Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0933.

Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.


Provide references for further information: Can you share references or external links related to CVE-2014-0933?

{'name': 'ibm-iismw-cve20140933-csrf(92273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92273'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671141'}, {'name': 'JR49605', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1JR49605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0933?


Explain the CVE ID: What does the identifier CVE-2014-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0935.

Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related to events.


Provide references for further information: Can you share references or external links related to CVE-2014-0935?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672887'}, {'name': 'ibm-smartanalytics-cve20140935-priv-esc(92298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92298'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0935?


Explain the CVE ID: What does the identifier CVE-2014-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0936.

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.


Provide references for further information: Can you share references or external links related to CVE-2014-0936?

{'name': 'ibm-appscan-cve20140936-priv-escalation(92317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92317'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21674750'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0936?


Explain the CVE ID: What does the identifier CVE-2014-0940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0940.

Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.


Provide references for further information: Can you share references or external links related to CVE-2014-0940?

{'name': 'IV46530', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530'}, {'name': 'ibm-tivoli-cve20140940-xss(92381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92381'}, {'name': '70247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/70247'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21686189'}, {'name': 'IV47175', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0940?


Explain the CVE ID: What does the identifier CVE-2014-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0941.

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942.


Provide references for further information: Can you share references or external links related to CVE-2014-0941?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671686'}, {'name': 'ibm-netcoolomnibus-cve20140941-xss(92400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92400'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0941?


Explain the CVE ID: What does the identifier CVE-2014-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0942.

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941.


Provide references for further information: Can you share references or external links related to CVE-2014-0942?

{'name': 'ibm-netcoolomnibus-cve20140942-xss(92401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92401'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0942?


Explain the CVE ID: What does the identifier CVE-2014-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0943.

IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.


Provide references for further information: Can you share references or external links related to CVE-2014-0943?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671377'}, {'name': 'JR49881', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1JR49881'}, {'name': '1030284', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030284'}, {'name': 'JR49996', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1JR49996'}, {'name': 'ibm-websphere-cve20140943-dos(92402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92402'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0943?


Explain the CVE ID: What does the identifier CVE-2014-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0944.

Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.


Provide references for further information: Can you share references or external links related to CVE-2014-0944?

{'name': 'ibm-odm-cve20140944-csrf(92559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92559'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0944?


Explain the CVE ID: What does the identifier CVE-2014-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0945.

Cross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2014-0945?

{'name': 'ibm-odm-cve20140945-xss(92562)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92562'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0945?


Explain the CVE ID: What does the identifier CVE-2014-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0946.

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.


Provide references for further information: Can you share references or external links related to CVE-2014-0946?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671324'}, {'name': 'ibm-odm-cve20140946-cache(92573)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92573'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0946?


Explain the CVE ID: What does the identifier CVE-2014-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0947.

Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update site.


Provide references for further information: Can you share references or external links related to CVE-2014-0947?

{'name': 'ibm-rsadm-cve20140947-update(92620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92620'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21678323'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0947?


Explain the CVE ID: What does the identifier CVE-2014-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0948.

Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.


Provide references for further information: Can you share references or external links related to CVE-2014-0948?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21678323'}, {'name': 'ibm-rsadm-cve20140948-zip(92621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92621'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0948?


Explain the CVE ID: What does the identifier CVE-2014-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0949.

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a crafted web request.


Provide references for further information: Can you share references or external links related to CVE-2014-0949?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'ibm-websphere-cve20140949-dos(92622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92622'}, {'name': 'PI15692', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI15692'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0949?


Explain the CVE ID: What does the identifier CVE-2014-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0950.

Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.


Provide references for further information: Can you share references or external links related to CVE-2014-0950?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21675164'}, {'name': 'ibm-clearquest-cve20140950-info-disc(92623)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92623'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0950?


Explain the CVE ID: What does the identifier CVE-2014-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0951.

Cross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0951?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'PI15690', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI15690'}, {'name': 'ibm-websphere-cve20140951-xss(92624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92624'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0951?


