deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-2846
Published: 2014-04-28
Description: Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash dot slash) in the lang Cookie parameter, as demonstrated by a request to login/doLogin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2014/Apr/257; http://wiki.arkeia.com/index.php/Path_Traversal_Remote_Code_Execution; http://www.securityfocus.com/archive/1/531910/100/0/threaded
CVE: CVE-2014-2980
Published: 2014-04-28
Description: Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/oss-sec/2014/q2/143; http://seclists.org/oss-sec/2014/q2/152; http://secunia.com/advisories/58104
CVE: CVE-2014-2986
Published: 2014-04-28
Description: The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service (NULL pointer dereference and host crash) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2014/04/23/3; http://www.openwall.com/lists/oss-security/2014/04/23/4; http://www.openwall.com/lists/oss-security/2014/04/23/5
CVE: CVE-2014-3008
Published: 2014-04-28
Description: Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2014/Apr/204; http://secunia.com/advisories/58001; http://www.exploit-db.com/exploits/32885
CVE: CVE-2014-0112
Published: 2014-04-29
Description: ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN19294237/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045; http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
CVE: CVE-2014-0113
Published: 2014-04-29
Description: CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/59178; http://www-01.ibm.com/support/docview.wss?uid=swg21676706; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0515
Published: 2014-04-29
Description: Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/flash-player/apsb14-13.html; http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html
CVE: CVE-2014-1841
Published: 2014-04-29
Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html; http://www.exploit-db.com/exploits/31579; http://www.osvdb.org/103195
CVE: CVE-2014-1842
Published: 2014-04-29
Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html; http://www.exploit-db.com/exploits/31579; http://www.osvdb.org/103196
CVE: CVE-2014-1843
Published: 2014-04-29
Description: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html; http://www.exploit-db.com/exploits/31579; http://www.osvdb.org/103197
CVE: CVE-2014-2180
Published: 2014-04-29
Description: The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2180; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2180
CVE: CVE-2014-2182
Published: 2014-04-29
Description: Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet, aka Bug ID CSCun45520.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2182; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2182
CVE: CVE-2014-2183
Published: 2014-04-29
Description: The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2183; http://tools.cisco.com/security/center/viewAlert.x?alertId=33971; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2183
CVE: CVE-2014-2184
Published: 2014-04-29
Description: The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2184; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2184
CVE: CVE-2014-2185
Published: 2014-04-29
Description: The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2185; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2185
CVE: CVE-2013-7063
Published: 2014-04-29
Description: The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/12/06/7; http://www.openwall.com/lists/oss-security/2013/12/12/1; https://drupal.org/node/2140097
CVE: CVE-2013-7064
Published: 2014-04-29
Description: Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2013/12/06/7; http://www.openwall.com/lists/oss-security/2013/12/12/1; https://drupal.org/node/2139875
CVE: CVE-2013-7065
Published: 2014-04-29
Description: The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/12/06/7; http://www.openwall.com/lists/oss-security/2013/12/12/1; https://drupal.org/node/2140209
CVE: CVE-2013-7066
Published: 2014-04-29
Description: The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: https://drupal.org/node/2140229; https://drupal.org/node/2140237; https://drupal.org/node/2140229
CVE: CVE-2013-7068
Published: 2014-04-29
Description: The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/12/06/7; http://www.openwall.com/lists/oss-security/2013/12/12/1; https://drupal.org/node/2140209
CVE: CVE-2013-7111
Published: 2014-04-29
Description: The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2013/12/14/2; http://www.openwall.com/lists/oss-security/2013/12/15/5; http://www.vapid.dhs.org/advisories/bio-basespace-sdk.html
CVE: CVE-2013-7134
Published: 2014-04-29
Description: Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://www.openwall.com/lists/oss-security/2013/12/16/3; http://www.openwall.com/lists/oss-security/2013/12/18/1; https://github.com/phusion/juvia/issues/55
CVE: CVE-2013-7220
Published: 2014-04-29
Description: js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
CVSS Score: 4.6 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2013/12/27/4; http://www.openwall.com/lists/oss-security/2013/12/27/6; http://www.openwall.com/lists/oss-security/2013/12/27/8
CVE: CVE-2013-7221
Published: 2014-04-29
Description: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/12/27/4; http://www.openwall.com/lists/oss-security/2013/12/27/8; https://bugzilla.gnome.org/show_bug.cgi?id=708313
CVE: CVE-2013-7234
Published: 2014-04-29
Description: Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt; http://seclists.org/fulldisclosure/2013/Dec/83; http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
CVE: CVE-2013-7235
Published: 2014-04-29
Description: Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt; http://seclists.org/fulldisclosure/2013/Dec/83; http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
CVE: CVE-2013-7236
Published: 2014-04-29
Description: Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2013/Dec/83; http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/; http://www.openwall.com/lists/oss-security/2013/12/30/1
CVE: CVE-2013-7259
Published: 2014-04-29
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/execute_script or (2) db/manage/server/console/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-352
References: http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html; http://www.openwall.com/lists/oss-security/2014/01/03/3; http://www.openwall.com/lists/oss-security/2014/01/03/8
CVE: CVE-2013-7273
Published: 2014-04-29
Description: GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.
