41:47.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-11/msg00048.html - https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU
CVE ID: CVE-2014-5278 State: PUBLISHED Published: 2020-02-07T17:03:36 Last Updated: 2024-08-06T11:41:47.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=docker-user/jyf9_mYcMI8/EIZfwe2QNzYJ - https://github.com/xxg1413/docker-security/tree/master/CVE-2014-5278 - https://groups.google.com/forum/#%21topic/docker-announce/lK6fQY6Jy84
CVE ID: CVE-2014-5279 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-06T11:41:47.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easier for remote attackers to gain privileges or execute arbitrary code from children containers. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/docker-announce/aQoVmQlcE0A/smPuBNYf8VwJ
CVE ID: CVE-2014-5280 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-06T11:41:48.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker daemons enabling TCP connections without TLS authentication. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/docker-announce/aQoVmQlcE0A/smPuBNYf8VwJ
CVE ID: CVE-2014-5282 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-06T11:41:47.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/docker-announce/aQoVmQlcE0A/smPuBNYf8VwJ - https://bugzilla.redhat.com/show_bug.cgi?id=1168436
CVE ID: CVE-2014-5284 State: PUBLISHED Published: 2014-12-02T01:00:00 Last Updated: 2024-08-06T11:41:47.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35234 - http://packetstormsecurity.com/files/129111/OSSEC-2.8-Privilege-Escalation.html - https://github.com/ossec/ossec-hids/releases/tag/2.8.1
CVE ID: CVE-2014-5285 State: PUBLISHED Published: 2014-09-04T10:00:00 Last Updated: 2024-08-06T11:41:48.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt - http://www.tibco.com/mk/advisory.jsp
CVE ID: CVE-2014-5286 State: PUBLISHED Published: 2015-02-19T02:00:00 Last Updated: 2024-08-06T11:41:47.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt - http://www.tibco.com
am Container: References: - http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218
CVE ID: CVE-2014-5287 State: PUBLISHED Published: 2020-01-08T16:36:22 Last Updated: 2024-08-06T11:41:48.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html - https://www.exploit-db.com/exploits/36609/ - https://www.fxc.jp/news/Product_Overview-LoadMaster_Release_Notes.pdf
CVE ID: CVE-2014-5288 State: PUBLISHED Published: 2020-02-07T16:46:27 Last Updated: 2024-08-06T11:41:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html - https://www.exploit-db.com/exploits/36609/
CVE ID: CVE-2014-5289 State: PUBLISHED Published: 2019-12-27T20:35:52 Last Updated: 2024-08-06T11:41:47.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127912/Senkas-Kolibri-WebServer-2.0-Buffer-Overflow.html - http://www.securityfocus.com/bid/69263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95350
CVE ID: CVE-2014-5297 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T11:41:47.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conduct PHP object injection and Server-Side Request Forgery (SSRF) attacks via crafted serialized data in the report parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128352/X2Engine-4.1.7-PHP-Object-Injection.html - http://x2community.com/topic/1804-important-security-patch/ - http://www.securityfocus.com/archive/1/533513/100/0/thr
- http://x2community.com/topic/1804-important-security-patch/ - http://www.securityfocus.com/archive/1/533513/100/0/threaded - http://karmainsecurity.com/KIS-2014-09 - http://seclists.org/fulldisclosure/2014/Sep/77
CVE ID: CVE-2014-5298 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T11:41:48.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains uppercase letters, as demonstrated using a PHP program. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128353/X2Engine-4.1.7-Unrestricted-File-Upload.html - http://seclists.org/fulldisclosure/2014/Sep/78 - http://w
om/files/128353/X2Engine-4.1.7-Unrestricted-File-Upload.html - http://seclists.org/fulldisclosure/2014/Sep/78 - http://www.securityfocus.com/archive/1/533514/100/0/threaded - http://karmainsecurity.com/KIS-2014-10 - https://github.com/X2Engine/X2Engine/blob/master/CHANGELOG.md - https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf
