deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-2604
Published: 2015-01-12
Description: RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated by DDRAW.DLL in the Zuma Deluxe directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.osvdb.org/96918; http://www.riskbasedsecurity.com/reports/RBS-GameHouseAnalysis-Sept2013.pdf; https://www.riskbasedsecurity.com/research/RBS-2013-005.pdf
CVE: CVE-2014-10000
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None.  Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number.  Notes: See references
CVE: CVE-2014-100000
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None.  Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references
CVE: CVE-2014-100001
Published: 2015-01-13
Description: Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/57990; https://exchange.xforce.ibmcloud.com/vulnerabilities/92586; https://wordpress.org/plugins/liveoptim/changelog/
CVE: CVE-2014-100002
Published: 2015-01-13
Description: Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/show/osvdb/102656; http://www.exploit-db.com/exploits/31262; https://exchange.xforce.ibmcloud.com/vulnerabilities/90806
CVE: CVE-2014-100003
Published: 2015-01-13
Description: SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter to the default URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128668/YourMembers-Blind-SQL-Injection.html; http://www.exploit-db.com/exploits/34968; http://packetstormsecurity.com/files/128668/YourMembers-Blind-SQL-Injection.html
CVE: CVE-2014-100004
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows remote attackers to inject arbitrary web script or HTML via the xmlcontrol parameter to the default URI.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/102660; http://secunia.com/advisories/56705; http://sitecorekh.blogspot.dk/2014/01/sitecore-releases-70-update-4-rev-140120.html
CVE: CVE-2014-100005
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-352
References: http://resources.infosecinstitute.com/csrf-unauthorized-remote-admin-access/; http://secunia.com/advisories/57304; http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10018
CVE: CVE-2014-100006
Published: 2015-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) map, (2) streetview, or (3) reset parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/56870; http://www.rusty-ice.de/advisory/advisory_2014001.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/91133
CVE: CVE-2014-100007
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via an EXIF tag.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/57753; https://exchange.xforce.ibmcloud.com/vulnerabilities/92555; https://wordpress.org/plugins/hk-exif-tags/changelog/
CVE: CVE-2014-100008
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/125959; http://websecurity.com.ua/7087/; https://exchange.xforce.ibmcloud.com/vulnerabilities/92207
CVE: CVE-2014-100009
Published: 2015-01-13
Description: The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation path via a request to (1) functions.php, (2) myCalendar.php, (3) refreshDate.php, (4) show_image.php, (5) widget.php, (6) phpthumb/GdThumb.inc.php, or (7) phpthumb/thumb_plugins/gd_reflection.inc.php in includes/.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/125959; http://websecurity.com.ua/7087/; http://packetstormsecurity.com/files/125959
CVE: CVE-2014-10001
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the i18n[1][name] parameter in a pjActionCreate action to the pjAdminServices controller or (2) add an administrator via a pjActionCreate action to the pjAdminUsers controller.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/124755; http://secunia.com/advisories/56377; http://www.exploit-db.com/exploits/30911
CVE: CVE-2014-100010
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Mar/73; http://secunia.com/advisories/57306; http://www.securityfocus.com/archive/1/531373/100/0/threaded
CVE: CVE-2014-10002
Published: 2015-01-13
Description: Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://confluence.jetbrains.com/display/TCD8/What%27s+New+in+TeamCity+8.1; http://secunia.com/advisories/57221; http://confluence.jetbrains.com/display/TCD8/What%27s+New+in+TeamCity+8.1
CVE: CVE-2014-10003
Published: 2015-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/102489; http://packetstormsecurity.com/files/124918; https://exchange.xforce.ibmcloud.com/vulnerabilities/90716
CVE: CVE-2014-10004
Published: 2015-01-13
Description: SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/102488; http://packetstormsecurity.com/files/124918; https://exchange.xforce.ibmcloud.com/vulnerabilities/90715
CVE: CVE-2014-10005
Published: 2015-01-13
Description: Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/124918; http://www.osvdb.org/102487; http://packetstormsecurity.com/files/124918
CVE: CVE-2014-10006
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/124918; http://packetstormsecurity.com/files/124918
CVE: CVE-2014-10007
Published: 2015-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/56797; https://exchange.xforce.ibmcloud.com/vulnerabilities/90961; https://www.netsparker.com/critical-xss-vulnerabilities-in-maian-weblog/
CVE: CVE-2014-10008
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add (1) an administrator via a crafted request to the admin page, (2) an agent via a crafted request to the agent page, (3) a sub-agent via a crafted request to the sub_agent page, (4) a partner via a crafted request to the partner page, or (5) a client via a crafted request to the client page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/57048; http://www.zeroscience.mk/codes/starkcrm_mv.txt; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5169.php
CVE: CVE-2014-10009
Published: 2015-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) notes parameter to the client page; (4) insu_name or (5) price parameter to the add_insurance_cat page; or (6) status[] parameter to the add_status page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/57048; http://www.zeroscience.mk/codes/starkcrm_mv.txt; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5169.php
CVE: CVE-2014-10010
Published: 2015-01-13
Description: Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a pjActionDownload action to the pjBackup controller.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/124755; http://www.exploit-db.com/exploits/30911; https://exchange.xforce.ibmcloud.com/vulnerabilities/90421
CVE: CVE-2014-10011
Published: 2015-01-13
