Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1612 State: PUBLISHED Published: 2014-01-30T18:00:00 Last Updated: 2024-08-06T09:50:09.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530871/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/90656 - http://www.kb.cert.org/vuls/id/252294 - http://packetstormsecurity.com/files/124931/Med
loud.com/vulnerabilities/90656 - http://www.kb.cert.org/vuls/id/252294 - http://packetstormsecurity.com/files/124931/Mediatrix-4402-Cross-Site-Scripting.html - http://osvdb.org/102415 - http://www.securityfocus.com/bid/65108 - http://secunia.com/advisories/56638
CVE ID: CVE-2014-1613 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T09:50:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by (1) inc/public/lib.urlhandlers.php or (2) plugins/pages/_public.php. Additional Analyst Notes: - CVE Program Container: References: - https://labs.mwrinfosecurity.com/advisories/2014/05/14/dotclear-php-object-injection/ - http://dotclear.org/blog/post/2014/01/20/Dotclear-2.6.2
CVE ID: CVE-2014-1615 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T09:50:09.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijack the authentication of administrators for requests that add new administrative users and have other unspecified action, as demonstrated by a request to api/user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57645 - http://www.secureworks.com/advisories/SWRX-2014-007/SWRX-2014-007.pdf
CVE ID: CVE-2014-1617 State: PUBLISHED Published: 2020-02-13T21:51:38 Last Updated: 2024-08-06T09:50:09.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/cve/CVE-2014-1617 - http://fortiguardcenter.com/encyclopedia/ips/38068
CVE ID: CVE-2014-1618 State: PUBLISHED Published: 2014-01-21T15:00:00 Last Updated: 2024-08-06T09:50:09.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) p_id parameter to products.php or id parameter to (3) page.php or (4) news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iphobos.com/blog/2014/01/04/uaepd-script-multiple-sql-injection-vulnerabilty - http://osvdb.org/101899 - http://packetstormsecurity.com/files/124723/uaepdshopping-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilitie
http://packetstormsecurity.com/files/124723/uaepdshopping-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90214 - http://www.securityfocus.com/bid/64734 - http://osvdb.org/101859 - http://secunia.com/advisories/56351 - http://osvdb.org/101900
CVE ID: CVE-2014-1619 State: PUBLISHED Published: 2014-01-21T15:00:00 Last Updated: 2024-08-06T09:50:10.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the (1) resource_id or (2) version_id parameter to recursos/agent.php or (3) login or (4) pass parameter to login.usuario. Additional Analyst Notes: - CVE Program Container: References: - http://www.cubicfactory.com/es/cubic-cms/changelog/id/260 - http://osvdb.org/101721 - http://osvdb.org/101719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90153 - http://packetstormsecurity.com/files
p://osvdb.org/101719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90153 - http://packetstormsecurity.com/files/124652
CVE ID: CVE-2014-1620 State: PUBLISHED Published: 2014-01-21T15:00:00 Last Updated: 2024-08-06T09:50:09.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in add.php in HIOX Guest Book (HGB) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name1, (2) email, or (3) cmt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101844 - http://packetstormsecurity.com/files/124681/Hiox-Guest-Book-5.0-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/64683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90156
CVE ID: CVE-2014-1624 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:50:09.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/21/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736247 - https://exchan
.openwall.com/lists/oss-security/2014/01/21/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90618 - http://www.securityfocus.com/bid/65042 - http://www.openwall.com/lists/oss-security/2014/01/21/3
CVE ID: CVE-2014-1626 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T09:50:09.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90620 - http://secunia.com/advisories/55404 - http://www.securityfocus.com/bid/65057 - https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/Changes -
visories/55404 - http://www.securityfocus.com/bid/65057 - https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/Changes - http://www.nntp.perl.org/group/perl.perl4lib/2014/01/msg3073.html - http://lists.katipo.co.nz/pipermail/koha/2014-January/038430.html - http://libmail.georgialibraries.org/pipermail/open-ils-general/2014-January/009442.html
CVE ID: CVE-2014-1631 State: PUBLISHED Published: 2018-01-31T18:00:00 Last Updated: 2024-08-06T09:50:09.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530891/100/0/threaded - http://bazaar.launchpad.net/~eventum-developers/eventum/trunk/revision/4666 - https://www.htbridge.com/advisory/HTB23198 - https://bugs.launchpad.net/eventum/+bug/1271499
CVE ID: CVE-2014-1632 State: PUBLISHED Published: 2018-01-31T18:00:00 Last Updated: 2024-08-06T09:50:09.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530891/100/0/threaded - https://www.htbridge.com/advisory/HTB23198 - https://bugs.launchpad.net/eventum/+bug/1271499 - http://bazaar.launchpad.net/~eventum-developers/eventum/trunk/revision/4665
CVE ID: CVE-2014-1634 State: PUBLISHED Published: 2020-03-09T16:25:59 Last Updated: 2024-08-06T09:50:09.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/advisories/cve-2014-1634/
CVE ID: CVE-2014-1635 State: PUBLISHED Published: 2014-11-12T16:00:00 Last Updated: 2024-08-06T09:50:09.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/articles/from-0-day-to-exploit-buffer-overflow-in-belkin-n750-cve-2014-1635/ - http://www.exploit-db.com/exploits/35184 - http://www.belkin.com/us/support-article?articleNum=4831 - https://labs.integrity.pt/advisories/cve-2014-1635/ - http://osv
p://www.belkin.com/us/support-article?articleNum=4831 - https://labs.integrity.pt/advisories/cve-2014-1635/ - http://osvdb.org/show/osvdb/114345 - http://www.securitytracker.com/id/1031210 - http://www.securityfocus.com/bid/70977
CVE ID: CVE-2014-1636 State: PUBLISHED Published: 2014-01-22T19:00:00 Last Updated: 2024-08-06T09:50:10.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to (1) admin_school_names.php, (2) admin_subjects.php, (3) admin_grades.php, (4) admin_terms.php, (5) admin_school_years.php, (6) admin_sgrades.php, (7) admin_media_codes_1.php, (8) admin_infraction_codes.php, (9) admin_generations.php, (10) admin_relations.php, (11) admin_titles.php, or (12) health_allergies.php in sw/. Additional Analyst Not
