Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1931.

The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.


Provide references for further information: Can you share references or external links related to CVE-2014-1931?

{'name': '65564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65564'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1931?


Explain the CVE ID: What does the identifier CVE-2014-1932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1932.

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.


Provide references for further information: Can you share references or external links related to CVE-2014-1932?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059'}, {'name': 'GLSA-201612-52', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-52'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7'}, {'name': '[oss-security] 20140210 Re: CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'name': 'USN-2168-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2168-1'}, {'name': '65511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65511'}, {'name': 'openSUSE-SU-2014:0591', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1932?


Explain the CVE ID: What does the identifier CVE-2014-1933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1933.

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes.


Provide references for further information: Can you share references or external links related to CVE-2014-1933?

{'name': 'GLSA-201612-52', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-52'}, {'name': '[oss-security] 20140210 CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/10/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7'}, {'name': '[oss-security] 20140210 Re: CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'name': 'USN-2168-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2168-1'}, {'name': 'openSUSE-SU-2014:0591', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.html'}, {'name': '65513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65513'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1933?


Explain the CVE ID: What does the identifier CVE-2014-1934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1934.

tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.


Provide references for further information: Can you share references or external links related to CVE-2014-1934?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737062'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1063671'}, {'name': 'openSUSE-SU-2014:0619', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-05/msg00027.html'}, {'name': 'openSUSE-SU-2014:0620', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-05/msg00028.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1934?


Explain the CVE ID: What does the identifier CVE-2014-1935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1935.

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.


Provide references for further information: Can you share references or external links related to CVE-2014-1935?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2014-1935'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1935?


Explain the CVE ID: What does the identifier CVE-2014-1936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1936.

rc before 1.7.1-5 insecurely creates temporary files.


Provide references for further information: Can you share references or external links related to CVE-2014-1936?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2014-1936'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737125'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1936?


Explain the CVE ID: What does the identifier CVE-2014-1937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1937.

Gamera before 3.4.1 insecurely creates temporary files.


Provide references for further information: Can you share references or external links related to CVE-2014-1937?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2014-1937'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1937?


Explain the CVE ID: What does the identifier CVE-2014-1938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1938.

python-rply before 0.7.4 insecurely creates temporary files.


Provide references for further information: Can you share references or external links related to CVE-2014-1938?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/11/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2014-1938'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737627'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1938?


Explain the CVE ID: What does the identifier CVE-2014-1939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1939.

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.


Provide references for further information: Can you share references or external links related to CVE-2014-1939?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.chromium.org/2013/11/introducing-chromium-powered-android.html'}, {'name': '[oss-security] 20140210 CVE-2014-1939 searchBoxJavaBridge_ in Android Jelly Bean', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/02/11/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.lenovo.com/us/en/product_security/len_6421'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1939?


Explain the CVE ID: What does the identifier CVE-2014-1942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1942.

Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1942?

{'name': 'VU#163188', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/163188'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1942?


Explain the CVE ID: What does the identifier CVE-2014-1943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1943.

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.


Provide references for further information: Can you share references or external links related to CVE-2014-1943?

{'name': 'openSUSE-SU-2014:0367', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html'}, {'name': '[file] 20140211 segfault in magic_buffer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mx.gw.com/pipermail/file/2014/001330.html'}, {'name': '[file] 20142010 segfault in magic_buffer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mx.gw.com/pipermail/file/2014/001327.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'name': '[file] 20140213 segfault in magic_buffer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mx.gw.com/pipermail/file/2014/001337.html'}, {'name': 'openSUSE-SU-2014:0364', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6443'}, {'name': 'RHSA-2014:1765', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-1765.html'}, {'name': '[file] 20140211 segfault in magic_buffer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mx.gw.com/pipermail/file/2014/001334.html'}, {'name': 'USN-2126-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2126-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/glensc/file/blob/FILE5_17/ChangeLog'}, {'name': 'DSA-2868', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2868'}, {'name': 'USN-2123-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2123-1'}, {'name': 'DSA-2861', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2861'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1943?


Explain the CVE ID: What does the identifier CVE-2014-1944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1944.

Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry.


Provide references for further information: Can you share references or external links related to CVE-2014-1944?

