deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3828
Published: 2014-10-23
Description: Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/graphs/common/makeXML_ListMetrics.php, (2) the sid parameter to views/graphs/GetXmlTree.php, (3) the session_id parameter to views/graphs/graphStatus/displayServiceStatus.php, (4) the mnftr_id parameter to configuration/configObject/traps/GetXMLTrapsForVendor.php, or (5) the index parameter to common/javascript/commandGetArgs/cmdGetExample.php in include/.
CVSS Score: 10.0 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2014/Oct/78; http://www.kb.cert.org/vuls/id/298796; http://www.securityfocus.com/bid/70648
CVE: CVE-2014-3829
Published: 2014-10-23
Description: displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) template_id parameter, related to the command_line variable.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://seclists.org/fulldisclosure/2014/Oct/78; http://www.kb.cert.org/vuls/id/298796; https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.5/centreon-2.5.3.html
CVE: CVE-2014-4766
Published: 2014-10-23
Description: IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback (RAP) file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/61847; http://www-01.ibm.com/support/docview.wss?uid=swg21687361; https://exchange.xforce.ibmcloud.com/vulnerabilities/94793
CVE: CVE-2014-0619
Published: 2014-10-23
Description: Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/97658; http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html
CVE: CVE-2014-2230
Published: 2014-10-23
Description: Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html; http://seclists.org/fulldisclosure/2014/Oct/72; http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
CVE: CVE-2014-7281
Published: 2014-10-23
Description: Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to goform/SysToolReboot.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/show/osvdb/113308; http://packetstormsecurity.com/files/128671/Tenda-A32-Cross-Site-Request-Forgery.html; http://www.exploit-db.com/exploits/34969
CVE: CVE-2014-7292
Published: 2014-10-23
Description: Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html; http://seclists.org/fulldisclosure/2014/Oct/91; http://www.securityfocus.com/bid/70654
CVE: CVE-2014-8071
Published: 2014-10-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the (1) givenName, (2) familyName, (3) address1, or (4) address2 parameter to registrationapp/registerPatient.page; the (5) comment parameter to allergyui/allergy.page; the (6) w10 parameter to htmlformentryui/htmlform/enterHtmlForm/submit.action; the (7) HTTP Referer Header to login.htm; the (8) returnUrl parameter to htmlformentryui/htmlform/enterHtmlFormWithStandardUi.page or (9) coreapps/mergeVisits.page; or the (10) visitId parameter to htmlformentryui/htmlform/enterHtmlFormWithSimpleUi.page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html; http://www.securityfocus.com/bid/70664; https://exchange.xforce.ibmcloud.com/vulnerabilities/97690
CVE: CVE-2014-8072
Published: 2014-10-23
Description: The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html; http://www.securityfocus.com/bid/70664; https://exchange.xforce.ibmcloud.com/vulnerabilities/97693
CVE: CVE-2014-8073
Published: 2014-10-23
Description: Cross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of administrators for requests that add a new user via a Save User action to admin/users/user.form.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html; http://www.securityfocus.com/bid/70664; https://exchange.xforce.ibmcloud.com/vulnerabilities/97692
CVE: CVE-2014-7298
Published: 2014-10-24
Description: adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://twitter.com/travemme/statuses/[PII_REDACTED]71564544; http://www.centrify.com/support/announcements.asp#20141014; https://exploithub.com/centrify-data-leakage.html
CVE: CVE-2014-8346
Published: 2014-10-24
Description: The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://www.youtube.com/watch?v=Q3adkpOEjyI; https://www.youtube.com/watch?v=YufuOYQoDOY; https://www.youtube.com/watch?v=Q3adkpOEjyI
CVE: CVE-2014-2021
Published: 2014-10-25
Description: Cross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier, and 5.0.x through 5.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted XMLRPC API request, as demonstrated using the client name.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/128691/vBulletin-5.x-4.x-Persistent-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2014/Oct/55; http://seclists.org/fulldisclosure/2014/Oct/63
