deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-5077
Published: 2014-08-01
Description: The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
CVSS Score: 7.1 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
CVE: CVE-2014-5160
Published: 2014-08-01
Description: Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request.  NOTE: the vendor reportedly asserts that this behavior is "by design.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://zerodayinitiative.com/advisories/ZDI-14-262/; http://zerodayinitiative.com/advisories/ZDI-14-263/; http://zerodayinitiative.com/advisories/ZDI-14-262/
CVE: CVE-2014-5161
Published: 2014-08-01
Description: The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html
CVE: CVE-2014-5162
Published: 2014-08-01
Description: The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' and '\r' characters, which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html
CVE: CVE-2014-5163
Published: 2014-08-01
Description: The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html
CVE: CVE-2014-5164
Published: 2014-08-01
Description: The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html
CVE: CVE-2014-5165
Published: 2014-08-01
Description: The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00025.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html
CVE: CVE-2013-5756
Published: 2014-08-03
Description: Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to cgi-bin/cgiServer.exx.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/33740; http://www.exploit-db.com/exploits/33740
CVE: CVE-2013-5757
Published: 2014-08-03
Description: Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiServer.exx.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/33740; http://www.exploit-db.com/exploits/33740
CVE: CVE-2013-5758
Published: 2014-08-03
Description: cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/127093/Yealink-VoIP-Phone-SIP-T38G-Privilege-Escalation.html; http://packetstormsecurity.com/files/127096/Yealink-VoIP-Phone-SIP-T38G-Remote-Command-Execution.html; http://www.exploit-db.com/exploits/33741
CVE: CVE-2013-5759
Published: 2014-08-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-5758.  Reason: This candidate is not an independent vulnerability; it is resultant from CVE-2013-5758.  Notes: All CVE users should reference CVE-2013-5758 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-0179
Published: 2014-08-03
Description: libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue.  NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
CVSS Score: 1.9 (LOW)
CWE: CWE-20
References: http://libvirt.org/news.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html
CVE: CVE-2014-5177
Published: 2014-08-03
Description: libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virDomainDefineXML, (2) virNetworkCreateXML, (3) virNetworkDefineXML, (4) virStoragePoolCreateXML, (5) virStoragePoolDefineXML, (6) virStorageVolCreateXML, (7) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virConnectDomainXMLFromNative, (12) virConnectDomainXMLToNative, (13) virSecretDefineXML, (14) virNWFilterDefineXML, (15) virDomainSnapshotCreateXML, (16) virDomainSaveImageDefineXML, (17) virDomainCreateXMLWithFiles, (18) virConnectCompareCPU, or (19) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue.  NOTE: this issue was SPLIT from CVE-2014-0179 per ADT3 due to different affected versions of some vectors.
CVSS Score: 1.2 (LOW)
CWE: CWE-20
References: http://libvirt.org/news.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html
CVE: CVE-2013-4159
Published: 2014-08-06
Description: ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://advisories.mageia.org/MGASA-2014-0274.html; http://lists.opensuse.org/opensuse-updates/2014-06/msg00052.html; http://wiki.samba.org/index.php/CTDB2releaseNotes#ctdb_2.5
CVE: CVE-2014-3560
Published: 2014-08-06
Description: NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
CVSS Score: 7.9 (HIGH)
CWE: CWE-94
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
CVE: CVE-2014-5082
Published: 2014-08-06
Description: Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (2) url parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html; http://www.exploit-db.com/exploits/34189; http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE: CVE-2014-5088
Published: 2014-08-06
Description: Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html; http://www.securityfocus.com/bid/69012; http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE: CVE-2014-5089
Published: 2014-08-06
Description: SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html; http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE: CVE-2014-5090
Published: 2014-08-06
Description: admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html; http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE: CVE-2014-5178
Published: 2014-08-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when (1) creating a topic or (2) posting an answer.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127622/Easy-File-Sharing-Persistent-Cross-Site-Scripting.html; http://secunia.com/advisories/60524; http://www.securityfocus.com/archive/1/532897/100/0/threaded
CVE: CVE-2014-5179
Published: 2014-08-06
Description: The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/68861; https://exchange.xforce.ibmcloud.com/vulnerabilities/94870; https://www.drupal.org/node/2308503
CVE: CVE-2012-6653
Published: 2014-08-06
Description: Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://wordpress.org/plugins/all-video-gallery/changelog/; http://wordpress.org/plugins/all-video-gallery/changelog/
CVE: CVE-2014-0479
Published: 2014-08-06
Description: reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/59896; http://www.debian.org/security/2014/dsa-2997; http://www.osvdb.org/109858
CVE: CVE-2014-3434
Published: 2014-08-06
Description: Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html; http://secunia.com/advisories/58996; http://secunia.com/advisories/59697
CVE: CVE-2014-3559
Published: 2014-08-06