Explain the CVE ID: What does the identifier CVE-2014-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0952.

Cross-site scripting (XSS) vulnerability in boot_config.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF28, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0952?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'ibm-websphere-cve20140952-xss(92625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92625'}, {'name': 'PI16041', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI16041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0952?


Explain the CVE ID: What does the identifier CVE-2014-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0953.

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, and 8.0.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2014-0953?

{'name': 'ibm-wesphere-cve20140953-xss(92626)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92626'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21680230'}, {'name': 'PI16127', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI16127'}, {'name': '1030669', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030669'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0953?


Explain the CVE ID: What does the identifier CVE-2014-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0954.

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows remote attackers to obtain sensitive information, bypass intended request-dispatcher access restrictions, or cause a denial of service (memory consumption) via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2014-0954?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'ibm-websphere-cve20140954-dos(92627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92627'}, {'name': 'PI15723', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI15723'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0954?


Explain the CVE ID: What does the identifier CVE-2014-0955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0955.

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when Social Rendering in Connections integration is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0955?

{'name': 'PI15583', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI15583'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'ibm-websphere-cve20140955-xss(92628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92628'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0955?


Explain the CVE ID: What does the identifier CVE-2014-0956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0956.

Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0956?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'ibm-websphere-cve20140956-xss(92629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92629'}, {'name': 'PI16040', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI16040'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0956?


Explain the CVE ID: What does the identifier CVE-2014-0957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0957.

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.


Provide references for further information: Can you share references or external links related to CVE-2014-0957?

{'name': 'JR49990', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1JR49990'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21679064'}, {'name': '59557', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59557'}, {'name': 'ibm-bpm-cve20140957-xss(92738)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92738'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0957?


Explain the CVE ID: What does the identifier CVE-2014-0958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0958.

Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0958?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'PI15689', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI15689'}, {'name': 'ibm-websphere-cve20140958-url-redirect(92739)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92739'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0958?


Explain the CVE ID: What does the identifier CVE-2014-0959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0959.

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.


Provide references for further information: Can you share references or external links related to CVE-2014-0959?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672572'}, {'name': 'PI16462', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI16462'}, {'name': 'ibm-websphere-cve20140959-dos(92741)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0959?


Explain the CVE ID: What does the identifier CVE-2014-0960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0960.

IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH session from a deployed virtual machine.


Provide references for further information: Can you share references or external links related to CVE-2014-0960?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21675216'}, {'name': 'ibm-pure-cve20140960-sec-bypass(92743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92743'}, {'name': '59254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59254'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0960?


Explain the CVE ID: What does the identifier CVE-2014-0961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0961.

Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.


Provide references for further information: Can you share references or external links related to CVE-2014-0961?

{'name': 'ibm-sim-cve20140961-csrf(92747)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92747'}, {'name': '59080', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59080'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21674754'}, {'name': '67909', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67909'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0961?


Explain the CVE ID: What does the identifier CVE-2014-0963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0963.

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.


Provide references for further information: Can you share references or external links related to CVE-2014-0963?

{'name': '59249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59249'}, {'name': 'ibm-gskit-cve20140963-dos(92844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92844'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21676092'}, {'name': '58845', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/58845'}, {'name': 'IV59660', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IV59660'}, {'name': '59245', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21672192'}, {'name': '1030707', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030707'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21675496'}, {'name': '67238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67238'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21676091'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-304.ibm.com/support/docview.wss?uid=swg21680803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0963?


Explain the CVE ID: What does the identifier CVE-2014-0964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0964.

IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.


Provide references for further information: Can you share references or external links related to CVE-2014-0964?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21671835'}, {'name': 'PI14306', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI14306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-304.ibm.com/support/docview.wss?uid=swg21673808'}, {'name': 'ibm-was-cve20140964-scan(92877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92877'}, {'name': 'PI17128', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI17128'}, {'name': '1030280', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1030280'}, {'name': 'PI16981', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI16981'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0964?


