Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
andriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html
CVE ID: CVE-2014-3571 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T10:50:17.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.
yst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/71937 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - https://github.c
chnetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.openssl.org/news/secadv_20150108.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr20
://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2015-0066.html - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security
05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://marc.info/?l=bugtraq&m=142496179803395&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html - https://github
rity/2015/dsa-3125 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html - https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b
CVE ID: CVE-2014-3572 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T10:50:17.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021
hnetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/71942 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63 - http:/
traq&m=143748090628601&w=2 - https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63 - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://www.openssl.org/news/secadv_20150108.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html -
security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - http://rhn.redhat.com/errata/RHSA-2015-0066.html - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2
http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://marc.info/?l=bugtraq&m=142496179803395&w=2 - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125
CVE ID: CVE-2014-3573 State: PUBLISHED Published: 2014-10-18T00:00:00 Last Updated: 2024-08-06T10:50:17.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030807 - http://rhn.redhat.com/errata/RHSA-2014-1161.html
CVE ID: CVE-2014-3574 State: PUBLISHED Published: 2014-09-04T17:00:00 Last Updated: 2024-08-06T10:50:17.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21996759 - http://www.securityfocus.com/bid/69648 - http://poi.apache.org/changes.html - http://secunia.com/advisories/61766 - https://lucene.apache.org/solr/solrnews.html#18-august-2014-recommendation-to-update-apa
/secunia.com/advisories/61766 - https://lucene.apache.org/solr/solrnews.html#18-august-2014-recommendation-to-update-apache-poi-in-apache-solr-480-481-and-490-installations - http://rhn.redhat.com/errata/RHSA-2014-1370.html - http://www.apache.org/dist/poi/release/RELEASE-NOTES.txt - http://secunia.com/advisories/60419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95768 - http://rhn.redhat.com/errata/RHSA-2014-1400.html - http://rhn.redhat.com/errata/RHSA-2014-1398.html - http://secunia.com/advisories/59943 - http://rhn.redhat.com/errata/RHSA-2014-1399.html
CVE ID: CVE-2014-3575 State: PUBLISHED Published: 2014-08-27T00:00:00 Last Updated: 2024-08-06T10:50:17.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html - http://www.securityfocus.com/bid/69354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95420 - http://www.openoffice.org/security/cves/CVE-2014-3575.html - http://blog.documentfoundation.org/201
nerabilities/95420 - http://www.openoffice.org/security/cves/CVE-2014-3575.html - http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/ - http://rhn.redhat.com/errata/RHSA-2015-0377.html - http://secunia.com/advisories/59877 - http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.html - https://security.gentoo.org/glsa/201603-05 - http://secunia.com/advisories/59600 - http://www.securitytracker.com/id/1030754
CVE ID: CVE-2014-3576 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T10:50:17.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134274/Apache-ActiveMQ-5.10.1-Denial-Of-Service.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://www.debian.org/security/2015/dsa-3330 - http://www.securityfocus.com/bid/76272 - http://www.oracle.co
7953.html - http://www.debian.org/security/2015/dsa-3330 - http://www.securityfocus.com/bid/76272 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://activemq.2283324.n4.nabble.com/About-CVE-2014-3576-tp4699628.html - http://www.securitytracker.com/id/1033898 - https://github.com/apache/activemq/commit/00921f2 - http://www.securityfocus.com/archive/1/536862/100/0/threaded - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2014-3577 State: PUBLISHED Published: 2014-08-21T00:00:00 Last Updated: 2024-08-06T10:50:17.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field. Additional Analyst Notes: - CVE Program C
ificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1891.html - http://rhn.redhat.com/errata/RHSA-2015-0765.html - https://access.redhat.com/solutions/1165533 - http://www.osvdb.org/110143 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://secunia.com/advisories/60713 - http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2014-1166.html - http://rhn.redhat.
