CVE-2014-2887

CVE-2014-2887 is rejected/not used; this candidate was withdrawn by its CNA.

CVE-2014-2887

...

CVE-2014-1926

CVE-2014-1926 is rejected/not used as stated in the Initial Description.

CVE-2014-1926

...

CVE-2014-0024

CVE-2014-0024 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2014-0024

...

CVE-2014-8164

creationtimestamp| type| source ---|---|--- 2022-07-07 00:14:45+00:00| seen| https://t.me/cibsecurity/45714...

CVE-2014-8164

CVE-2014-8164 describes an insecure certificate verification configuration (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) that may enable verification bypass in Red Hat CloudForms 5.x. The connected documents corroborate that the issue affects the CloudForms Management Engine and related componen...

CVE-2014-3648

creationtimestamp| type| source ---|---|--- 2022-07-01 18:39:39+00:00| seen| https://t.me/cibsecurity/45478...

CVE-2014-3650

creationtimestamp| type| source ---|---|--- 2022-07-01 18:39:38+00:00| seen| https://t.me/cibsecurity/45477...

CVE-2014-3648

The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can't be reached...

CVE-2014-3650

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2014-3648

The CVE-2014-3648 issue concerns the simplepush server, where notifications are pushed for each registered installation using a deviceToken supplied by the user. The vulnerability arises because a bogus application can register with bad deviceTokens or point to arbitrary HTTP endpoints. This can ...

CVE-2014-0156

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

CVE-2014-0156

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

CVE-2014-0156

CVE-2014-0156 corresponds to an OS command injection in the Ruby gem awesome_spawn (ManageIQ). The vulnerability allows an attacker to execute arbitrary commands when untrusted input is passed as command arguments to AwesomeSpawn.run, via the underlying Kernel.spawn usage. The issue affects versi...

CVE-2014-0068

CVE-2014-0068 concerns Red Hat OpenShift node-utils, where the watchman component creates /var/run/watchman.pid and /var/log/watchman.ouput with world-writable permissions. This insecure file mode could allow any local user to write to these files, potentially altering behavior of the watchman se...

CVE-2014-0068

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission...

CVE-2014-7969

creationtimestamp| type| source ---|---|--- 2022-06-20 19:53:12+00:00| published-proof-of-concept| https://t.me/LeakingXTeam/20993 2022-06-20 19:53:12+00:00| published-proof-of-concept| https://t.me/spammerspacer/33792 2022-06-20 19:53:12+00:00| published-proof-of-concept|...

CVE-2014-9473

creationtimestamp| type| source ---|---|--- 2022-06-20 19:53:12+00:00| published-proof-of-concept| https://t.me/LeakingXTeam/20993 2022-06-20 19:53:12+00:00| published-proof-of-concept| https://t.me/spammerspacer/33792 2022-06-20 19:53:12+00:00| published-proof-of-concept|...