{'name': 'ilchcms-cve20141944-xss(91538)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91538'}, {'name': '32076', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32076'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23203'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/IlchCMS/Ilch-2.0/commit/381e15f39d07d3cdf6aaaa25c0f2321f817935f7'}, {'name': '20140305 Cross-Site Scripting (XSS) in Ilch CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531350/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1944?


Explain the CVE ID: What does the identifier CVE-2014-1945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1945.

SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-1945?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.opendocman.com/opendocman-v1-2-7-1-release'}, {'name': '65775', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65775'}, {'name': '56189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56189'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.opendocman.com/opendocman-v1-2-7-2-released'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23202'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1945?


Explain the CVE ID: What does the identifier CVE-2014-1946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1946.

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php.


Provide references for further information: Can you share references or external links related to CVE-2014-1946?

{'name': 'opendocman-cve20141946-sec-bypass(91577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91577'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23202'}, {'name': '20140305 Multiple Vulnerabilities in OpenDocMan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531351/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1946?


Explain the CVE ID: What does the identifier CVE-2014-1947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1947.

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.


Provide references for further information: Can you share references or external links related to CVE-2014-1947?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/12/13'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/12/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/13/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/13/5'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/19/13'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1064098'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.suse.com/support/update/announcement/2014/suse-su-20140359-1.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1947?


Explain the CVE ID: What does the identifier CVE-2014-1948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1948.

OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.


Provide references for further information: Can you share references or external links related to CVE-2014-1948?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/glance/+bug/1275062'}, {'name': '56419', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56419'}, {'name': 'RHSA-2014:0229', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0229.html'}, {'name': '65507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65507'}, {'name': '[oss-security] 20140212 [OSSA 2014-004] Glance Swift store backend password leak  (CVE-2014-1948)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/12/18'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1948?


Explain the CVE ID: What does the identifier CVE-2014-1949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1949.

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.


Provide references for further information: Can you share references or external links related to CVE-2014-1949?

{'name': '[oss-security] 20140212 cinnamon-screensaver lock bypass (tested on Fedora 20)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/327'}, {'name': 'USN-2475-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2475-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145'}, {'name': 'MDVSA-2015:162', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:162'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/linuxmint/cinnamon-screensaver/issues/44'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2014-0374.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1064695'}, {'name': '[oss-security] 20140212 Re: cinnamon-screensaver lock bypass (tested on Fedora 20)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/331'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1949?


Explain the CVE ID: What does the identifier CVE-2014-1950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1950.

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1950?

{'name': 'SUSE-SU-2014:0373', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html'}, {'name': '[oss-security] 20140212 Xen Security Advisory 88 (CVE-2014-1950) - use-after-free in xc_cpupool_getinfo() under memory pressure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/12/17'}, {'name': 'SUSE-SU-2014:0372', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/xsa/advisory-88.html'}, {'name': 'DSA-3006', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-3006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1950?


Explain the CVE ID: What does the identifier CVE-2014-1955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1955.

Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1955?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.fortiguard.com/advisory/FG-IR-13-009/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1955?


Explain the CVE ID: What does the identifier CVE-2014-1956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1956.

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1956?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1956?


Explain the CVE ID: What does the identifier CVE-2014-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1957.

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1957?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1957?


Explain the CVE ID: What does the identifier CVE-2014-1958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1958.

Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.


Provide references for further information: Can you share references or external links related to CVE-2014-1958?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.imagemagick.org/changeset/14801'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/13/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/02/13/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00032.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00039.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ubuntu.com/usn/usn-2132-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2014/02/19/13'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1958?


Explain the CVE ID: What does the identifier CVE-2014-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1959.

lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.


Provide references for further information: Can you share references or external links related to CVE-2014-1959?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnutls.org/security.html'}, {'name': '[oss-security] 20140213 CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/344'}, {'name': '[oss-security] 20140213 Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/345'}, {'name': '65559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65559'}, {'name': 'USN-2121-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2121-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.gitorious.org/gnutls/gnutls/commit/b1abfe3d182d68539900092eb42fc62cf1bb7e7c'}, {'name': 'DSA-2866', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2866'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1959?