http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2014-1166.html - http://rhn.redhat.com/errata/RHSA-2015-1888.html - http://rhn.redhat.com/errata/RHSA-2014-1833.html - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2015-0158.html - http://rhn.redhat.com/errata/RHSA-2014-1834.html - http://secunia.com/advisories/60466 - http://rhn.redhat.com/errata/RHSA-2015-0125.html - http://rhn.redhat.com/errata/RHSA-2015-1176.html - http://rhn.redhat.com/errata/RHSA-2016-1931.html - http://rhn.redhat.com/errata/RHSA-2014-1146.html - http://rhn.redhat.com/errata/RHSA-2015-1177.html - http://www.securityfocus.com/bid/69258 - http://rh
A-2014-1146.html - http://rhn.redhat.com/errata/RHSA-2015-1177.html - http://www.securityfocus.com/bid/69258 - http://rhn.redhat.com/errata/RHSA-2014-1892.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564 - http://rhn.redhat.com/errata/RHSA-2014-1835.html - http://www.securitytracker.com/id/1030812 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782 - http://www.ubuntu.com/usn/USN-2769-1 - http://secunia.com/advisories/60589 - http://rhn.redhat.com/errata/RHSA-2014-1836.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95327 - http://seclists.org/f
dhat.com/errata/RHSA-2014-1836.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95327 - http://seclists.org/fulldisclosure/2014/Aug/48 - http://rhn.redhat.com/errata/RHSA-2016-1773.html - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%
ps://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/
984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/06/1 - https://security.netapp.com/advisory/ntap-20231027-0003/
CVE ID: CVE-2014-3578 State: PUBLISHED Published: 2015-02-19T20:00:00 Last Updated: 2024-08-06T10:50:18.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN49154900/index.html - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://www.securityfocus.com/bid/68042 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000054 - https://rhn.redhat.com/errata/RHSA-2015-0234.html - https://rhn.redhat.com/errata/RHSA-2015-0235.html - http://pivota
- https://rhn.redhat.com/errata/RHSA-2015-0234.html - https://rhn.redhat.com/errata/RHSA-2015-0235.html - http://pivotal.io/security/cve-2014-3578 - https://bugzilla.redhat.com/show_bug.cgi?id=1131882 - https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
CVE ID: CVE-2014-3579 State: PUBLISHED Published: 2017-10-27T19:00:00 Last Updated: 2024-08-06T10:50:17.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72508 - http://seclists.org/oss-sec/2015/q1/428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100721 - https://issues.apache.org/jira/browse/APLO-366 - http://activemq.apache.org/security-advisories.data/CVE-2014-357
0721 - https://issues.apache.org/jira/browse/APLO-366 - http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2014-3580 State: PUBLISHED Published: 2014-12-18T15:00:00 Last Updated: 2024-08-06T10:50:17.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3107 - http://rhn.redhat.com/errata/RHSA-2015-0166.html - https://support.apple.com/HT204427 - http://www.securityfocus.com/bid/71726 - http://subversion.apache.org/se
166.html - https://support.apple.com/HT204427 - http://www.securityfocus.com/bid/71726 - http://subversion.apache.org/security/CVE-2014-3580-advisory.txt - http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html - http://rhn.redhat.com/errata/RHSA-2015-0165.html - http://secunia.com/advisories/61131 - http://www.ubuntu.com/usn/USN-2721-1
CVE ID: CVE-2014-3581 State: PUBLISHED Published: 2014-10-10T10:00:00 Last Updated: 2024-08-06T10:50:17.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1624234 - https://security.gentoo.org/glsa/201610-02 - http://rhn.redhat.com/errata/RHSA-2015-0325.html - http://www.oracle.com/technetwork/top
ity.gentoo.org/glsa/201610-02 - http://rhn.redhat.com/errata/RHSA-2015-0325.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2523-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1031005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97027 - http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup&pathrev=1627749 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=1149709 - http://www.securityfocus.com/bid/71656 - https://support.apple.com/kb/HT205031 - http://
t.com/show_bug.cgi?id=1149709 - http://www.securityfocus.com/bid/71656 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3
ttpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde3
307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-3582 State: PUBLISHED Published: 2017-03-29T20:00:00 Last Updated: 2024-08-06T10:50:17.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.0
CVE ID: CVE-2014-3583 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T10:50:17.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers. Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.html - https://bugzilla.redhat.com/show_bug.cgi?id=1163555 - http://www.ubuntu.com/usn/USN-2523-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://