Description: Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/129262/TRENDnet-SecurView-Wireless-Network-Camera-TV-IP422WN-Buffer-Overflow.html; http://www.securityfocus.com/bid/71292; http://www.zeroscience.mk/codes/trendnet_bof.txt
CVE: CVE-2014-10012
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/98588; http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html
CVE: CVE-2014-10013
Published: 2015-01-13
Description: SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a dosearch action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html; http://www.exploit-db.com/exploits/35204; https://exchange.xforce.ibmcloud.com/vulnerabilities/98589
CVE: CVE-2014-10014
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change the username and password of the administrator via an update action to the AdminOptions controller or conduct cross-site scripting (XSS) attacks via the (2) event_title parameter in a create action to the AdminEvents controller or (3) category_title parameter in a create action to the AdminCategories controller.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/124753/eventbookingcalendar-xssxsrfsql.txt; http://secunia.com/advisories/56373; https://exchange.xforce.ibmcloud.com/vulnerabilities/90413
CVE: CVE-2014-10015
Published: 2015-01-13
Description: SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/124753/eventbookingcalendar-xssxsrfsql.txt; http://packetstormsecurity.com/files/124753/eventbookingcalendar-xssxsrfsql.txt
CVE: CVE-2014-10016
Published: 2015-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors related to purchase_limit or the (2) name, (3) intl, (4) nocod, or (5) time parameter in an add_delivery_method action to wp-admin/admin-ajax.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/125513; http://secunia.com/advisories/57222; http://www.securityfocus.com/bid/65954
CVE: CVE-2014-10017
Published: 2015-01-13
Description: Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/125513; http://www.securityfocus.com/bid/65954; https://exchange.xforce.ibmcloud.com/vulnerabilities/91542
CVE: CVE-2014-10018
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/102343; http://www.exploit-db.com/exploits/31087; http://www.securityfocus.com/bid/65056
CVE: CVE-2014-10019
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID or (2) change the password via a crafted request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.exploit-db.com/exploits/32943; https://exchange.xforce.ibmcloud.com/vulnerabilities/92715; http://www.exploit-db.com/exploits/32943
CVE: CVE-2014-10020
Published: 2015-01-13
Description: SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/102458; http://packetstormsecurity.com/files/124914; http://www.exploit-db.com/exploits/31142
CVE: CVE-2014-10021
Published: 2015-01-13
Description: Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.
CVSS Score: 7.5 (HIGH)
References: http://www.exploit-db.com/exploits/35543; http://www.securityfocus.com/bid/71686; http://www.exploit-db.com/exploits/35543
CVE: CVE-2014-10022
Published: 2015-01-13
Description: Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://mail-archives.apache.org/mod_mbox/trafficserver-users/201412.mbox/browser; http://www.securitytracker.com/id/1031499; https://issues.apache.org/jira/browse/TS-3223
CVE: CVE-2014-10023
Published: 2015-01-13
Description: Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.php, or (4) rmv_topic.php in admincp/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/102834; http://osvdb.org/102835; http://osvdb.org/102836
CVE: CVE-2014-10024
Published: 2015-01-13
Description: Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://seclists.org/fulldisclosure/2014/Apr/283; http://www.securityfocus.com/bid/67086; http://seclists.org/fulldisclosure/2014/Apr/283
CVE: CVE-2014-10025
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enable Wireless, (2) MBSSID, (3) BSSID, (4) Hide Access Point, (5) SSID, (6) Country, (7) Channel, (8) Wireless mode, or (9) Max Associated Clients setting via a crafted request to index.cgi.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2014/Nov/19; http://websecurity.com.ua/7179/; http://seclists.org/fulldisclosure/2014/Nov/19
CVE: CVE-2014-10026
Published: 2015-01-13
Description: index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2014/Nov/19; http://websecurity.com.ua/7179/; http://seclists.org/fulldisclosure/2014/Nov/19
CVE: CVE-2014-10027
Published: 2015-01-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change the MAC filter restrict mode, (2) add a MAC address to the filter, or (3) remove a MAC address from the filter via a crafted request to index.cgi.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2014/Nov/100; http://websecurity.com.ua/7215/; http://seclists.org/fulldisclosure/2014/Nov/100
CVE: CVE-2014-10028
Published: 2015-01-13
Description: Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Nov/100; http://websecurity.com.ua/7215/; http://seclists.org/fulldisclosure/2014/Nov/100
CVE: CVE-2014-10029
Published: 2015-01-13
Description: SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://fluxbb.org/forums/viewtopic.php?id=8001; http://packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Nov/73
CVE: CVE-2014-10030
Published: 2015-01-13
Description: Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://fluxbb.org/forums/viewtopic.php?id=8001; https://fluxbb.org/development/core/tickets/961/; http://fluxbb.org/forums/viewtopic.php?id=8001
CVE: CVE-2014-123456
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None.  Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references
CVE: CVE-2014-32537
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2354.  Reason: This candidate is a duplicate of CVE-2014-2354.  The wrong ID was used.  Notes: All CVE users should reference CVE-2014-2354 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-456132
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None.  Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references
CVE: CVE-2014-54321
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None.  Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references
CVE: CVE-2014-59156
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2352.  Reason: This candidate is a duplicate of CVE-2014-2352.  The wrong ID was used.  Notes: All CVE users should reference CVE-2014-2352 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-62771
Published: 2015-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6271.  Reason: This candidate is a duplicate of CVE-2014-6271.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2014-6271 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage