deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3623
Published: 2014-12-26
Description: Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=861e374d03e6c60c7d3c98428c632fe3b9e371b2; http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c5b02d011b8c634d041167f4d2936b55eca4d18d; http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=dfe7084e8cc64e9b7a87cd37065b59cba2064823
CVE: CVE-2013-4753
Published: 2014-12-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field in an inbox action to messaging/messagebox.php, (2) the "First name" field to auth/profile.php, or (3) the Speakers field in an rqAdd action to calendar/agenda.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.xchg.info/?p=406; http://www.xchg.info/?p=406
CVE: CVE-2013-4754
Published: 2014-12-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php or (2) the Title field to prefs.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.xchg.info/?p=400; http://www.xchg.info/?p=400
CVE: CVE-2013-4769
Published: 2014-12-26
Description: The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to cause a denial of service (traffic amplification) via spoofed DNS queries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-19
References: https://www.eucalyptus.com/resources/security/advisories/esa-16; https://www.eucalyptus.com/resources/security/advisories/esa-16
CVE: CVE-2014-0748
Published: 2014-12-27
Description: apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://labs.mwrinfosecurity.com/advisories/2014/01/31/cray-aprunapinit-privilege-escalation/; https://labs.mwrinfosecurity.com/advisories/2014/01/31/cray-aprunapinit-privilege-escalation/
CVE: CVE-2014-8511
Published: 2014-12-27
Description: Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512.  NOTE: this may be clarified later based on details provided by researchers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01
CVE: CVE-2014-8512
Published: 2014-12-27
Description: Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511.  NOTE: this may be clarified later based on details provided by researchers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01
CVE: CVE-2014-8513
Published: 2014-12-27
Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188.  NOTE: this may be clarified later based on details provided by researchers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01
CVE: CVE-2014-8514
Published: 2014-12-27
Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188.  NOTE: this may be clarified later based on details provided by researchers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01; http://www.securityfocus.com/bid/71710; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01
CVE: CVE-2014-9188
Published: 2014-12-27
Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514.  NOTE: this may be clarified later based on details provided by researchers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-77, CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01; https://www.cisa.gov/news-events/ics-advisories/icsa-14-350-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01
CVE: CVE-2013-4793
Published: 2014-12-27
Description: The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://labs.mwrinfosecurity.com/advisories/2013/11/29/umbraco-cms-templateservice-remote-code-execution/; https://labs.mwrinfosecurity.com/advisories/2013/11/29/umbraco-cms-templateservice-remote-code-execution/
CVE: CVE-2013-5958
Published: 2014-12-27
Description: The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released; http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released
CVE: CVE-2013-6041
Published: 2014-12-27
Description: index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched; https://web.archive.org/web/[PII_REDACTED]2101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29; http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
CVE: CVE-2013-6043
Published: 2014-12-27
Description: The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched; https://web.archive.org/web/[PII_REDACTED]2101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29; http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
CVE: CVE-2013-6227
Published: 2014-12-27
Description: Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format parameter of a move operation.
CVSS Score: 7.5 (HIGH)
References: http://pyd.io/pydio-core-5-0-4/; http://www.redfsec.com/CVE-2013-6227; https://www.exploit-db.com/exploits/46206/
CVE: CVE-2013-6241
Published: 2014-12-27
Description: The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL statement for next-year birthdays, which allows remote authenticated users to obtain sensitive birthday, displayname, firstname, and surname information via a birthdays action to api/contacts, aka bug 29315.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html; https://forum.open-xchange.com/showthread.php?8059-Open-Xchange-releases-Security-Patch-2013-10-21-for-v7-2-2-and-v7-4-0; http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html
CVE: CVE-2013-6919
Published: 2014-12-27
Description: The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://www.rafayhackingarticles.net/2013/11/phpthumb-server-side-request-forgery.html; https://github.com/JamesHeinrich/phpThumb/blob/master/docs/phpthumb.changelog.txt; http://www.rafayhackingarticles.net/2013/11/phpthumb-server-side-request-forgery.html
CVE: CVE-2013-6998
Published: 2014-12-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-6870.  Reason: This candidate is a duplicate of CVE-2013-6870.  Notes: All CVE users should reference CVE-2013-6870 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4720
Published: 2014-12-28
Description: Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secpod.org/blog/?p=419; http://secpod.org/blog/?p=419
CVE: CVE-2012-1203
Published: 2014-12-28
Description: Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a save_user action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.exploit-db.com/exploits/18498/; http://www.exploit-db.com/exploits/18498/
CVE: CVE-2013-4663
Published: 2014-12-28
Description: git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: http://www.sec-1.com/blog/2013/redmine-git-hosting-plugin-remote-command-execution; http://www.sec-1.com/blog/2013/redmine-git-hosting-plugin-remote-command-execution
CVE: CVE-2010-5075
Published: 2014-12-28
Description: Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic) via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS DeviceIoControl request to \\.\aswFW.