Explain the CVE ID: What does the identifier CVE-2014-0965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0965.

IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response.


Provide references for further information: Can you share references or external links related to CVE-2014-0965?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21676092'}, {'name': 'ibm-websphere-cve20140965-info-disc(92878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92878'}, {'name': '68210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68210'}, {'name': 'PI11434', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI11434'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21676091'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21681249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0965?


Explain the CVE ID: What does the identifier CVE-2014-0966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0966.

SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0966?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21681651'}, {'name': '60693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60693'}, {'name': '60679', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60679'}, {'name': '60695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60695'}, {'name': 'ibm-infospheremdm-cve20140966-sql-injection(92880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92880'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0966?


Explain the CVE ID: What does the identifier CVE-2014-0967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0967.

Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2014-0967?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21677300'}, {'name': 'ibm-imdm-cve20140967-xss(92882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92882'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0967?


Explain the CVE ID: What does the identifier CVE-2014-0968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0968.

Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document.


Provide references for further information: Can you share references or external links related to CVE-2014-0968?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21677301'}, {'name': 'ibm-imdm-cve20140968-xss(92884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92884'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0968?


Explain the CVE ID: What does the identifier CVE-2014-0969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0969.

Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.


Provide references for further information: Can you share references or external links related to CVE-2014-0969?

{'name': '60693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60693'}, {'name': '69262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69262'}, {'name': 'ibm-infospheremdm-cve20140969-csrf(92885)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92885'}, {'name': '60679', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60679'}, {'name': '60695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60695'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21681649'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0969?


Explain the CVE ID: What does the identifier CVE-2014-0970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0970.

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0970?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21677304'}, {'name': 'ibm-imdm-cve20140970-link-inj(92950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/92950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0970?


Explain the CVE ID: What does the identifier CVE-2014-0972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0972.

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write to arbitrary memory locations, by using a crafted GPU command stream to modify the contents of a certain register.


Provide references for further information: Can you share references or external links related to CVE-2014-0972?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0972?


Explain the CVE ID: What does the identifier CVE-2014-0973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0973.

The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSA_public_decrypt API specification, which makes it easier for attackers to bypass boot-image authentication requirements via trailing data.


Provide references for further information: Can you share references or external links related to CVE-2014-0973?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0973?


Explain the CVE ID: What does the identifier CVE-2014-0974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0974.

The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a controllable memory location by leveraging the ability to initiate an attempted boot of an arbitrary image.


Provide references for further information: Can you share references or external links related to CVE-2014-0974?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.codeaurora.org/projects/security-advisories/lk-insufficient-verification-tagaddr-when-loading-device-tree-cve-2014-0974'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-07-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0974?


Explain the CVE ID: What does the identifier CVE-2014-0977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0977.

Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-0977?

{'name': '1029588', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029588'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html'}, {'name': '56405', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56405'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304'}, {'name': '56295', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56295'}, {'name': 'DSA-2841', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2841'}, {'name': 'movabletype-richtexteditor-xss(90095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90095'}, {'name': '[oss-security] 20140106 CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/24'}, {'name': '[oss-security] 20140107 Re: CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/36'}, {'name': '64657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64657'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0977?


Explain the CVE ID: What does the identifier CVE-2014-0978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0978.

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.


Provide references for further information: Can you share references or external links related to CVE-2014-0978?

{'name': 'MDVSA-2014:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2014:024'}, {'name': '64674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64674'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1049165'}, {'name': 'GLSA-201702-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201702-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a'}, {'name': 'graphviz-yyerror-bo(90085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90085'}, {'name': '[oss-security] 20140107 CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/28'}, {'name': 'DSA-2843', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2843'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=497274'}, {'name': '[oss-security] 20140107 Re: CVE Request: graphviz: stack-based buffer overflow in yyerror()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/38'}, {'name': '55666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55666'}, {'name': '56244', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56244'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0978?