Explain the CVE ID: What does the identifier CVE-2014-1960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1960.

The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1960?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1828885'}, {'name': 'netweaver-solution-info-disc(91093)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91093'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}, {'name': '56942', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56942'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1960?


Explain the CVE ID: What does the identifier CVE-2014-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1961.

Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1961?

{'name': '56947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56947'}, {'name': 'netweaver-webdyn-path-disclosure(91096)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91096'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1852146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-002-sap-portal-webdynpro-path-disclosure/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1961?


Explain the CVE ID: What does the identifier CVE-2014-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1962.

Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue.


Provide references for further information: Can you share references or external links related to CVE-2014-1962?

{'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-003-sap-crm-gwsync-xxe/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1917054'}, {'name': 'sap-crm-info-disc(91098)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91098'}, {'name': '56944', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56944'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1962?


Explain the CVE ID: What does the identifier CVE-2014-1963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1963.

Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1963?

{'name': 'netweaver-message-server-dos(91097)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1773912'}, {'name': '56947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56947'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-001-sap-netweaver-message-server-dos/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1963?


Explain the CVE ID: What does the identifier CVE-2014-1964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1964.

Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error.


Provide references for further information: Can you share references or external links related to CVE-2014-1964?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1788080'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-005-sap-netweaver-dir-error-xss/'}, {'name': '56947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56947'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}, {'name': 'netweaver-dir-xss(91095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91095'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1964?


Explain the CVE ID: What does the identifier CVE-2014-1965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1965.

Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP.


Provide references for further information: Can you share references or external links related to CVE-2014-1965?

{'name': 'netweaver-ispeakadapter-xss(91094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91094'}, {'name': '56947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56947'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-14-006-sap-netweaver-pip-xss/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1442517'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.stechno.net/sap-notes.html?view=sapnote&id=1442517'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1965?


Explain the CVE ID: What does the identifier CVE-2014-1966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1966.

The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets.


Provide references for further information: Can you share references or external links related to CVE-2014-1966?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1966?


Explain the CVE ID: What does the identifier CVE-2014-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1967.

The Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Provide references for further information: Can you share references or external links related to CVE-2014-1967?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://play.google.com/store/apps/details?id=jp.denimoba'}, {'name': 'JVNDB-2014-000022', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000022'}, {'name': 'JVN#48810179', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN48810179/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1967?


Explain the CVE ID: What does the identifier CVE-2014-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1968.

Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1968?

{'name': 'JVN#87797318', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN87797318/index.html'}, {'name': 'JVNDB-2014-000025', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000025'}, {'name': '65807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65807'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xoonips.sourceforge.jp'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1968?


Explain the CVE ID: What does the identifier CVE-2014-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1969.

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2014-1969?

{'name': 'JVNDB-2014-000035', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000035'}, {'name': 'JVN#47386847', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN47386847/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1969?


Explain the CVE ID: What does the identifier CVE-2014-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1970.

Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4 for Android allows remote attackers to overwrite or create arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1970?

{'name': 'JVN#70029459', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN70029459/index.html'}, {'name': 'JVNDB-2014-000033', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000033'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1970?


Explain the CVE ID: What does the identifier CVE-2014-1971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1971.

Cross-site scripting (XSS) vulnerability in Silex before 2.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1971?

{'name': 'JVN#14282890', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN14282890/index.html'}, {'name': '66329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/66329'}, {'name': 'JVNDB-2014-000032', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/silexlabs/Silex/blob/master/docs/change-log.md'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1971?


Explain the CVE ID: What does the identifier CVE-2014-1972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1972.

Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.


