Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-10016 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:38.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors related to purchase_limit or the (2) name, (3) intl, (4) nocod, or (5) time parameter in an add_delivery_method action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57222 - http://www.securityfocus.com/bid/65954 - http://packetstormsecurity.com/files/125513
p://secunia.com/advisories/57222 - http://www.securityfocus.com/bid/65954 - http://packetstormsecurity.com/files/125513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91541
CVE ID: CVE-2014-10017 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:37.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65954 - http://packetstormsecurity.com/files/125513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91542
CVE ID: CVE-2014-10018 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:38.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65056 - http://www.exploit-db.com/exploits/31087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90642 - http://osvdb.org/102343
CVE ID: CVE-2014-10019 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:37.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID or (2) change the password via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92715
CVE ID: CVE-2014-10020 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:38.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90711 - http://osvdb.org/102458 - http://packetstormsecurity.com/files/124914 - http://www.exploit-db.com/exploits/31142
CVE ID: CVE-2014-10021 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:37.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35543 - http://www.securityfocus.com/bid/71686
CVE ID: CVE-2014-10022 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T23:01:53.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/TS-3223 - http://www.securitytracker.com/id/1031499 - http://mail-archives.apache.org/mod_mbox/trafficserver-users/201412.mbox/browser
CVE ID: CVE-2014-10023 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:37.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.php, or (4) rmv_topic.php in admincp/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102834 - http://www.securityfocus.com/bid/65283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90918 - http://www.exploit-db.com/exploits/31419 - http://osvdb.org/102836 - http://packetstormsecurity.com/
erabilities/90918 - http://www.exploit-db.com/exploits/31419 - http://osvdb.org/102836 - http://packetstormsecurity.com/files/125007 - http://osvdb.org/102837 - http://osvdb.org/102835
CVE ID: CVE-2014-10024 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-17T03:02:34.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/283 - http://www.securityfocus.com/bid/67086
CVE ID: CVE-2014-10025 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T16:12:33.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enable Wireless, (2) MBSSID, (3) BSSID, (4) Hide Access Point, (5) SSID, (6) Country, (7) Channel, (8) Wireless mode, or (9) Max Associated Clients setting via a crafted request to index.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/19 - http://w
ditional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/19 - http://websecurity.com.ua/7179/
CVE ID: CVE-2014-10026 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T17:54:56.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/19 - http://websecurity.com.ua/7179/
CVE ID: CVE-2014-10027 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-17T03:03:31.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change the MAC filter restrict mode, (2) add a MAC address to the filter, or (3) remove a MAC address from the filter via a crafted request to index.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/7215/ - http://seclists.org/fulldisclosure/2014/Nov/100
CVE ID: CVE-2014-10028 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-16T18:43:17.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/7215/ - http://seclists.org/fulldisclosure/2014/Nov/100
CVE ID: CVE-2014-10029 State: PUBLISHED Published: 2015-01-13T11:00:00 Last Updated: 2024-08-06T14:02:37.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://fluxbb.org/forums/viewtopic.php?id=8001 - http://packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.html - http://secunia.com/advisories/59038 - http://seclists.org/fulldisclosure/2014/Nov/73 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98890 - https://fl
http://seclists.org/fulldisclosure/2014/Nov/73 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98890 - https://fluxbb.org/development/core/tickets/990/
CVE ID: CVE-2014-10030 State: PUBLISHED Published: 2015-01-13T11:00:00Z Last Updated: 2024-09-17T00:46:23.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://fluxbb.org/forums/viewtopic.php?id=8001 - https://fluxbb.org/development/core/tickets/961/
CVE ID: CVE-2014-10031 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:37.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID command. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/104071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91833 - http://www.exploit-db.com/exploits/31694
CVE ID: CVE-2014-10032 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:38.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90459 - http://www.exploit-db.com/exploits/30689 - http://osvdb.org/show/osvdb/102207
CVE ID: CVE-2014-10033 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:38.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/31515 - https://github.com/gburton/oscommerce2/commit/e4d90eccd7d9072ebe78da4c38fb048bfe31c902 - http://www.secgeek.net/oscommerce-v2x-sql-injection-vulnerability/ - https://exchange.xforce.i
e78da4c38fb048bfe31c902 - http://www.secgeek.net/oscommerce-v2x-sql-injection-vulnerability/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/91113 - http://osvdb.org/show/osvdb/103365
CVE ID: CVE-2014-10034 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:38.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/103895 - http://couponphp.com/changelog - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/915
ttp://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/91550 - http://www.exploit-db.com/exploits/32037 - http://osvdb.org/show/osvdb/103896 - http://packetstormsecurity.com/files/125480
