rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-4547 
Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4548 
Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:55:17.000Z
CVE-2014-4549 
Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MD or (2) PARes parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4550 
Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T19:34:22.000Z
CVE-2014-4551 
Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4552 
Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the paymentType parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4553 
Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-02T18:33:08.000Z
CVE-2014-4554 
Cross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4555 
Cross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4556 
Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4557 
Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4558 
Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:56:55.000Z
CVE-2014-4559 
Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) api_key, (2) payment_page_url, (3) merchant_id, (4) api_url, or (5) currency parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T13:56:25.000Z
CVE-2014-4560 
Cross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4561 
The ultimate-weather plugin 1.0 for WordPress has XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-10T13:02:15.000Z
CVE-2014-4563 
Cross-site scripting (XSS) vulnerability in go.php in the URL Cloak & Encrypt (url-cloak-encrypt) plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4564 
Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4565 
Multiple cross-site scripting (XSS) vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) vp, (2) vs, (3) l, (4) vu, or (5) vm parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4566 
Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4567 
Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T18:45:44.000Z
CVE-2014-4568 
Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4569 
Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the room_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4570 
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4571 
Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fs or (2) w parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4572 
Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4573 
Multiple cross-site scripting (XSS) vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) o parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4574 
Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4575 
Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4576 
Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4577 
Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-21T15:00:00.000Z
CVE-2014-4578 
Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4579 
Cross-site scripting (XSS) vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4580 
Cross-site scripting (XSS) vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the BlipBotID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4581 
Cross-site scripting (XSS) vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4582 
Cross-site scripting (XSS) vulnerability in admin/admin_show_dialogs.php in the WP Consultant plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the dialog_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4583 
Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) edit, (2) order_direction, (3) limit_start, (4) id, or (5) order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4584 
Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the fID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4585 
Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4586 
Multiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to (1) football_classification.php, (2) football_criteria.php, (3) templates/template_default_preview.php, or (4) templates/template_worldCup_preview.php; the (5) f parameter to football-functions.php; the id parameter in an "action" action to (6) football_groups_list.php, (7) football_matches_list.php, (8) football_matches_phase.php, or (9) football_phases_list.php; or the (10) id_league parameter in a delete action to football_matches_load.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-27T22:00:00.000Z
CVE-2014-4587 
Multiple cross-site scripting (XSS) vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) zl, (2) mt, or (3) dc parameter to guest-locator.php; the (4) zl, (5) mt, (6) activate, or (7) dc parameter to online-tracker.php; the (8) zl, (9) mt, or (10) dc parameter to stats-map.php; or the (11) zl, (12) mt, (13) activate, or (14) dc parameter to weather-map.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4588 
Cross-site scripting (XSS) vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and Download Manager (wphotfiles) plugin 1.0.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mediaid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4589 
Cross-site scripting (XSS) vulnerability in uploader.php in the WP Silverlight Media Player (wp-media-player) plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4590 
Cross-site scripting (XSS) vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauth_verifier parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4591 
Cross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4592 
Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:50:13.000Z
CVE-2014-4593 
Cross-site scripting (XSS) vulnerability in wp-plugins-net/index.php in the WP Plugin Manager (wppm) plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4594 
Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4595 
Multiple cross-site scripting (XSS) vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) oauth_callback parameter to html_api_authorize.php or the (2) oauth_token_temp or (3) oauth_callback_temp parameter to html_api_login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4596 
Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) msg or (2) act parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4597 
Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4598 
Cross-site scripting (XSS) vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4599 
Multiple cross-site scripting (XSS) vulnerabilities in forms/search.php in the WP-Business Directory (wp-ttisbdir) plugin 1.0.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) edit, (2) search_term, (3) page_id, (4) page, or (5) page_links parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4600 
Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) listname or (2) contact parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4601 
Cross-site scripting (XSS) vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4602 
Multiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) path or (2) ajaxpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-01T14:00:00.000Z
CVE-2014-4603 
Multiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) secret, (2) key, or (3) appid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4604 
Cross-site scripting (XSS) vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ytmpw parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4605 
Cross-site scripting (XSS) vulnerability in cal/test.php in the ZdStatistics (zdstats) plugin 2.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T18:00:00.000Z
CVE-2014-4606 
Cross-site scripting (XSS) vulnerability in redirect_to_zeenshare.php in the ZeenShare plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the zs_sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T20:00:00.000Z
CVE-2014-4607 
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T13:49:35.000Z
CVE-2014-4608 
Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run.  NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-03T01:00:00.000Z
CVE-2014-4609 
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-14T15:41:33.000Z
CVE-2014-4610 
Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-14T15:41:04.000Z
CVE-2014-4611 
Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-03T01:00:00.000Z
CVE-2014-4612 
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T17:00:00.000Z