CVE: CVE-2014-3604
Published: 2014-10-25
Description: Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://juliusdavies.ca/svn/viewvc.cgi/not-yet-commons-ssl?view=rev&revision=172; http://rhn.redhat.com/errata/RHSA-2015-1888.html; https://bugzilla.redhat.com/show_bug.cgi?id=1131803
CVE: CVE-2014-6230
Published: 2014-10-25
Description: WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2014/Sep/60; https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations/; https://wordpress.org/plugins/wp-ban/changelog/
CVE: CVE-2014-6251
Published: 2014-10-25
Description: Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2014/Oct/29; http://seclists.org/fulldisclosure/2014/Oct/29
CVE: CVE-2014-7180
Published: 2014-10-25
Description: Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://docs.electric-cloud.com/commander_doc/5_0_3/HTML5/ReleaseNotes/commander_releasenotes.htm; http://packetstormsecurity.com/files/128819/ElectricCommander-4.2.4.71224-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2014/Oct/104
CVE: CVE-2014-8760
Published: 2014-10-25
Description: ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://advisories.mageia.org/MGASA-2014-0417.html; http://mail.jabber.org/pipermail/operators/2014-October/002438.html; http://seclists.org/oss-sec/2014/q4/312
CVE: CVE-2014-3409
Published: 2014-10-25
Description: The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/61799; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409; http://tools.cisco.com/security/center/viewAlert.x?alertId=36184
CVE: CVE-2014-4620
Published: 2014-10-25
Description: The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html; http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html; http://secunia.com/advisories/61952
CVE: CVE-2014-4623
Published: 2014-10-25
Description: EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html; http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html; http://www.securityfocus.com/bid/70732
CVE: CVE-2014-4624
Published: 2014-10-25
Description: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2014-10/0147.html; http://packetstormsecurity.com/files/128843/EMC-Avamar-Sensitive-Information-Disclosure.html; http://packetstormsecurity.com/files/128850/VMware-Security-Advisory-2014-0011.html
CVE: CVE-2014-6151
Published: 2014-10-25
Description: CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/61899; http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417; http://www-01.ibm.com/support/docview.wss?uid=swg21687541
CVE: CVE-2014-6152
Published: 2014-10-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Integrated Portal (TIP) 2.2.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/61899; http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417; http://www-01.ibm.com/support/docview.wss?uid=swg21687541
CVE: CVE-2014-6611
Published: 2014-10-25
Description: The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/61013; http://www.blackberry.com/btsc/kb36360; http://secunia.com/advisories/61013
CVE: CVE-2014-3636
Published: 2014-10-25
Description: D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
CVSS Score: 1.9 (LOW)
CWE: CWE-399
References: http://advisories.mageia.org/MGASA-2014-0395.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html; http://secunia.com/advisories/61378
CVE: CVE-2014-1927
Published: 2014-10-25
Description: The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://seclists.org/oss-sec/2014/q1/245; http://seclists.org/oss-sec/2014/q1/294; http://secunia.com/advisories/56616
CVE: CVE-2014-1928
Published: 2014-10-25
Description: The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/oss-sec/2014/q1/246; http://seclists.org/oss-sec/2014/q1/294; http://secunia.com/advisories/56616
CVE: CVE-2014-1929
Published: 2014-10-25
Description: python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/oss-sec/2014/q1/245; http://seclists.org/oss-sec/2014/q1/335; http://secunia.com/advisories/59031
CVE: CVE-2014-5075
Published: 2014-10-25
Description: The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://op-co.de/CVE-2014-5075.html; http://rhn.redhat.com/errata/RHSA-2015-1176.html; http://secunia.com/advisories/59915
CVE: CVE-2013-4594
Published: 2014-10-25