Provide references for further information: Can you share references or external links related to CVE-2014-1972?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://tapestry.apache.org/release-notes-536.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/TAP5-2008'}, {'name': 'JVN#17611367', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN17611367/index.html'}, {'name': 'JVNDB-2015-000118', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000118'}, {'name': '[oss-security] 20190823 CVE-2019-10071: Timing Attack in HMAC Verification in Apache Tapestry', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2019/08/23/5'}, {'name': '20190825 CVE-2019-10071: Timing Attack in HMAC Verification in Apache Tapestry', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Aug/20'}, {'name': '[tapestry-users] 20190913 Re: CVE-2019-10071: Apache Tapestry vulnerability disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f514707f3d9%40%3Cusers.tapestry.apache.org%3E'}, {'name': '[tapestry-users] 20191007 Re: CVE-2019-10071: Apache Tapestry vulnerability disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138f851c%40%3Cusers.tapestry.apache.org%3E'}, {'name': '[tapestry-commits] 20200111 svn commit: r1055136 [2/2] - in /websites/production/tapestry/content: cache/main.pageCache component-rendering.html content-type-and-markup.html dom.html https.html request-processing.html response-compression.html security.html url-rewriting.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068dc30843%40%3Ccommits.tapestry.apache.org%3E'}, {'name': '[tapestry-commits] 20200531 svn commit: r1061326 [4/4] - in /websites/production/tapestry/content: ./ cache/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e0c%40%3Ccommits.tapestry.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1972?


Explain the CVE ID: What does the identifier CVE-2014-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1973.

Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2014-1973?

{'name': '68726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68726'}, {'name': 'JVN#84335912', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN84335912/index.html'}, {'name': 'JVNDB-2014-000081', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000081'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1973?


Explain the CVE ID: What does the identifier CVE-2014-1974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1974.

Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1974?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://play.google.com/store/apps/details?id=lysesoft.andexplorer'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro'}, {'name': 'JVN#22670349', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN22670349/index.html'}, {'name': 'JVNDB-2014-000037', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1974?


Explain the CVE ID: What does the identifier CVE-2014-1975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1975.

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2014-1975?

{'name': 'JVNDB-2014-000031', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN38227002/995495/index.html'}, {'name': 'JVN#38227002', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN38227002/index.html'}, {'name': '66250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/66250'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://play.google.com/store/apps/details?id=org.rhorita777.unzipper'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1975?


Explain the CVE ID: What does the identifier CVE-2014-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1976.

The Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Provide references for further information: Can you share references or external links related to CVE-2014-1976?

{'name': 'JVNDB-2014-000030', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000030'}, {'name': 'JVN#16263849', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN16263849/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://play.google.com/store/apps/details?id=com.demaecan.androidapp'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1976?


Explain the CVE ID: What does the identifier CVE-2014-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1977.

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1977?

{'name': 'JVNDB-2014-000027', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000027'}, {'name': 'JVN#81739241', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN81739241/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1977?


Explain the CVE ID: What does the identifier CVE-2014-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1978.

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1978?

{'name': 'JVN#05951929', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN05951929/index.html'}, {'name': 'JVNDB-2014-000028', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000028'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1978?


Explain the CVE ID: What does the identifier CVE-2014-1979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1979.

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message.


Provide references for further information: Can you share references or external links related to CVE-2014-1979?

{'name': 'JVN#89260331', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN89260331/index.html'}, {'name': 'JVNDB-2014-000029', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000029'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1979?


Explain the CVE ID: What does the identifier CVE-2014-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1980.

Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.


Provide references for further information: Can you share references or external links related to CVE-2014-1980?

{'name': 'JVN#80310172', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN80310172/index.html'}, {'name': 'JVNDB-2014-000092', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000092'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwigo.org/bugs/view.php?id=2805'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1980?


Explain the CVE ID: What does the identifier CVE-2014-1981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1981.


Provide references for further information: Can you share references or external links related to CVE-2014-1981?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1981?


Explain the CVE ID: What does the identifier CVE-2014-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1982.

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.


Provide references for further information: Can you share references or external links related to CVE-2014-1982?

{'name': '32545', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32545'}, {'name': '20140326 [GTA-2014-01] - Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Mar/340'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1982?


Explain the CVE ID: What does the identifier CVE-2014-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1983.

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1983?

{'name': 'JVN#10319260', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN10319260/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/20130317notice01.php'}, {'name': 'JVNDB-2014-000039', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000039'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1983?


Explain the CVE ID: What does the identifier CVE-2014-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1984.

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1984?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/20130317notice02.php'}, {'name': 'JVNDB-2014-000040', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000040'}, {'name': 'JVN#00058727', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN00058727/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1984?


Explain the CVE ID: What does the identifier CVE-2014-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1985.

Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url (back_url parameter).


Provide references for further information: Can you share references or external links related to CVE-2014-1985?

{'name': 'JVNDB-2014-000041', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000041.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redmine.org/projects/redmine/wiki/Changelog'}, {'name': 'JVN#93004610', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN93004610/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/redmine/redmine/commit/7567c3d8b21fe67e5f04e6839c1fce061600f2f3'}, {'name': '[oss-security] 20140410 Re: CVE request: redmine open redirector', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q2/84'}, {'name': '66674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/66674'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redmine.org/projects/redmine/wiki/Security_Advisories'}, {'name': '57524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redmine.org/projects/redmine/wiki/Changelog_2_4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1985?


Explain the CVE ID: What does the identifier CVE-2014-1986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1986.

The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-1986?

{'name': 'JVN#55438786', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55438786/index.html'}, {'name': 'JVNDB-2014-000036', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000036'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://play.google.com/store/apps/details?id=jp.co.kokuyost.CamiApp'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1986?


Explain the CVE ID: What does the identifier CVE-2014-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1987.

The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1987?

{'name': 'JVNDB-2014-000073', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140421news01.php'}, {'name': 'JVN#42024228', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN42024228/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1987?


Explain the CVE ID: What does the identifier CVE-2014-1988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1988.

The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1988?

{'name': 'JVNDB-2014-000042', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000042'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.cybozu.com/ja-jp/article/8105'}, {'name': 'JVN#90519014', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN90519014/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1988?


Explain the CVE ID: What does the identifier CVE-2014-1989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1989.

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.


Provide references for further information: Can you share references or external links related to CVE-2014-1989?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.cybozu.com/ja/article/5264'}, {'name': 'JVN#31230946', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN31230946/index.html'}, {'name': 'JVNDB-2014-000043', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000043'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1989?


Explain the CVE ID: What does the identifier CVE-2014-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1990.

Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords.


Provide references for further information: Can you share references or external links related to CVE-2014-1990?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.toshibatec.co.jp/page.jsp?id=4224'}, {'name': 'JVNDB-2014-000038', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000038'}, {'name': 'JVN#13313061', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN13313061/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1990?


Explain the CVE ID: What does the identifier CVE-2014-1991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1991.

Open redirect vulnerability in WebPlatform / AppFramework 6.0 through 7.2 in NTT DATA INTRAMART intra-mart allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1991?

{'name': 'JVN#68340046', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN68340046/index.html'}, {'name': 'JVNDB-2014-000044', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000044'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN68340046/278948/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1991?


Explain the CVE ID: What does the identifier CVE-2014-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1992.

Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1992?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140714up05.php'}, {'name': 'JVNDB-2014-000078', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000078'}, {'name': 'JVN#94838679', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN94838679/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1992?


Explain the CVE ID: What does the identifier CVE-2014-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1993.

The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1993?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140714up04.php'}, {'name': 'JVNDB-2014-000077', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000077'}, {'name': 'JVN#75990997', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN75990997/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1993?


Explain the CVE ID: What does the identifier CVE-2014-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1994.

Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1994?

{'name': 'JVN#80583739', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN80583739/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140714up04.php'}, {'name': 'JVNDB-2014-000076', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000076'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1994?


Explain the CVE ID: What does the identifier CVE-2014-1995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1995.

Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1995?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140714up02.php'}, {'name': 'JVNDB-2014-000075', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000075'}, {'name': 'JVN#97558950', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN97558950/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1995?


Explain the CVE ID: What does the identifier CVE-2014-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1996.

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.


Provide references for further information: Can you share references or external links related to CVE-2014-1996?

{'name': 'JVNDB-2014-000074', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000074'}, {'name': 'JVN#31082531', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN31082531/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/gr20140714up01.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1996?


Explain the CVE ID: What does the identifier CVE-2014-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1997.

The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1997?

{'name': '67816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67816'}, {'name': 'JVNDB-2014-000046', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000046'}, {'name': 'JVN#78136804', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN78136804/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1997?


Explain the CVE ID: What does the identifier CVE-2014-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1998.

Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1998?

{'name': 'JVN#54650130', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN54650130/index.html'}, {'name': 'JVNDB-2014-000047', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000047'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1998?