CVSS Score: 2.1 (LOW)
CWE: CWE-189
References: http://www.securityfocus.com/bid/42148; http://x90c.blogspot.com/2011/11/avast-internet-security-aswfwsys-ioctl.html; http://x90c.blogspot.com/2011/12/bid-42148-my-avast-kernel-driver-0day_01.html
CVE: CVE-2011-4722
Published: 2014-12-28
Description: Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secpod.org/blog/?p=424; http://secunia.com/advisories/47025; http://securitytracker.com/id?1026368
CVE: CVE-2012-1302
Published: 2014-12-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or (3) the data_file parameter to amtimeline.swf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://web.appsec.ws/FlashExploitDatabase.php; http://www.securitytracker.com/id/1038375; https://success.trendmicro.com/solution/1117094
CVE: CVE-2012-1303
Published: 2014-12-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf; the message element in the chart_data parameter to (3) amcolumn.swf, (4) amline.swf, (5) amradar.swf, or (6) amxy.sw; or (7) the settings_file parameter to amstock.swf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://web.appsec.ws/FlashExploitDatabase.php; http://web.appsec.ws/FlashExploitDatabase.php
CVE: CVE-2012-1415
Published: 2014-12-28
Description: Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.exploit-db.com/exploits/18513/; http://www.exploit-db.com/exploits/18513/
CVE: CVE-2014-2208
Published: 2014-12-28
Description: CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n (newline) character before the end of a string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/facebook/hhvm/commit/506a44194a9016406c752ad8e010c01aeffc18cc; https://github.com/facebook/hhvm/commit/506a44194a9016406c752ad8e010c01aeffc18cc
CVE: CVE-2014-2209
Published: 2014-12-28
Description: Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://github.com/facebook/hhvm/commit/851fff90a9b7461df2393af32239ba217bc25946; https://github.com/facebook/hhvm/commit/851fff90a9b7461df2393af32239ba217bc25946
CVE: CVE-2014-5386
Published: 2014-12-28
Description: The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single initialization vector.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: https://github.com/facebook/hhvm/commit/ab6fdeb84fb090b48606b6f7933028cfe7bf3a5e; https://github.com/facebook/hhvm/commit/ab6fdeb84fb090b48606b6f7933028cfe7bf3a5e
CVE: CVE-2014-6228
Published: 2014-12-28
Description: Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted arguments to the chunk_split function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: https://github.com/facebook/hhvm/commit/1f91e076a585118495b976a413c1df40f6fd3d41; https://github.com/facebook/hhvm/commit/1f91e076a585118495b976a413c1df40f6fd3d41
CVE: CVE-2014-6229
Published: 2014-12-28
Description: The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\0' for termination, which allows remote attackers to obtain sensitive information by leveraging read access beyond the end of the string, and makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging truncation of a string containing an internal '\0' character.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://hhvm.com/blog/6239/hhvm-3-3-0; https://github.com/facebook/hhvm/commit/7135ec229882370a00411aa50030eada6034cc1b; http://hhvm.com/blog/6239/hhvm-3-3-0
CVE: CVE-2014-8132
Published: 2014-12-29
Description: Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
CVSS Score: 5.0 (MEDIUM)
References: http://advisories.mageia.org/MGASA-2015-0014.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.html
CVE: CVE-2014-9424
Published: 2014-12-29
Description: Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.
CVSS Score: 7.5 (HIGH)
References: https://code.google.com/p/google-security-research/issues/detail?id=202; https://github.com/robertbachmann/openbsd-libssl/commit/62a110d447bb8c16a4c69629e28a42e8c39fd7e0; https://code.google.com/p/google-security-research/issues/detail?id=202
CVE: CVE-2014-6123
Published: 2014-12-29
Description: IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21692999; https://exchange.xforce.ibmcloud.com/vulnerabilities/96724; http://www-01.ibm.com/support/docview.wss?uid=swg21692999
CVE: CVE-2014-6160
Published: 2014-12-29
Description: IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498; http://www-01.ibm.com/support/docview.wss?uid=swg21693389; https://exchange.xforce.ibmcloud.com/vulnerabilities/97709
CVE: CVE-2014-6168
Published: 2014-12-29
Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21692907; https://exchange.xforce.ibmcloud.com/vulnerabilities/97752; http://www-01.ibm.com/support/docview.wss?uid=swg21692907
CVE: CVE-2014-1905
Published: 2014-12-29
Description: Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file via a direct request to a wp-content/plugins/videowhisper-live-streaming-integration/ls/snapshots/ pathname, as demonstrated by a .php.jpg filename.
CVSS Score: 10.0 (HIGH)
CWE: CWE-77
References: https://www.htbridge.com/advisory/HTB23199; https://www.htbridge.com/advisory/HTB23199
CVE: CVE-2014-1908
Published: 2014-12-29
Description: The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://www.htbridge.com/advisory/HTB23199; https://www.htbridge.com/advisory/HTB23199
CVE: CVE-2014-2224
Published: 2014-12-29
Description: Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote attackers to bypass the CAPTCHA protection mechanism via a series of form submissions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-254
References: https://www.sysdream.com/CVE-2014-2223_CVE-2014-2224; https://www.sysdream.com/CVE-2014-2223_CVE-2014-2224
CVE: CVE-2014-3556
Published: 2014-12-29
Description: The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77
References: http://mailman.nginx.org/pipermail/nginx-announce/2014/000144.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0673&w=2; http://nginx.org/download/patch.2014.starttls.txt
CVE: CVE-2014-8109
Published: 2014-12-29
Description: mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://advisories.mageia.org/MGASA-2015-0011.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
CVE: CVE-2011-2727
Published: 2014-12-30
Description: The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.htbridge.com/advisory/HTB22857; https://www.htbridge.com/advisory/HTB22857
CVE: CVE-2013-3295
Published: 2014-12-30
Description: Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.htbridge.com/advisory/HTB23154; https://www.htbridge.com/advisory/HTB23154
CVE: CVE-2014-4630
Published: 2014-12-30
Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2014-12/0169.html; http://www.securityfocus.com/bid/72534; https://secure-resumption.com/