Explain the CVE ID: What does the identifier CVE-2014-0979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0979.

The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.


Provide references for further information: Can you share references or external links related to CVE-2014-0979?

{'name': '64679', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64679'}, {'name': 'FEDORA-2014-1648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128150.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=857303'}, {'name': '[oss-security] 20140107 Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/07/15'}, {'name': 'FEDORA-2014-1647', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128117.html'}, {'name': 'openSUSE-SU-2014:0071', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-01/msg00048.html'}, {'name': '56211', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56211'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449'}, {'name': '56423', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0979?


Explain the CVE ID: What does the identifier CVE-2014-0980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0980.

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.


Provide references for further information: Can you share references or external links related to CVE-2014-0980?

{'name': 'publishit-cve20140980-bo(90989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90989'}, {'name': '20140205 CORE-2014-0001 - Publish-It Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Feb/34'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/125089'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/publish-it-buffer-overflow-vulnerability'}, {'name': '31461', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/31461'}, {'name': '65366', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65366'}, {'name': '102911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102911'}, {'name': '20140205 CORE-2014-0001 - Publish-It Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/530943/100/0/threaded'}, {'name': '56618', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56618'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0980?


Explain the CVE ID: What does the identifier CVE-2014-0981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0981.

VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.


Provide references for further information: Can you share references or external links related to CVE-2014-0981?

{'name': '32208', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32208'}, {'name': 'GLSA-201612-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-27'}, {'name': '57384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57384'}, {'name': '20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531418/100/0/threaded'}, {'name': 'DSA-2904', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2904'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.virtualbox.org/changeset/50437/vbox'}, {'name': '20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Mar/95'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0981?


Explain the CVE ID: What does the identifier CVE-2014-0982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0982.


Provide references for further information: Can you share references or external links related to CVE-2014-0982?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0982?


Explain the CVE ID: What does the identifier CVE-2014-0983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0983.

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function.


Provide references for further information: Can you share references or external links related to CVE-2014-0983?

{'name': '32208', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32208'}, {'name': 'GLSA-201612-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-27'}, {'name': '57384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57384'}, {'name': '20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531418/100/0/threaded'}, {'name': 'DSA-2904', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2904'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.virtualbox.org/changeset/50441/vbox'}, {'name': '20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Mar/95'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0983?


Explain the CVE ID: What does the identifier CVE-2014-0984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0984.

The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.


Provide references for further information: Can you share references or external links related to CVE-2014-0984?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://service.sap.com/sap/support/notes/1986895'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/sap-router-password-timing-attack'}, {'name': '20140416 [CORE-2014-0003] - SAP Router Password Timing Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531854/100/0/threaded'}, {'name': '32919', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32919'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://scn.sap.com/docs/DOC-8218'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0984?


Explain the CVE ID: What does the identifier CVE-2014-0985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0985.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0985?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}, {'name': '69529', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69529'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0985?


Explain the CVE ID: What does the identifier CVE-2014-0986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0986.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0986?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}, {'name': '69531', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69531'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0986?


Explain the CVE ID: What does the identifier CVE-2014-0987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0987.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0987?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}, {'name': '69532', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69532'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0987?


Explain the CVE ID: What does the identifier CVE-2014-0988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0988.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0988?

{'name': '69533', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69533'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0988?


Explain the CVE ID: What does the identifier CVE-2014-0989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0989.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0989?

{'name': '69534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69534'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0989?


Explain the CVE ID: What does the identifier CVE-2014-0990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0990.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0990?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}, {'name': '69535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69535'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0990?


Explain the CVE ID: What does the identifier CVE-2014-0991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0991.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0991?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}, {'name': '69536', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69536'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0991?


Explain the CVE ID: What does the identifier CVE-2014-0992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0992.

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-0992?

{'name': '69538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69538'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-14-261-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0992?


Explain the CVE ID: What does the identifier CVE-2014-0993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0993.

