rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-3530 
The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-22T20:00:00.000Z
CVE-2014-3531 
Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-18T14:00:00.000Z
CVE-2014-3532 
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-19T19:00:00.000Z
CVE-2014-3533 
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-19T19:00:00.000Z
CVE-2014-3534 
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-01T10:00:00.000Z
CVE-2014-3535 
include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-28T19:00:00.000Z
CVE-2014-3536 
CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration
Problem types: description: RHN account info logged to top_output.log during registration
Affected products: vendor: CFME (CloudForms Management Engine)
product: CFME (CloudForms Management Engine)
Published: 2019-12-15T21:04:27.000Z
CVE-2014-3537 
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-23T14:00:00.000Z
CVE-2014-3538 
file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-03T14:00:00.000Z
CVE-2014-3539 
base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-06T16:00:00.000Z
CVE-2014-3541 
The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3542 
mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3543 
mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3544 
Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3545 
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3546 
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3547 
Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3548 
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3549 
Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3550 
Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3551 
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3552 
The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via crafted plugin interaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3553 
mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users to bypass intended access restrictions by leveraging two or more group memberships.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T10:00:00.000Z
CVE-2014-3554 
Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-31T14:00:00.000Z
CVE-2014-3555 
OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-23T14:00:00.000Z
CVE-2014-3556 
The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-29T20:00:00.000Z
CVE-2014-3558 
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-30T14:00:00.000Z
CVE-2014-3559 
The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-06T19:00:00.000Z
CVE-2014-3560 
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-06T18:00:00.000Z
CVE-2014-3561 
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-05T16:00:00.000Z
CVE-2014-3562 
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-21T14:00:00.000Z
CVE-2014-3563 
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-22T17:00:00.000Z
CVE-2014-3564 
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-20T17:00:00.000Z
CVE-2014-3565 
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-07T14:00:00.000Z
CVE-2014-3566 
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T00:00:00.000Z
CVE-2014-3567 
Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-19T01:00:00.000Z
CVE-2014-3568 
OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-19T01:00:00.000Z
CVE-2014-3569 
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-24T11:00:00.000Z
CVE-2014-3570 
The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-09T02:00:00.000Z
CVE-2014-3571 
OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-09T02:00:00.000Z
CVE-2014-3572 
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-09T02:00:00.000Z
CVE-2014-3573 
The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-18T00:00:00.000Z
CVE-2014-3574 
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-04T17:00:00.000Z
CVE-2014-3575 
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-27T00:00:00.000Z
CVE-2014-3576 
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-14T18:00:00.000Z
CVE-2014-3577 
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-21T00:00:00.000Z
CVE-2014-3578 
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-19T20:00:00.000Z
CVE-2014-3579 
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T19:00:00.000Z
CVE-2014-3580 
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-18T15:00:00.000Z
CVE-2014-3581 
The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-10T10:00:00.000Z
CVE-2014-3582 
In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T20:00:00.000Z
CVE-2014-3583 
The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-15T17:27:00.000Z
CVE-2014-3584 
The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-30T14:00:00.000Z
CVE-2014-3585 
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
Problem types: description: does not check GPG signatures on package installation
Affected products: vendor: Red Hat
product: redhat-upgrade-tool
Published: 2019-11-22T14:51:06.000Z
CVE-2014-3586 
The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-21T17:00:00.000Z
CVE-2014-3587 
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-23T01:00:00.000Z
CVE-2014-3589 
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-25T14:00:00.000Z
CVE-2014-3590 
Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: Red Hat Satellite 6
product: Red Hat Satellite 6
Published: 2020-01-02T19:52:06.000Z
CVE-2014-3591 
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
Problem types: description: Other
Affected products: vendor: GNU
product: Libgcrypt
vendor: GNU
product: GnuPG
Published: 2019-11-29T21:02:23.000Z
CVE-2014-3592 
OpenShift Origin: Improperly validated team names could allow stored XSS attacks
Problem types: description: XSS in team name
Affected products: vendor: OpenShift Origin
product: OpenShift Origin
Published: 2019-11-13T15:33:47.000Z
CVE-2014-3593 
Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T14:00:00.000Z