Explain the CVE ID: What does the identifier CVE-2014-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1999.

The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.


Provide references for further information: Can you share references or external links related to CVE-2014-1999?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://fuelphp.com/security-advisories'}, {'name': 'JVNDB-2014-000082', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2014-000082'}, {'name': 'JVN#94791545', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN94791545/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1999?


Explain the CVE ID: What does the identifier CVE-2015-0001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0001.

The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0001?

{'name': 'MS15-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006'}, {'name': 'win-ms15kb3004365-update(99514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99514'}, {'name': 'ms-wer-cve20150001-security-bypass(99513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99513'}, {'name': '62134', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62134'}, {'name': '71927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71927'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0001?


Explain the CVE ID: What does the identifier CVE-2015-0002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0002.

The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with an administrative account, which allows local users to gain privileges by running AppCompatCache.exe with a crafted DLL file, aka MSRC ID 20544 or "Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0002?

{'name': 'ms-appcompatcache-cve20150002-priv-esc(99523)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99523'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=118'}, {'name': '71972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71972'}, {'name': 'win-ms15kb3023266-update(99524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99524'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zdnet.com/article/google-discloses-unpatched-windows-vulnerability/'}, {'name': 'MS15-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-001'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/sambowne/statuses/550384131683520512'}, {'name': '61277', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/61277'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0002?


Explain the CVE ID: What does the identifier CVE-2015-0003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0003.

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0003?

{'name': 'MS15-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-010'}, {'name': 'ms-kmd-cve20150003-priv-esc(100430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100430'}, {'name': '72457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72457'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0003?


Explain the CVE ID: What does the identifier CVE-2015-0004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0004.

The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction attack to load another user's UsrClass.dat registry hive, aka MSRC ID 20674 or "Microsoft User Profile Service Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0004?

{'name': '71967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71967'}, {'name': '61927', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/61927'}, {'name': 'ms-profsvc-cve20150004-priv-esc(99519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99519'}, {'name': 'MS15-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-003'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=123'}, {'name': 'win-ms15kb3021674-update(99520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99520'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0004?


Explain the CVE ID: What does the identifier CVE-2015-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0005.

The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, aka "NETLOGON Spoofing Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0005?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.samba.org/samba/history/samba-4.2.10.html'}, {'name': '1031891', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031891'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130773/Windows-Pass-Through-Authentication-Methods-Improper-Validation.html'}, {'name': '20150310 [CORE-2015-0005] - Windows Pass-Through Authentication Methods Improper Validation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Mar/60'}, {'name': 'MS15-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-027'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/windows-pass-through-authentication-methods-improper-validation'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0005?


Explain the CVE ID: What does the identifier CVE-2015-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0006.

The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka "NLA Security Feature Bypass Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0006?

{'name': '62184', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62184'}, {'name': 'MS15-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-005'}, {'name': '71930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71930'}, {'name': 'win-ms15kb3022777-update(99522)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99522'}, {'name': '62098', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62098'}, {'name': 'ms-nla-cve20150006-security-bypass(99521)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99521'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0006?


Explain the CVE ID: What does the identifier CVE-2015-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0007.


Provide references for further information: Can you share references or external links related to CVE-2015-0007?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0007?


Explain the CVE ID: What does the identifier CVE-2015-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0008.

The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client, which allows remote attackers to execute arbitrary code by making crafted data available on a UNC share, as demonstrated by Group Policy data from a spoofed domain controller, aka "Group Policy Remote Code Execution Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0008?

{'name': 'MS15-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-011'}, {'name': 'VU#787252', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/787252'}, {'name': 'ms-grouppolicy-cve20150008-code-exec(100426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx'}, {'name': '1031719', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031719'}, {'name': '72477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72477'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.jasadvisors.com/additonal-jasbug-security-exploit-info/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/155002/Microsoft-Windows-Server-2012-Group-Policy-Remote-Code-Execution.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0008?


Explain the CVE ID: What does the identifier CVE-2015-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0009.

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses, aka "Group Policy Security Feature Bypass Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0009?

