NVD

Id
85234  
Name
CVE-2014-3887  
Description
Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-13  
Modified Date
2017-04-20  
Seq
2014-3887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415612 85234 CVE-2016-10254 [oss-security] 20170322 Re: elfutils: memory allocation failure in allocate_elf (common.h)  View
415613 85234 CVE-2016-10254 https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/  View
415614 85234 CVE-2016-10254 [elfutils-devel] 20161024 [PATCH] libelf: Always set ELF maxsize when reading an ELF file for sanity checks.  View
415615 85234 CVE-2016-10254 [oss-security] 20170322 Re: elfutils: memory allocation failure in allocate_elf (common.h)  View
415616 85234 CVE-2016-10254 https://blogs.gentoo.org/ago/2016/11/04/elfutils-memory-allocation-failure-in-allocate_elf-common-h/  View
415617 85234 CVE-2016-10254 [elfutils-devel] 20161024 [PATCH] libelf: Always set ELF maxsize when reading an ELF file for sanity checks.  View
418379 85234 CVE-2017-3574 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418380 85234 CVE-2017-3574 97866  View
418381 85234 CVE-2017-3574 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418382 85234 CVE-2017-3574 97866  View

Related JVN