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file.


Provide references for further information: Can you share references or external links related to CVE-2014-0993?

{'name': 'VU#646748', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/646748'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/delphi-and-c-builder-vcl-library-buffer-overflow'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.embarcadero.com/article/44015'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0993?


Explain the CVE ID: What does the identifier CVE-2014-0994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0994.

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the BITMAPINFOHEADER.biClrUsed field in a BMP file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0993.


Provide references for further information: Can you share references or external links related to CVE-2014-0994?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/delphi-and-c-builder-vcl-library-heap-buffer-overflow'}, {'name': '20140916 [CORE-2014-0006] - Delphi and C++ Builder VCL library Heap Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Sep/57'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.embarcadero.com/article/44015'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0994?


Explain the CVE ID: What does the identifier CVE-2014-0995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0995.

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.


Provide references for further information: Can you share references or external links related to CVE-2014-0995?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://twitter.com/SAP_Gsupport/status/522750365780160513'}, {'name': '60950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60950'}, {'name': 'netweaver-trace-pattern-dos(97610)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/97610'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/128726/SAP-Netweaver-Enqueue-Server-Trace-Pattern-Denial-Of-Service.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/sap-netweaver-enqueue-server-trace-pattern-denial-service-vulnerability'}, {'name': '20141016 [CORE-2014-0007] -SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/533719/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/'}, {'name': '20141016 [CORE-2014-0007] -SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Oct/76'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0995?


Explain the CVE ID: What does the identifier CVE-2014-0997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0997.

WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and potentially other unspecified Android releases before 5.0.1 and 5.0.2 does not properly handle exceptions, which allows remote attackers to cause a denial of service (reboot) via a crafted 802.11 probe response frame.


Provide references for further information: Can you share references or external links related to CVE-2014-0997?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html'}, {'name': '20150126 [CORE-2015-0002] - Android WiFi-Direct Denial of Service', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/104'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/android-wifi-direct-denial-service'}, {'name': '35913', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/35913/'}, {'name': '20150126 [CORE-2015-0002] - Android WiFi-Direct Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534544/100/0/threaded'}, {'name': '72311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72311'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0997?


Explain the CVE ID: What does the identifier CVE-2014-0998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0998.

Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a denial of service (crash) and possibly gain privileges via a negative value in a VT_WAITACTIVE ioctl call, which triggers an array index error and out-of-bounds kernel memory access.


Provide references for further information: Can you share references or external links related to CVE-2014-0998?

{'name': '20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534563/100/0/threaded'}, {'name': '20150127 [CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/107'}, {'name': 'FreeBSD-EN-15:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-EN-15:01.vt.asc'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0998?


Explain the CVE ID: What does the identifier CVE-2014-0999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0999.

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2014-0999?

{'name': '20150522 [CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/May/95'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/132022/Sendio-ESP-Information-Disclosure.html'}, {'name': '20150522 [CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/535592/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sendio.com/software-release-history/'}, {'name': '37114', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/37114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0999?


Explain the CVE ID: What does the identifier CVE-2014-1004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1004.


Provide references for further information: Can you share references or external links related to CVE-2014-1004?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1004?


Explain the CVE ID: What does the identifier CVE-2014-1137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1137.


Provide references for further information: Can you share references or external links related to CVE-2014-1137?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1137?


Explain the CVE ID: What does the identifier CVE-2014-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1155.


Provide references for further information: Can you share references or external links related to CVE-2014-1155?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1155?


Explain the CVE ID: What does the identifier CVE-2014-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1201.

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-1201?

{'name': '20140110 [CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/530739/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-testcase.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-report.txt'}, {'name': 'lorex-cve20141201-bo(90223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90223'}, {'name': '101903', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/101903'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1201?


Explain the CVE ID: What does the identifier CVE-2014-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1202.

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.