CVSS Score: 2.1 (LOW)
References: http://www.openwall.com/lists/oss-security/2014/01/07/10; http://www.openwall.com/lists/oss-security/2014/01/07/16; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338
CVE: CVE-2013-7284
Published: 2014-04-29
Description: The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://seclists.org/oss-sec/2014/q1/56; http://seclists.org/oss-sec/2014/q1/62; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789
CVE: CVE-2013-7302
Published: 2014-04-29
Description: Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://drupal.org/node/2158565; https://drupal.org/node/2158567; https://drupal.org/node/2158651
CVE: CVE-2014-0088
Published: 2014-04-29
Description: The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html; http://www.securitytracker.com/id/1030150; http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html
CVE: CVE-2014-2853
Published: 2014-04-29
Description: Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-April/000149.html; http://secunia.com/advisories/58262; http://www.securityfocus.com/bid/67068
CVE: CVE-2013-1804
Published: 2014-04-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (2) user_list or (3) user_types parameter to messages.php; (4) message parameter to infusions/shoutbox_panel/shoutbox_admin.php; (5) message parameter to administration/news.php; (6) panel_list parameter to administration/panel_editor.php; (7) HTTP User Agent string to administration/phpinfo.php; (8) "__BBCODE__" parameter to administration/bbcodes.php; errorMessage parameter to (9) article_cats.php, (10) download_cats.php, (11) news_cats.php, or (12) weblink_cats.php in administration/, when error is 3; or (13) body or (14) body2 parameter to administration/articles.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/90707; http://osvdb.org/90708; http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html
CVE: CVE-2013-7372
Published: 2014-04-29
Description: The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture (JCA) in Android before 4.4 and other products, when no seed is provided by the user, uses an incorrect offset value, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the resulting PRNG predictability, as exploited in the wild against Bitcoin wallet applications in August 2013.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html; http://www.nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf; https://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java
CVE: CVE-2013-7373
Published: 2014-04-29
Description: Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html; http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/; http://marc.info/?l=openssl-dev&m=[PII_REDACTED]8150&w=2
CVE: CVE-2014-0114
Published: 2014-04-30
Description: Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://advisories.mageia.org/MGASA-2014-0219.html; http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html; http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt
CVE: CVE-2014-0363
Published: 2014-04-30
Description: The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-295
References: http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released; http://issues.igniterealtime.org/browse/SMACK-410; http://rhn.redhat.com/errata/RHSA-2015-1176.html
CVE: CVE-2014-0364
Published: 2014-04-30
Description: The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-345
References: http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released; http://rhn.redhat.com/errata/RHSA-2015-1176.html; http://secunia.com/advisories/59290
CVE: CVE-2014-1518
Published: 2014-04-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html; http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html
CVE: CVE-2014-1519
Published: 2014-04-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
CVE: CVE-2014-1520
Published: 2014-04-30
Description: maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-269
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html; http://packetstormsecurity.com/files/161696/Mozilla-Arbitrary-Code-Execution-Privilege-Escalation.html
CVE: CVE-2014-1522
Published: 2014-04-30
Description: The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.
CVSS Score: 9.3 (HIGH)
CWE: CWE-125
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html; http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
CVE: CVE-2014-1523
Published: 2014-04-30
Description: Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html; http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html