ations.php, (10) admin_relations.php, (11) admin_titles.php, or (12) health_allergies.php in sw/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101879 - http://osvdb.org/101884 - http://osvdb.org/101883 - http://osvdb.org/101885 - http://osvdb.org/101874 - http://osvdb.org/101881 - http://osvdb.org/101878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90175 - http://osvdb.org/101877 - http://www.securityfocus.com/bid/64707 - http://osvdb.org/101880 - http://osvdb.org/101882 - http://osvdb.org/101876 - http://packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.html - http://osvdb.org/101875
CVE ID: CVE-2014-1637 State: PUBLISHED Published: 2014-01-22T19:00:00 Last Updated: 2024-08-06T09:50:09.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a database backup via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64707 - http://osvdb.org/101888 - http://packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.html
CVE ID: CVE-2014-1638 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:50:09.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/22/4 - http://www.osvdb.org/102379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90669 - http://www.secur
14/01/22/4 - http://www.osvdb.org/102379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90669 - http://www.securityfocus.com/bid/65098 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736359 - http://www.osvdb.org/102381 - http://www.openwall.com/lists/oss-security/2014/01/22/3
CVE ID: CVE-2014-1639 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:50:10.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/22/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90662 - http://www.osvdb.org/102380 - http://bugs.debian.org/cgi-bin/bugre
/exchange.xforce.ibmcloud.com/vulnerabilities/90662 - http://www.osvdb.org/102380 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736357 - http://www.securityfocus.com/bid/65098 - http://www.openwall.com/lists/oss-security/2014/01/22/3
CVE ID: CVE-2014-1640 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T09:50:10.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/22/4 - http://www.osvdb.org/102383 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90663 - htt
tp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90663 - http://www.openwall.com/lists/oss-security/2014/01/22/3
CVE ID: CVE-2014-1642 State: PUBLISHED Published: 2014-01-26T11:00:00 Last Updated: 2024-08-06T09:50:10.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use, which allows local guest administrators to cause a denial of service (memory corruption and hypervisor crash) and possibly execute arbitrary code via vectors related to an out-of-memory error that triggers a (1) use-after-free or (2) double free. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-a
ble free. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127607.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90649 - http://secunia.com/advisories/56557 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127580.html - http://www.openwall.com/lists/oss-security/2014/01/23/4 - http://osvdb.org/102406 - http://www.securitytracker.com/id/1029679 - http://www.securityfocus.com/bid/65097 - http://xenbits.xen.org/xsa/advisory-83.html
CVE ID: CVE-2014-1643 State: PUBLISHED Published: 2014-02-07T02:00:00 Last Updated: 2024-08-06T09:50:10.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029729 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140205_00 - http://www.securityfocus.com/bid/65300 - https://ex
id=security_advisory&pvid=security_advisory&year=&suid=20140205_00 - http://www.securityfocus.com/bid/65300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90946
CVE ID: CVE-2014-1644 State: PUBLISHED Published: 2014-03-29T01:00:00 Last Updated: 2024-08-06T09:50:10.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140327_00 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0172.html - http://ww
=security_advisory&year=&suid=20140327_00 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0172.html - http://www.securityfocus.com/bid/66399 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140328-0_Symantec_LiveUpdate_Administrator_Multiple_vulnerabilities_wo_poc_v10.txt
CVE ID: CVE-2014-1645 State: PUBLISHED Published: 2014-03-29T01:00:00 Last Updated: 2024-08-06T09:50:11.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140327_00 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0172.html - http://www.securityfocus.com/bid/66400 - https
7_00 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0172.html - http://www.securityfocus.com/bid/66400 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140328-0_Symantec_LiveUpdate_Administrator_Multiple_vulnerabilities_wo_poc_v10.txt
CVE ID: CVE-2014-1646 State: PUBLISHED Published: 2014-04-23T19:00:00 Last Updated: 2024-08-06T09:50:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140423_00 - http://www.securityfocus.com/bid/67016
CVE ID: CVE-2014-1647 State: PUBLISHED Published: 2014-04-23T19:00:00 Last Updated: 2024-08-06T09:50:09.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67020 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140423_00
CVE ID: CVE-2014-1648 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T09:50:09.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66966 - http://www.securitytracker.com/id/1030136 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&ye
6 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140422_00 - http://seclists.org/fulldisclosure/2014/Apr/256
CVE ID: CVE-2014-1649 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:50:11.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-14-127/ - http://www.securityfocus.com/bid/67189 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140512_00 - http://www.exploit-db.com/exploits/33521
CVE ID: CVE-2014-1650 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T09:50:11.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030443 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 - http://www.securityfocus.com/bid/67753 - http://www.symantec.com/security_resp
ity_advisory&year=2014&suid=20140616_00 - http://www.securityfocus.com/bid/67753 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00
CVE ID: CVE-2014-1651 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T09:50:10.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030443 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%2
advisory&year=2014&suid=20140616_00 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00 - http://www.securityfocus.com/bid/67754 - http://www.kb.cert.org/vuls/id/719172
CVE ID: CVE-2014-1652 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T09:50:10.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67755 - http://www.securitytracker.com/id/1030443 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 - http://www.sy