CVE ID: CVE-2014-5300 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T11:41:48.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70173 - http://www.securityfocus.com/archive/1/533574/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/96699 - http://www.adaptivecomputing.com/security-advisory/ - http://www.exploit-db.com/exploits/34865 - http://pa
ities/96699 - http://www.adaptivecomputing.com/security-advisory/ - http://www.exploit-db.com/exploits/34865 - http://packetstormsecurity.com/files/128483/Moab-Dynamic-Configuration-Authentication-Bypass.html
CVE ID: CVE-2014-5301 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T11:41:47.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/35845/ - http://secunia.com/advisories/62105 - http://seclists.org/fulldisclosure/2015/Jan/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99610 - http://packetstormsecurity.com/files/130020/ManageEngine-Multiple-Products-Authenticated-File-Upload.html - http://packetstormse
acketstormsecurity.com/files/130020/ManageEngine-Multiple-Products-Authenticated-File-Upload.html - http://packetstormsecurity.com/files/129806/ManageEngine-Shell-Upload-Directory-Traversal.html - http://www.securityfocus.com/archive/1/534377/100/0/threaded
CVE ID: CVE-2014-5302 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T11:41:47.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99611 - http://secunia.com/advisories/62105 - http://seclists.org/fulldisclosure/2015/Jan/5 - http://seclists.org/fulldisclosure/2015/Jan/12 - http://packetstormsecurity.com/files/129806/Manage
closure/2015/Jan/5 - http://seclists.org/fulldisclosure/2015/Jan/12 - http://packetstormsecurity.com/files/129806/ManageEngine-Shell-Upload-Directory-Traversal.html - http://secunia.com/advisories/62121 - http://www.securityfocus.com/archive/1/534377/100/0/threaded
CVE ID: CVE-2014-5307 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T11:41:48.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Aug/53 - http://packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html - http://www.securityfocus.com/archive/1/533182/100/0/threaded - http://www.securityfocus.com/bid/69293 - https://exchange
http://www.securityfocus.com/archive/1/533182/100/0/threaded - http://www.securityfocus.com/bid/69293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95382 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5307/
CVE ID: CVE-2014-5308 State: PUBLISHED Published: 2014-10-08T17:00:00 Last Updated: 2024-08-06T11:41:48.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action to lib/project/projectView.php or (2) id parameter to lib/events/eventinfo.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitorious.org/testlink-ga/testlink-code/commit/7a099737b4c739bf083df016c0a99f66dd8ac0b3 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5308 - http://www.sec
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5308 - http://www.securityfocus.com/bid/70207 - http://seclists.org/fulldisclosure/2014/Oct/13 - http://osvdb.org/show/osvdb/112524 - http://www.exploit-db.com/exploits/34863 - http://packetstormsecurity.com/files/128521/TestLink-1.9.11-SQL-Injection.html - http://seclists.org/fulldisclosure/2014/Oct/11
CVE ID: CVE-2014-5313 State: PUBLISHED Published: 2014-09-10T10:00:00 Last Updated: 2024-08-06T11:41:47.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000104 - http://jvn.jp/en/jp/JVN73357573/370331/index.html - http://jvn.jp/en/jp/JVN73357573/index.html
CVE ID: CVE-2014-5314 State: PUBLISHED Published: 2014-11-24T02:00:00 Last Updated: 2024-08-06T11:41:48.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62248 - http://jvn.jp/en/jp/JVN14691234/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000130 - https://cs.cybozu.co.jp/2014/1110-2.html
CVE ID: CVE-2014-5315 State: PUBLISHED Published: 2014-09-26T10:00:00 Last Updated: 2024-08-06T11:41:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN84376800/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95958 - http://jvn.jp/en/jp/JVN84376800/244523/index.html
CVE ID: CVE-2014-5316 State: PUBLISHED Published: 2014-09-22T01:00:00 Last Updated: 2024-08-06T11:41:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN61637002/index.html - http://www.securityfocus.com/bid/69985 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000110 - http://dotclear.org/blog/post/2014/08/18/Dotclear-2.6.4
