rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-1609 
Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the (1) mc_project_get_attachments function in api/soap/mc_project_api.php; the (2) news_get_limited_rows function in core/news_api.php; the (3) summary_print_by_enum, (4) summary_print_by_age, (5) summary_print_by_developer, (6) summary_print_by_reporter, or (7) summary_print_by_category function in core/summary_api.php; the (8) create_bug_enum_summary or (9) enum_bug_group function in plugins/MantisGraph/core/graph_api.php; (10) bug_graph_bycategory.php or (11) bug_graph_bystatus.php in plugins/MantisGraph/pages/; or (12) proj_doc_page.php, related to use of the db_query function, a different vulnerability than CVE-2014-1608.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-20T16:00:00.000Z
CVE-2014-1610 
MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the page parameter to includes/media/DjVu.php; (2) the w parameter (aka width field) to thumb.php, which is not properly handled by includes/media/PdfHandler_body.php; and possibly unspecified vectors in (3) includes/media/Bitmap.php and (4) includes/media/ImageHandler.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-30T23:00:00.000Z
CVE-2014-1611 
Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the contact name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-30T18:00:00.000Z
CVE-2014-1612 
Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-30T18:00:00.000Z
CVE-2014-1613 
Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by (1) inc/public/lib.urlhandlers.php or (2) plugins/pages/_public.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-16T15:00:00.000Z
CVE-2014-1615 
Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijack the authentication of administrators for requests that add new administrative users and have other unspecified action, as demonstrated by a request to api/user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-22T14:00:00.000Z
CVE-2014-1617 
Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-13T21:51:38.000Z
CVE-2014-1618 
Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) p_id parameter to products.php or id parameter to (3) page.php or (4) news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-21T15:00:00.000Z
CVE-2014-1619 
Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the (1) resource_id or (2) version_id parameter to recursos/agent.php or (3) login or (4) pass parameter to login.usuario.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-21T15:00:00.000Z
CVE-2014-1620 
Multiple cross-site scripting (XSS) vulnerabilities in add.php in HIOX Guest Book (HGB) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name1, (2) email, or (3) cmt parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-21T15:00:00.000Z
CVE-2014-1624 
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T00:00:00.000Z
CVE-2014-1626 
XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T01:00:00.000Z
CVE-2014-1631 
Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T18:00:00.000Z
CVE-2014-1632 
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T18:00:00.000Z
CVE-2014-1634 
SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T16:25:59.000Z
CVE-2014-1635 
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-12T16:00:00.000Z
CVE-2014-1636 
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to (1) admin_school_names.php, (2) admin_subjects.php, (3) admin_grades.php, (4) admin_terms.php, (5) admin_school_years.php, (6) admin_sgrades.php, (7) admin_media_codes_1.php, (8) admin_infraction_codes.php, (9) admin_generations.php, (10) admin_relations.php, (11) admin_titles.php, or (12) health_allergies.php in sw/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T19:00:00.000Z
CVE-2014-1637 
Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a database backup via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-22T19:00:00.000Z
CVE-2014-1638 
(1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T00:00:00.000Z
CVE-2014-1639 
syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T00:00:00.000Z
CVE-2014-1640 
axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T00:00:00.000Z
CVE-2014-1642 
The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use, which allows local guest administrators to cause a denial of service (memory corruption and hypervisor crash) and possibly execute arbitrary code via vectors related to an out-of-memory error that triggers a (1) use-after-free or (2) double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T11:00:00.000Z
CVE-2014-1643 
The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-07T02:00:00.000Z
CVE-2014-1644 
The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-29T01:00:00.000Z
CVE-2014-1645 
SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-29T01:00:00.000Z
CVE-2014-1646 
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T19:00:00.000Z
CVE-2014-1647 
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T19:00:00.000Z
CVE-2014-1648 
Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2014-1649 
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-16T10:00:00.000Z
CVE-2014-1650 
SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T19:00:00.000Z
CVE-2014-1651 
SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T19:00:00.000Z
CVE-2014-1652 
Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T19:00:00.000Z
CVE-2014-1663 
Unspecified vulnerability in Citrix XenMobile Device Manager server (formerly Zenprise Device Manager server) 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-06T16:00:00.000Z
CVE-2014-1664 
The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T20:00:00.000Z
CVE-2014-1665 
Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-20T21:00:00.000Z
CVE-2014-1666 
The do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the (1) PHYSDEVOP_prepare_msix and (2) PHYSDEVOP_release_msix operations, which allows local PV guests to cause a denial of service (host or guest malfunction) or possibly gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T11:00:00.000Z
CVE-2014-1670 
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-25T16:00:00.000Z
CVE-2014-1671 
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.php; the ID parameter to (3) userui/advisory_detail.php or (4) userui/ticket.php; and the (5) ORDER[] parameter to userui/ticket_list.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T01:00:00.000Z
CVE-2014-1672 
Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T01:00:00.000Z
CVE-2014-1673 
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-26T01:00:00.000Z
CVE-2014-1677 
Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T15:00:00.000Z
CVE-2014-1679 
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-rev17 allows remote attackers to inject arbitrary web script or HTML via the header in an attached SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-05T20:00:00.000Z
CVE-2014-1680 
Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-14T02:00:00.000Z
CVE-2014-1681 
Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-28T11:00:00.000Z
CVE-2014-1682 
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T14:00:00.000Z
CVE-2014-1683 
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name, (2) email, (3) subject, or (4) message parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T18:00:00.000Z
CVE-2014-1684 
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-03T16:00:00.000Z
CVE-2014-1685 
The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T14:00:00.000Z
CVE-2014-1686 
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-13T21:00:00.000Z
CVE-2014-1690 
The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-28T02:00:00.000Z
CVE-2014-1691 
The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-01T15:00:00.000Z
CVE-2014-1692 
The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T15:00:00.000Z
CVE-2014-1693 
Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recv_bin, (12) recv_chunk_start, (13) send, (14) send_bin, (15) send_chunk_start, (16) append_chunk_start, (17) append, or (18) append_bin command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-08T11:00:00.000Z
CVE-2014-1694 
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow remote attackers to hijack the authentication of arbitrary users for requests that (5) create tickets or (6) send follow-ups to existing tickets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-04T16:00:00.000Z
CVE-2014-1695 
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-28T17:00:00.000Z
CVE-2014-1696 
Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-07T02:00:00.000Z
CVE-2014-1697 
The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-07T02:00:00.000Z
CVE-2014-1698 
Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-07T02:00:00.000Z
CVE-2014-1699 
Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-07T02:00:00.000Z
CVE-2014-1700 
Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-16T10:00:00.000Z
CVE-2014-1701 
The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-16T10:00:00.000Z
CVE-2014-1702 
Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of scheduled tasks during shutdown of a thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-16T10:00:00.000Z
CVE-2014-1703 
Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-16T10:00:00.000Z