Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8874 State: PUBLISHED Published: 2014-12-02T16:00:00 Last Updated: 2024-08-06T13:33:11.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Dec/1 - https://www.redteam-pentesting.de/advisories/rt-sa-2014-009 - http://www.securityfocus.com/archive/1/534126/100/0/threaded
CVE ID: CVE-2014-8875 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T13:33:11.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted XML-RPC request, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129621/Revive-Adserver-3.0.5-Cross-Site-Scripting-Denial-Of-Service.html - http://www.securityfocus.com/archive/1/534264/100/0/threaded - http://www.securityfocus.com/bid/71721 - http://www.reviv
http://www.securityfocus.com/archive/1/534264/100/0/threaded - http://www.securityfocus.com/bid/71721 - http://www.revive-adserver.com/security/revive-sa-2014-002/
CVE ID: CVE-2014-8877 State: PUBLISHED Published: 2014-12-05T18:00:00 Last Updated: 2024-08-06T13:33:11.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP create_function function. Additional Analyst Notes: - CVE Program Container: References: - https://downloadsmanager.cminds.com/release-notes/ - http://packetstormsecurity.com/files/129183/WordPress-CM-Download-Manager-2.0.0-Code-Injection.html - http://
e-notes/ - http://packetstormsecurity.com/files/129183/WordPress-CM-Download-Manager-2.0.0-Code-Injection.html - http://www.securityfocus.com/bid/71204 - http://www.securityfocus.com/archive/1/534037/100/0/threaded - http://www.itas.vn/news/code-injection-in-cm-download-manager-plugin-66.html
CVE ID: CVE-2014-8878 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-06T13:33:11.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75986 - https://bugs.kde.org/show_bug.cgi?id=340312 - https://bugzilla.redhat.com/show_bug.cgi?id=1243777 - http://www.openwall.com/lists/oss-security/2015/07/16/10
CVE ID: CVE-2014-8884 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T13:33:11.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/14/7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2e323ec96077642d397bb1c355def53
/14/7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2e323ec96077642d397bb1c355def536d489d16 - http://www.debian.org/security/2014/dsa-3093 - http://rhn.redhat.com/errata/RHSA-2015-0864.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - http://rhn.redhat.com/errata/RHSA-2015-0782.html - https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 - http://secunia.com/advisories/62305 - https://bugzilla.redhat.com/show_bug.cgi?id=1164266
CVE ID: CVE-2014-8886 State: PUBLISHED Published: 2016-01-08T20:00:00 Last Updated: 2024-08-06T13:33:11.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/12 - http://www.securityfocus.com/archive/1/537246/100/0/threaded - https://www.redteam-pentesting.de/advisories/rt-sa-2014-014 - http://packetstormsecurity.co
ve/1/537246/100/0/threaded - https://www.redteam-pentesting.de/advisories/rt-sa-2014-014 - http://packetstormsecurity.com/files/135161/AVM-FRITZ-Box-Arbitrary-Code-Execution-Via-Firmware-Images.html - https://avm.de/service/sicherheitsinfos-zu-updates/
CVE ID: CVE-2014-8887 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T13:33:11.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21902933 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 - http://www-01
.ibm.com/support/docview.wss?uid=swg1PO04455 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 - http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923
CVE ID: CVE-2014-8888 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-06T13:33:11.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/110755 - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.03.B02_EN.PDF
CVE ID: CVE-2014-8889 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-06T13:33:11.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73035 - http://www.securityfocus.com/archive/1/534843/100/1500/threaded - https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android/ - http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html -
opbox-sdk-for-android/ - http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html - http://seclists.org/fulldisclosure/2015/Mar/61
CVE ID: CVE-2014-8890 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T13:33:11.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlet's deployment descriptor security constraints and ServletSecurity annotations. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21963275 - http://www.securitytracker.com/id/1033384 - http://www-01.ibm.com/support/docview.wss?uid=swg21690185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI29911 - http://ww
w-01.ibm.com/support/docview.wss?uid=swg21690185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI29911 - http://www.securityfocus.com/bid/71834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99009
CVE ID: CVE-2014-8891 State: PUBLISHED Published: 2015-03-06T23:00:00 Last Updated: 2024-08-06T13:33:11.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 - http://rhn.redhat.com/errata/RHSA-2015-0136.ht
m.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html -
-security-announce/2015-02/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html - https://bugzilla.redhat.com/show_bug.cgi?id=1189142 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html
CVE ID: CVE-2014-8892 State: PUBLISHED Published: 2015-03-06T23:00:00 Last Updated: 2024-08-06T13:33:12.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 - http://rhn.redhat.com/errata/
: - http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015 - http://rhn.redhat.com/errata/RHSA-2015-0136.html - http://www.securityfocus.com/bid/73259 - https://bugzilla.redhat.com/show_bug.cgi?id=1189145 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html - http://rhn.redhat.com/errata/RHSA-2015-0264.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://lists.opensuse.org/opensuse-securit
msg00025.html - https://www-304.ibm.com/support/docview.wss?uid=swg21695474 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html
CVE ID: CVE-2014-8893 State: PUBLISHED Published: 2015-01-29T01:00:00 Last Updated: 2024-08-06T13:33:11.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21694767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99012 - http://secunia.com/advisories/62674
CVE ID: CVE-2014-8894 State: PUBLISHED Published: 2015-01-29T01:00:00 Last Updated: 2024-08-06T13:33:12.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99013 - http://www.securityfocus.com/bid/72408 - http://secunia.com/advisories/62674 - http://www-01.ibm.com/support/docview.wss?uid=swg21694772
CVE ID: CVE-2014-8895 State: PUBLISHED Published: 2015-01-29T01:00:00 Last Updated: 2024-08-06T13:33:11.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72430 - http://www-01.ibm.com/support/docview.wss?uid=swg21694771 - http://secunia.com/advisories/62674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99014
CVE ID: CVE-2014-8896 State: PUBLISHED Published: 2014-12-22T16:00:00 Last Updated: 2024-08-06T13:33:11.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to modify the administrator's credentials and consequently gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692176 - https://exchange.