CVE ID: CVE-2014-5317 State: PUBLISHED Published: 2014-09-18T10:00:00 Last Updated: 2024-08-06T11:41:48.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36205251/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000106 - http://www.securityfocus.com/bid/69870 - http://php365.com/information.html
CVE ID: CVE-2014-5318 State: PUBLISHED Published: 2014-09-26T10:00:00 Last Updated: 2024-08-06T11:41:48.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70146 - http://jvn.jp/en/jp/JVN80531230/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000108 - https://www.facebook.com/jigbrowserplus
CVE ID: CVE-2014-5319 State: PUBLISHED Published: 2014-09-26T10:00:00 Last Updated: 2024-08-06T11:41:48.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote attackers to write to files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN16485017/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000107 - http://www.securityfocus.com/bid/70147 - http://jvn.jp/en/jp/JVN16485017/995479/index.html
CVE ID: CVE-2014-5320 State: PUBLISHED Published: 2014-09-22T01:00:00 Last Updated: 2024-08-06T11:41:48.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN08994136/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000109
CVE ID: CVE-2014-5321 State: PUBLISHED Published: 2014-09-22T01:00:00 Last Updated: 2024-08-06T11:41:48.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2319. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000114 - http://jvn.jp/en/jp/JVN85812843/index.html
CVE ID: CVE-2014-5322 State: PUBLISHED Published: 2014-09-22T01:00:00 Last Updated: 2024-08-06T11:41:48.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030880 - http://jvn.jp/en/jp/JVN53579095/index.html - http://www.securityfocus.com/bid/69987 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-00
//jvn.jp/en/jp/JVN53579095/index.html - http://www.securityfocus.com/bid/69987 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000113
CVE ID: CVE-2014-5323 State: PUBLISHED Published: 2014-09-24T00:00:00 Last Updated: 2024-08-06T11:41:48.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) application 1.0.5 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000111 - http://jvn.jp/en/jp/JVN04560253/index.html - https://play.google.com/store/apps/details?id=jp.co.yukoyuko.android.yukoyuko_android
CVE ID: CVE-2014-5324 State: PUBLISHED Published: 2014-09-26T10:00:00 Last Updated: 2024-08-06T11:41:48.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN87863382/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000112
CVE ID: CVE-2014-5325 State: PUBLISHED Published: 2014-11-24T02:00:00 Last Updated: 2024-08-06T11:41:48.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allow remote attackers to read arbitrary files via DOM data containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000117 - http://jvn.jp/en/jp/JVN91502163/index.html - http://www.securityfoc
ces: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000117 - http://jvn.jp/en/jp/JVN91502163/index.html - http://www.securityfocus.com/bid/71093
CVE ID: CVE-2014-5326 State: PUBLISHED Published: 2014-11-24T02:00:00 Last Updated: 2024-08-06T11:41:48.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52422792/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000118
CVE ID: CVE-2014-5327 State: PUBLISHED Published: 2014-10-12T01:00:00 Last Updated: 2024-08-06T11:41:48.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a denial of service (reboot) via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000120 - http://jvn.jp/en/jp/JVN58417930/index.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-373056.htm
CVE ID: CVE-2014-5328 State: PUBLISHED Published: 2014-10-12T01:00:00 Last Updated: 2024-08-06T11:41:48.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a denial of service (reboot) via a long parameter in an API service request message. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000119 - http://jvn.jp/en/jp/JVN63587560/index.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-373056.htm
CVE ID: CVE-2014-5329 State: PUBLISHED Published: 2023-09-08T02:52:41.251Z Last Updated: 2024-08-06T11:41:48.637Z Vendors: TripodWorks CO.,LTD. Products: GIGAPOD OFFICEHARD Appliance model, GIGAPOD 2010 / GIGAPOD 3 Appliance model, GIGAPOD 2010 / GIGAPOD 3 Software model Problem Types: Denial-of-service (DoS) Description: GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Progra
requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23809730/