CVE ID: CVE-2014-10035 State: PUBLISHED Published: 2015-01-13T15:00:00Z Last Updated: 2024-09-16T22:40:29.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to comments_paginate.php or (2) stores_paginate.php or the (3) affiliate_url, (4) description, (5) domain, (6) seo[description], (7) seo[heading], (8) seo[title], (9) seo[keywords], (10) setting[logo], (11) setting[perpage], or (12) setting[sitename] to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - htt
age], or (12) setting[sitename] to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://couponphp.com/changelog - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php - http://secunia.com/advisories/57177 - http://osvdb.org/show/osvdb/103886 - http://osvdb.org/show/osvdb/103897 - http://osvdb.org/show/osvdb/103887 - http://www.exploit-db.com/exploits/32037 - http://packetstormsecurity.com/files/125480
CVE ID: CVE-2014-10036 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:37.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary web script or HTML via the cameFromUrl parameter to feed/generateFeedUrl.html. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/critical-xss-vulnerabilities-in-teamcity/ - http://confluence.jetbrains.com/display/TCD8/What%27s+New+in+TeamCity+8.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91768 - http://secunia.com/advisories/57221
CVE ID: CVE-2014-10037 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:38.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90582 - http://www.exploit-db.com/exploits/30865 - http://osvdb.org/show/osvdb/102204
CVE ID: CVE-2014-10038 State: PUBLISHED Published: 2015-01-13T15:00:00 Last Updated: 2024-08-06T14:02:38.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124801 - http://www.exploit-db.com/exploits/30872 - http://osvdb.org/show/osvdb/102180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90528
CVE ID: CVE-2014-10039 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:30:33.419Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Lack of enforcement of proper sequence of calls in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qsee_app_entry_return() without first calling qsee_app_entry() will cause the stack to be restored to an older state resulting in a return to an unexpected location. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103
Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10043 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:32:27.413Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-Read in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, and SD 800, while reading PlayReady rights string information from command buffer (which is sent from non-secure side), if length of rights string is very large, a buffer over read occurs, exposing TZ App memory to non-secure side. Additional Analyst Notes: - CVE Program Container: References: - https:/
urs, exposing TZ App memory to non-secure side. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10044 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:47:20.747Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Validation of Array Index in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10045 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T21:08:07.842Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Program Headers in Boot Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 820, and SDX20, buffer overflow vulnerability exist in Sahara boot when program header are parsing. Additional Analyst Notes: - CVE Program Container: References: - h
exist in Sahara boot when program header are parsing. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10046 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:02:07.816Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Use after free vulnerability while handling dual IP data call Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the corresponding active timer. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
dditional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10047 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:57:05.013Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Information exposure vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10048 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:26:11.677Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper validation of Array Index in Services. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, while setting the offsets, time-services allows the user to set bases greater than valid base value which will lead to array in
etting the offsets, time-services allows the user to set bases greater than valid base value which will lead to array index out-of-bound. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10049 State: REJECTED Published: 2019-08-30T15:01:22 Last Updated: 2019-08-30T15:01:22 Description: No description available.
CVE ID: CVE-2014-10050 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T21:57:56.647Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper access control vulnerability in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM845, and SDM660, access control collision vulnerability when accessing the replay protected memory block. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10051 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:02:05.185Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Cache side-channel vulnerability in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, and SDX20, after loading a dynamically loaded code section, I-Cache is not invalidated, which could lead to executing code from stale cache lines. Additional Analyst Notes: - CVE Program Container: References: - https://sourc
to executing code from stale cache lines. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-10052 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:53:02.233Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear, Small Cell SoC Problem Types: Information Exposure in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SD 835, and SDX20, the reserved memory of TZ subsystem (like TZ apps and some PIL image subsystem) is not c
808, SD 810, SD 835, and SDX20, the reserved memory of TZ subsystem (like TZ apps and some PIL image subsystem) is not cleared after being used. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671