Provide references for further information: Can you share references or external links related to CVE-2014-1202?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.youtube.com/watch?v=3lCLE64rsc0'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/124773/SoapUI-Remote-Code-Execution.html'}, {'name': '30908', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/30908'}, {'tags': ['x_refsource_MISC'], 'url': 'http://baraktawily.blogspot.com/2014/01/soapui-code-execution-vulnerability-cve.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/SmartBear/soapui/blob/master/RELEASENOTES.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1202?


Explain the CVE ID: What does the identifier CVE-2014-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1203.

The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php.


Provide references for further information: Can you share references or external links related to CVE-2014-1203?

{'name': '20140108 [CVE-2014-1203] Eyou Mail System Remote Code\tExecution', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Jan/32'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1203?


Explain the CVE ID: What does the identifier CVE-2014-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1204.

SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.  NOTE: this can be exploited by unauthenticated remote attackers if the guest user is enabled.


Provide references for further information: Can you share references or external links related to CVE-2014-1204?

{'name': '102568', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102568'}, {'name': '31578', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/31578'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tableausoftware.com/support/releases/812'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.trustwave.com/spiderlabs/advisories/TWSL2014-003.txt'}, {'name': 'tableau-server-cve20141204-sql-injection(90730)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90730'}, {'name': '56620', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56620'}, {'name': '1029706', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029706'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tableausoftware.com/support/releases/8.0.7'}, {'name': '65171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65171'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1204?


Explain the CVE ID: What does the identifier CVE-2014-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1206.

SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2014-1206?

{'name': '64774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64774'}, {'name': '31738', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/31738'}, {'name': '56350', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56350'}, {'name': '20140214 [SWRX-2014-001] Open Web Analytics Pre-Auth SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531105/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secureworks.com/advisories/SWRX-2014-001/SWRX-2014-001.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.openwebanalytics.com/index.php?title=1.5.5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1206?


Explain the CVE ID: What does the identifier CVE-2014-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1207.

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.


Provide references for further information: Can you share references or external links related to CVE-2014-1207?

{'name': '64995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64995'}, {'name': 'vmware-esx-cve20141207-dos(90559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90559'}, {'name': '56499', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56499'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0001.html'}, {'name': '102196', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102196'}, {'name': '1029643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029643'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1207?


Explain the CVE ID: What does the identifier CVE-2014-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1208.

VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.


Provide references for further information: Can you share references or external links related to CVE-2014-1208?

{'name': '56499', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56499'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0001.html'}, {'name': '64994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64994'}, {'name': '1029644', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029644'}, {'name': '102197', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102197'}, {'name': '1029643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029643'}, {'name': 'vmware-esx-cve20141208-dos(90558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90558'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1208?


Explain the CVE ID: What does the identifier CVE-2014-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1209.

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1209?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0003.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1209?


Explain the CVE ID: What does the identifier CVE-2014-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1210.

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.


Provide references for further information: Can you share references or external links related to CVE-2014-1210?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1210?


Explain the CVE ID: What does the identifier CVE-2014-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1211.

Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout.


Provide references for further information: Can you share references or external links related to CVE-2014-1211?

{'name': '102198', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102198'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0001.html'}, {'name': '64993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64993'}, {'name': '1029645', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029645'}, {'name': 'vmware-vcloud-cve20141211-csrf(90560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90560'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1211?


Explain the CVE ID: What does the identifier CVE-2014-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1213.

Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof "ready for update" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.


Provide references for further information: Can you share references or external links related to CVE-2014-1213?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sophos.com/en-us/support/knowledgebase/2300/7200/1031/120401.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html'}, {'name': '20140131 CVE-2014-1213 - Denial of Service in Sophos Anti Virus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/530915/100/0/threaded'}, {'name': '20140131 CVE-2014-1213 - Denial of Service in Sophos Anti Virus', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Feb/1'}, {'name': '102762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102762'}, {'name': '1029713', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029713'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1213/'}, {'name': '65286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65286'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1213?


Explain the CVE ID: What does the identifier CVE-2014-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1214.

