rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-2134 
Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file, aka Bug ID CSCuc39458.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z
CVE-2014-2135 
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCul87216 and CSCuj07603.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z
CVE-2014-2136 
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z
CVE-2014-2137 
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-02T01:00:00.000Z
CVE-2014-2138 
CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-02T01:00:00.000Z
CVE-2014-2139 
Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-12T01:00:00.000Z
CVE-2014-2140 
Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-12T01:00:00.000Z
CVE-2014-2141 
The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-10T01:00:00.000Z
CVE-2014-2142 
Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP URI, aka Bug ID CSCun06870.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-12T01:00:00.000Z
CVE-2014-2143 
The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets, aka Bug ID CSCun31021.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-2144 
Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-05T01:00:00.000Z
CVE-2014-2145 
Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-05T01:00:00.000Z
CVE-2014-2146 
The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-22T17:00:00.000Z
CVE-2014-2147 
The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuj42444.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2014-2151 
The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T16:00:00.000Z
CVE-2014-2152 
Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun21868.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2014-2153 
Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun21869.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-12T01:00:00.000Z
CVE-2014-2154 
Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets, aka Bug ID CSCuf67469.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2014-2155 
The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6 packet, aka Bug ID CSCuo07437.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-19T21:00:00.000Z
CVE-2014-2156 
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2157 
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2158 
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2159 
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2160 
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2161 
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2162 
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2163 
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2164 
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2165 
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2166 
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2167 
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2168 
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2169 
Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2170 
Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2171 
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2172 
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2173 
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2174 
Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified vectors, aka Bug ID CSCub67651.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-25T00:00:00.000Z
CVE-2014-2175 
Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-02T10:00:00.000Z
CVE-2014-2176 
Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-14T10:00:00.000Z
CVE-2014-2177 
The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCuh87126.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-07T11:00:00.000Z
CVE-2014-2178 
Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-07T11:00:00.000Z
CVE-2014-2179 
The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-07T11:00:00.000Z
CVE-2014-2180 
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-29T10:00:00.000Z
CVE-2014-2181 
Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-07T10:00:00.000Z
CVE-2014-2182 
Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet, aka Bug ID CSCun45520.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-29T10:00:00.000Z
CVE-2014-2183 
The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-29T10:00:00.000Z
CVE-2014-2184 
The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-29T10:00:00.000Z
CVE-2014-2185 
The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-29T10:00:00.000Z
CVE-2014-2186 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-30T10:00:00.000Z
CVE-2014-2190 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-07T10:00:00.000Z
CVE-2014-2191 
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-07T10:00:00.000Z
CVE-2014-2192 
Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-2193 
Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-2194 
system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-2195 
Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-2196 
Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-2197 
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-07T10:00:00.000Z
CVE-2014-2198 
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-07T10:00:00.000Z
CVE-2014-2199 
meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-2200 
Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-24T01:00:00.000Z
CVE-2014-2201 
The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bug ID CSCtw98915.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-24T01:00:00.000Z
CVE-2014-2205 
The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T15:00:00.000Z
CVE-2014-2206 
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-05T15:00:00.000Z
CVE-2014-2208 
CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n (newline) character before the end of a string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-28T15:00:00.000Z
CVE-2014-2209 
Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-28T15:00:00.000Z