Description: The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-1002.html; http://www.securitytracker.com/id/1030664; https://bugzilla.redhat.com/show_bug.cgi?id=1121925
CVE: CVE-2014-5180
Published: 2014-08-06
Description: SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-hdw-player-video-player-video-gallery-a1-injection; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=900030%40hdw-player-video-player-video-gallery&old=798976%40hdw-player-video-player-video-gallery&sfp_email=&sfph_mail=; http://codevigilant.com/disclosure/wp-plugin-hdw-player-video-player-video-gallery-a1-injection
CVE: CVE-2014-5181
Published: 2014-08-06
Description: Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the snode parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://codevigilant.com/disclosure/wp-plugin-lastfm-rotation-local-file-inclusion; http://codevigilant.com/disclosure/wp-plugin-lastfm-rotation-local-file-inclusion
CVE: CVE-2014-5182
Published: 2014-08-06
Description: Multiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote authenticated users with Contributor privileges to execute arbitrary SQL commands via vectors related to (1) admin_functions.php or (2) admin_update.php, as demonstrated by the id parameter in the update action to wp-admin/admin.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-yawpp-a1-injection; http://wordpress.org/plugins/yawpp/changelog/; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=834445%40yawpp&old=824042%40yawpp&sfp_email=&sfph_mail=#file36
CVE: CVE-2014-5183
Published: 2014-08-06
Description: SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1; http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
CVE: CVE-2014-5184
Published: 2014-08-06
Description: SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the story parameter in an edit action to wp-admin/admin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-stripshow-a1-injection; http://codevigilant.com/disclosure/wp-plugin-stripshow-a1-injection
CVE: CVE-2014-5185
Published: 2014-08-06
Description: SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection; http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection
CVE: CVE-2014-5186
Published: 2014-08-06
Description: SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogallery_videos page to wp-admin/admin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://codevigilant.com/disclosure/wp-plugin-all-video-gallery-a1-injection; http://codevigilant.com/disclosure/wp-plugin-all-video-gallery-a1-injection
CVE: CVE-2014-5187
Published: 2014-08-06
Description: Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://codevigilant.com/disclosure/wp-plugin-tom-m8te-local-file-inclusion; http://codevigilant.com/disclosure/wp-plugin-tom-m8te-local-file-inclusion
CVE: CVE-2013-6771
Published: 2014-08-07
Description: Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter.  NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://www.splunk.com/view/SP-CAAAH76; http://zerodayinitiative.com/advisories/ZDI-14-052/; http://www.splunk.com/view/SP-CAAAH76
CVE: CVE-2013-7394
Published: 2014-08-07
Description: The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string.  NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://www.splunk.com/view/SP-CAAAH76; http://zerodayinitiative.com/advisories/ZDI-14-053/; http://www.splunk.com/view/SP-CAAAH76
CVE: CVE-2014-3429
Published: 2014-08-07
Description: IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://advisories.mageia.org/MGASA-2014-0320.html; http://lambdaops.com/cross-origin-websocket-hijacking-of-ipython; http://lists.opensuse.org/opensuse-updates/2014-08/msg00039.html
CVE: CVE-2014-3459
Published: 2014-08-07
Description: Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://zerodayinitiative.com/advisories/ZDI-14-133/; http://zerodayinitiative.com/advisories/ZDI-14-133/
CVE: CVE-2014-3517
Published: 2014-08-07
Description: api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2014/07/17/2; https://bugs.launchpad.net/nova/+bug/1325128; http://www.openwall.com/lists/oss-security/2014/07/17/2
CVE: CVE-2014-3771
Published: 2014-08-07
Description: TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2) "change_user_language" request to sources/main.queries.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://teampass.net/installation/2.1.20-released.html; http://www.openwall.com/lists/oss-security/2014/05/18/2; http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE: CVE-2014-3772
Published: 2014-08-07
Description: TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://teampass.net/installation/2.1.20-released.html; http://www.openwall.com/lists/oss-security/2014/05/18/2; http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE: CVE-2014-3773
Published: 2014-08-07
Description: Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login parameter in a (1) send_pw_by_email or (2) generate_new_password action in sources/main.queries.php; iDisplayStart parameter to (3) datatable.logs.php or (4) a file in source/datatable/; or iDisplayLength parameter to (5) datatable.logs.php or (6) a file in source/datatable/; or allow remote authenticated users to execute arbitrary SQL commands via a sSortDir_ parameter to (7) datatable.logs.php or (8) a file in source/datatable/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://teampass.net/installation/2.1.20-released.html; http://www.openwall.com/lists/oss-security/2014/05/18/2; http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE: CVE-2014-3774
Published: 2014-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a (1) hid_cat or (2) open_folder form element, or (3) id parameter, which is not properly handled in the open_id form element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://teampass.net/installation/2.1.20-released.html; http://www.openwall.com/lists/oss-security/2014/05/18/2; http://www.openwall.com/lists/oss-security/2014/05/19/5
CVE: CVE-2014-3800
Published: 2014-08-07
Description: XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://trac.xbmc.org/ticket/15198; http://www.openwall.com/lists/oss-security/2014/05/20/4; http://www.openwall.com/lists/oss-security/2014/05/20/5