es: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99049
CVE ID: CVE-2014-8897 State: PUBLISHED Published: 2014-12-22T16:00:00 Last Updated: 2024-08-06T13:33:11.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8898 and CVE-2014-8899. Additional Analyst Notes: - CVE Program Container: References: - https://exc
ility than CVE-2014-8898 and CVE-2014-8899. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99050 - http://www-01.ibm.com/support/docview.wss?uid=swg21692176
CVE ID: CVE-2014-8898 State: PUBLISHED Published: 2014-12-22T16:00:00 Last Updated: 2024-08-06T13:33:11.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8899. Additional Analyst Notes: - CVE Program Container: References: - http://www-
ility than CVE-2014-8897 and CVE-2014-8899. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99051
CVE ID: CVE-2014-8899 State: PUBLISHED Published: 2014-12-22T16:00:00 Last Updated: 2024-08-06T13:33:12.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8898. Additional Analyst Notes: - CVE Program Container: References: - http://www-
ility than CVE-2014-8897 and CVE-2014-8898. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99052
CVE ID: CVE-2014-8900 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T13:33:12.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21695293 - http://www.securityfocus.com/bid/72900
CVE ID: CVE-2014-8901 State: PUBLISHED Published: 2014-12-18T16:00:00 Last Updated: 2024-08-06T13:33:12.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted XML query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21692358 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05933 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05938 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05936 - http://www.securityfoc
support/docview.wss?uid=swg1IT05938 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05936 - http://www.securityfocus.com/bid/71734 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05937 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT05939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99110
CVE ID: CVE-2014-8902 State: PUBLISHED Published: 2014-12-19T02:00:00 Last Updated: 2024-08-06T13:33:12.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF04 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99150 - http://www-01.ibm.com/support/docview.wss?uid=swg21692107 - http://www-01.ibm.com/support/docview.wss?uid
lities/99150 - http://www-01.ibm.com/support/docview.wss?uid=swg21692107 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI29956
CVE ID: CVE-2014-8903 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T13:33:12.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73947 - http://www-01.ibm.com/support/docview.wss?uid=swg21700098
CVE ID: CVE-2014-8904 State: PUBLISHED Published: 2015-01-15T22:00:00 Last Updated: 2024-08-06T13:33:12.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62195 - http://www.securitytracker.com/id/1031596 - http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IV67907 - http://www.ibm.com/support/docview.wss?uid=isg1IV68070 - https://exchange.xforce.ibmcloud.com/vulnerab
uid=isg1IV67907 - http://www.ibm.com/support/docview.wss?uid=isg1IV68070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99193 - http://www.ibm.com/support/docview.wss?uid=isg1IV68082 - https://www.exploit-db.com/exploits/38576/ - http://www.ibm.com/support/docview.wss?uid=isg1IV68478 - http://www.ibm.com/support/docview.wss?uid=isg1IV67908
CVE ID: CVE-2014-8909 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T13:33:12.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF29, 8.0.0.x before 8.0.0.1 CF15, and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI30620 - http://www-01.ibm.com/support/docview.wss?uid=swg21694738 - https://exchange.xforce.ibmcloud.com/vulnerabilit
1PI30620 - http://www-01.ibm.com/support/docview.wss?uid=swg21694738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99250
CVE ID: CVE-2014-8910 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T13:33:12.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06355 - http://www-01.ibm.com/support/docview.wss?uid=swg21697988 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06353 - http://www.securityfocus.com/bid/75949 - http://www.security
http://www-01.ibm.com/support/docview.wss?uid=swg1IT06353 - http://www.securityfocus.com/bid/75949 - http://www.securitytracker.com/id/1032883 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06354 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT06356
CVE ID: CVE-2014-8911 State: PUBLISHED Published: 2015-02-14T02:00:00 Last Updated: 2024-08-06T13:33:12.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP002 IF003 and 2.0.3 before 2.0.3.2 FP002 allows remote attackers to inject arbitrary web script or HTML via the Accept-Language HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21693329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99252