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.


Provide references for further information: Can you share references or external links related to CVE-2014-1214?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/91020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1214?


Explain the CVE ID: What does the identifier CVE-2014-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1215.

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry.


Provide references for further information: Can you share references or external links related to CVE-2014-1215?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1215/'}, {'name': '20140218 CVE-2014-1215 - Local Code Execution in CoreFTP Core FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531144/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1215?


Explain the CVE ID: What does the identifier CVE-2014-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1216.

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.


Provide references for further information: Can you share references or external links related to CVE-2014-1216?

{'name': '32568', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/32568'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1216/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=2311'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1216?


Explain the CVE ID: What does the identifier CVE-2014-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1217.

Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1217?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/'}, {'name': '20140423 CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531911/100/0/threaded'}, {'name': '67043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/67043'}, {'name': '20140423 CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Apr/259'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1217?


Explain the CVE ID: What does the identifier CVE-2014-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1219.

CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing characters at the end of this substring, as demonstrated by terminating a session via a modified SSNID parameter to web2edoc/close.htm.


Provide references for further information: Can you share references or external links related to CVE-2014-1219?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1219/'}, {'name': '65537', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65537'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1219?


Explain the CVE ID: What does the identifier CVE-2014-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1222.

Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter in a download action.  NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM.


Provide references for further information: Can you share references or external links related to CVE-2014-1222?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1222/'}, {'name': '20140312 CVE-2014-1222 - Local File Inclusion in Vtiger CRM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531423/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%206.0.0/Add-ons/vtigercrm-600-security-patch1.zip/download'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1222?


Explain the CVE ID: What does the identifier CVE-2014-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1223.

Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2014-1223?

{'name': '56779', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56779'}, {'name': '65739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65739'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1223'}, {'name': '20140221 CVE-2014-1223 - Cross-site Scripting in Telligent Evolution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531223/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1223?


Explain the CVE ID: What does the identifier CVE-2014-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1224.

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.


Provide references for further information: Can you share references or external links related to CVE-2014-1224?

{'name': '56310', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56310'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-002/-rexx-recruitment-cross-site-scripting-in-user-registration'}, {'name': '20140327 [RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/531654/100/0/threaded'}, {'name': '20140327 [RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Mar/389'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1224?


Explain the CVE ID: What does the identifier CVE-2014-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1226.

The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier.  NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876.


Provide references for further information: Can you share references or external links related to CVE-2014-1226?

{'name': '20140603 CVE-2014-1226 s3dvt Root shell (still)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/532278/100/0/threaded'}, {'name': '20140604 CVE-2014-1226 s3dvt Root shell (still)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Jun/12'}, {'name': '[oss-security] 20140603 CVE-2014-1226 s3dvt Root shell (still)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/06/03/13'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1226?


Explain the CVE ID: What does the identifier CVE-2014-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1232.

Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2014-1232?

{'name': '64666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64666'}, {'name': 'foliopress-unspecified-xss(90102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90102'}, {'name': '56261', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56261'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/plugins/foliopress-wysiwyg/changelog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1232?


Explain the CVE ID: What does the identifier CVE-2014-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1233.

The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process.


Provide references for further information: Can you share references or external links related to CVE-2014-1233?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.vapid.dhs.org/advisories/paratrooper-api-key-pingdom.html'}, {'name': '[oss-security] 20140107 paratrooper-pingdom-1.0.0 ruby gem exposes API login credentials', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/01/08/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1233?


Explain the CVE ID: What does the identifier CVE-2014-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1234.

The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process.


Provide references for further information: Can you share references or external links related to CVE-2014-1234?

{'name': '[oss-security] 20140107 Paratrooper-newrelic 1.0.1 Ruby Gem exposes API key', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/01/08/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vapid.dhs.org/advisories/paratrooper-newrelic-api.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-1234?


Explain the CVE ID: What does the identifier CVE-2014-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-1235.

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978.