{'name': 'MS15-014', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-014'}, {'name': '72476', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72476'}, {'name': '1031722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031722'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/155007/Microsoft-Windows-Server-2012-Group-Policy-Security-Feature-Bypass.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0009?


Explain the CVE ID: What does the identifier CVE-2015-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0010.

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token's level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka "CNG Security Feature Bypass Vulnerability" or MSRC ID 20707.


Provide references for further information: Can you share references or external links related to CVE-2015-0010?

{'name': 'MS15-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-010'}, {'name': '72461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72461'}, {'tags': ['x_refsource_MISC'], 'url': 'http://code.google.com/p/google-security-research/issues/detail?id=128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0010?


Explain the CVE ID: What does the identifier CVE-2015-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0011.

mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass an impersonation protection mechanism, and obtain privileges for redirection of WebDAV requests, via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0011?

{'name': 'ms-webdav-cve20150011-priv-esc(99527)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99527'}, {'name': 'MS15-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-008'}, {'name': '1031531', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031531'}, {'name': '71960', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71960'}, {'name': '62154', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62154'}, {'name': 'win-ms15kb3019215-update(99526)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99526'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0011?


Explain the CVE ID: What does the identifier CVE-2015-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0012.

Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0012?

{'name': 'ms-vmmanager-cve20150012-priv-esc(100428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100428'}, {'name': '1031726', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031726'}, {'name': 'MS15-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-017'}, {'name': '72473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72473'}, {'name': '1034652', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034652'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0012?


Explain the CVE ID: What does the identifier CVE-2015-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0013.


Provide references for further information: Can you share references or external links related to CVE-2015-0013?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0013?


Explain the CVE ID: What does the identifier CVE-2015-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0014.

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0014?

{'name': 'MS15-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-002'}, {'name': 'ms-telnet-cve20150014-code-exec(99517)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99517'}, {'name': '71968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71968'}, {'name': '61580', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/61580'}, {'name': 'win-ms15kb3020393-update(99518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99518'}, {'name': '1031523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031523'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0014?


Explain the CVE ID: What does the identifier CVE-2015-0015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0015.

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server (NPS), aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0015?

{'name': 'MS15-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-007'}, {'name': '1031532', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031532'}, {'name': '71933', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71933'}, {'name': '62148', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62148'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0015?


Explain the CVE ID: What does the identifier CVE-2015-0016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0016.

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Directory Traversal Elevation of Privilege Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0016?

{'name': '71965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71965'}, {'name': '1031524', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031524'}, {'name': 'ms-windows-cve20150016-priv-esc(99515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99515'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/'}, {'name': 'win-ms15kb3025421-update(99516)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99516'}, {'name': '35983', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35983'}, {'name': '62076', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62076'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130201/MS15-004-Microsoft-Remote-Desktop-Services-Web-Proxy-IE-Sandbox-Escape.html'}, {'name': 'MS15-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0016?


Explain the CVE ID: What does the identifier CVE-2015-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0017.

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.


Provide references for further information: Can you share references or external links related to CVE-2015-0017?

{'name': '72402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72402'}, {'name': '1031723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031723'}, {'name': 'MS15-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0017?


Explain the CVE ID: What does the identifier CVE-2015-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0018.

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0037, CVE-2015-0040, and CVE-2015-0066.


Provide references for further information: Can you share references or external links related to CVE-2015-0018?

{'name': '1031723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031723'}, {'name': 'MS15-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009'}, {'name': '72403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72403'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0018?


Explain the CVE ID: What does the identifier CVE-2015-0019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0019.

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0019?

{'name': '72425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72425'}, {'name': '1031723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031723'}, {'name': 'MS15-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0019?


Explain the CVE ID: What does the identifier CVE-2015-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0020.

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.


Provide references for further information: Can you share references or external links related to CVE-2015-0020?

{'name': '1031723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031723'}, {'name': '72426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72426'}, {'name': 'MS15-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0020?


Explain the CVE ID: What does the identifier CVE-2015-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0021.

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2015-0021?

{'name': '72436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72436'}, {'name': '1031723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031723'}, {'name': 'MS15-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0021?


Explain the CVE ID: What does the identifier CVE-2015-0022 mean in the context of cybersecurity?