Description: The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by anonymous users, which allows remote anonymous users to use the payment of other anonymous users when submitting a form that requires payment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://seclists.org/oss-sec/2013/q4/317; http://secunia.com/advisories/55431; https://drupal.org/node/2128345
CVE: CVE-2014-0476
Published: 2014-10-25
Description: The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable.  NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: http://osvdb.org/show/osvdb/107710; http://packetstormsecurity.com/files/134484/Chkrootkit-Local-Privilege-Escalation.html; http://www.chkrootkit.org/
CVE: CVE-2014-3137
Published: 2014-10-25
Description: Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2014/dsa-2948; http://www.openwall.com/lists/oss-security/2014/05/01/15; https://bugzilla.redhat.com/show_bug.cgi?id=1093255
CVE: CVE-2013-1641
Published: 2014-10-26
Description: Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the selitems[] parameter in a download_selected action to index.php.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/55725; https://exchange.xforce.ibmcloud.com/vulnerabilities/89059; https://github.com/realtimeprojects/quixplorer
CVE: CVE-2014-2987
Published: 2014-10-26
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8[PII_REDACTED]6, and EGroupware before 14.1 beta allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an admin.uiaccounts.add_user action to index.php or (2) modify settings via the newsettings parameter in an admin.uiconfig.index action to index.php.  NOTE: vector 2 can be used to execute arbitrary PHP code by leveraging CVE-2014-2988.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://advisories.mageia.org/MGASA-2014-0221.html; http://secunia.com/advisories/58346; http://www.egroupware.org/changelog
CVE: CVE-2014-4812
Published: 2014-10-26
Description: The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.
CVSS Score: 1.8 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21686844; https://exchange.xforce.ibmcloud.com/vulnerabilities/95388; http://www-01.ibm.com/support/docview.wss?uid=swg21686844
CVE: CVE-2014-6099
Published: 2014-10-26
Description: The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT03935; http://www-01.ibm.com/support/docview.wss?uid=swg1IT03936; https://exchange.xforce.ibmcloud.com/vulnerabilities/96004
CVE: CVE-2014-6133
Published: 2014-10-26
Description: IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors.
CVSS Score: 2.1 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LI78229; http://www-01.ibm.com/support/docview.wss?uid=swg21686801; https://exchange.xforce.ibmcloud.com/vulnerabilities/96813
CVE: CVE-2014-6037
Published: 2014-10-26
Description: Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. (dot dot) sequences in its name, then accessing the executable via a direct request to the file under the web root. Fixed in Build 11072.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/show/osvdb/110642; http://packetstormsecurity.com/files/128102/ManageEngine-EventLog-Analyzer-9.9-Authorization-Code-Execution.html; http://seclists.org/fulldisclosure/2014/Aug/86
CVE: CVE-2013-6796
Published: 2014-10-26
Description: The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/124054; http://www.exploit-db.com/exploits/29706; http://www.osvdb.org/100007
CVE: CVE-2013-7408
Published: 2014-10-26
Description: F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html; http://www.securityfocus.com/bid/68792; http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html
CVE: CVE-2014-3520
Published: 2014-10-26
Description: OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://lists.openstack.org/pipermail/openstack-announce/2014-July/000248.html; http://secunia.com/advisories/59426; https://bugs.launchpad.net/keystone/+bug/1331912
CVE: CVE-2014-5148
Published: 2014-10-26
Description: Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," returns to an instruction of the trap handler for kernel space faults instead of an instruction that is associated with faults in 64-bit userspace, which allows local guest users to cause a denial of service (crash) and possibly gain privileges via a crafted process.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/59934; http://www.securityfocus.com/bid/69189; http://www.securitytracker.com/id/1030725
CVE: CVE-2014-5520
Published: 2014-10-26
Description: SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128030/XRMS-Blind-SQL-Injection-Command-Execution.html; http://seclists.org/fulldisclosure/2014/Aug/78; http://www.exploit-db.com/exploits/34452