deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3300
Published: 2014-07-07
Description: The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/59556; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm; http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
CVE: CVE-2014-3308
Published: 2014-07-07
Description: Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/58869; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308; http://tools.cisco.com/security/center/viewAlert.x?alertId=34843
CVE: CVE-2014-3482
Published: 2014-07-07
Description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://openwall.com/lists/oss-security/2014/07/02/5; http://rhn.redhat.com/errata/RHSA-2014-0876.html; http://secunia.com/advisories/59973
CVE: CVE-2014-3483
Published: 2014-07-07
Description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://openwall.com/lists/oss-security/2014/07/02/5; http://rhn.redhat.com/errata/RHSA-2014-0877.html; http://secunia.com/advisories/59971
CVE: CVE-2013-7389
Published: 2014-07-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid parameter to parentalcontrols/bind.php, (2) RESULT parameter to info.php, or (3) receiver parameter to bsc_sms_send.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/show/osvdb/95910; http://osvdb.org/show/osvdb/95952; http://osvdb.org/show/osvdb/95953
CVE: CVE-2014-0034
Published: 2014-07-07
Description: The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://cxf.apache.org/security-advisories.data/CVE-2014-0034.txt.asc; http://rhn.redhat.com/errata/RHSA-2014-0797.html; http://rhn.redhat.com/errata/RHSA-2014-0798.html
CVE: CVE-2014-0035
Published: 2014-07-07
Description: The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://cxf.apache.org/security-advisories.data/CVE-2014-0035.txt.asc; http://rhn.redhat.com/errata/RHSA-2014-0797.html; http://rhn.redhat.com/errata/RHSA-2014-0798.html
CVE: CVE-2014-0176
Published: 2014-07-07
Description: Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2014-0816.html; http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE: CVE-2014-0180
Published: 2014-07-07
Description: The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2014-0816.html; http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE: CVE-2014-0184
Published: 2014-07-07
Description: Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-0816.html; http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE: CVE-2014-0248
Published: 2014-07-07
Description: org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2014-0785.html; http://rhn.redhat.com/errata/RHSA-2014-0791.html; http://rhn.redhat.com/errata/RHSA-2014-0792.html
CVE: CVE-2014-3481
Published: 2014-07-07
Description: org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2014-0797.html; http://rhn.redhat.com/errata/RHSA-2014-0798.html; http://rhn.redhat.com/errata/RHSA-2014-0799.html
CVE: CVE-2014-3486
Published: 2014-07-07
Description: The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://rhn.redhat.com/errata/RHSA-2014-0816.html; http://www.securityfocus.com/bid/68300; https://bugzilla.redhat.com/show_bug.cgi?id=1107528
CVE: CVE-2014-3489
Published: 2014-07-07
Description: lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-0816.html; http://www.securityfocus.com/bid/68299; http://rhn.redhat.com/errata/RHSA-2014-0816.html
CVE: CVE-2014-4646
Published: 2014-07-07
Description: Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/59494; http://www.foxitsoftware.com/support/security_bulletins.php#FRD-20; http://www.zerodayinitiative.com/advisories/ZDI-14-214
CVE: CVE-2014-4722
Published: 2014-07-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127295/OCS-Inventory-NG-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/532664/100/0/threaded; http://www.securityfocus.com/bid/68292
CVE: CVE-2014-4723
Published: 2014-07-07
Description: Cross-site scripting (XSS) vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127293/WordPress-Easy-Banners-1.4-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/127293/WordPress-Easy-Banners-1.4-Cross-Site-Scripting.html
CVE: CVE-2014-4724
Published: 2014-07-07
Description: Cross-site scripting (XSS) vulnerability in the Custom Banners plugin 1.2.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_banners_registered_name parameter to wp-admin/options.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127291/WordPress-Custom-Banners-1.2.2.2-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/68279; http://packetstormsecurity.com/files/127291/WordPress-Custom-Banners-1.2.2.2-Cross-Site-Scripting.html
CVE: CVE-2014-3540
Published: 2014-07-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0114.  Reason: This candidate is a duplicate of CVE-2014-0114.  CVE abstraction content decisions did not require a second ID.  Notes: All CVE users should reference CVE-2014-0114 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-2510
Published: 2014-07-08
Description: The JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before P28, and 6.7 SP2 before P15, as used in My Documentum for Desktop, My Documentum for Microsoft Outlook, and CenterStage, allows remote authenticated users to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2014-07/0025.html; http://secunia.com/advisories/59773; http://www.securityfocus.com/bid/68434
CVE: CVE-2014-2513
Published: 2014-07-08
Description: EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2014-07/0024.html; http://secunia.com/advisories/59757; http://www.securityfocus.com/bid/68435
CVE: CVE-2014-2514
Published: 2014-07-08
Description: EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2014-07/0024.html; http://secunia.com/advisories/59757; http://www.securityfocus.com/bid/68436
CVE: CVE-2014-2956
Published: 2014-07-08
Description: ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/960193; http://www.kb.cert.org/vuls/id/960193
CVE: CVE-2014-1767
Published: 2014-07-08
Description: Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-415
References: http://secunia.com/advisories/59778; http://www.securityfocus.com/bid/68394; http://www.zerodayinitiative.com/advisories/ZDI-14-220/
CVE: CVE-2014-1824
Published: 2014-07-08
Description: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (aka .JNT) file, aka "Windows Journal Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/59776; http://www.securityfocus.com/bid/68396; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-038
CVE: CVE-2014-2780
Published: 2014-07-08
Description: DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges by leveraging control over a low-integrity process to execute a crafted application, aka "DirectShow Elevation of Privilege Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/532800/100/0/threaded; http://www.securityfocus.com/bid/68392; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-041
CVE: CVE-2014-2781
Published: 2014-07-08
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly restrict the exchange of keyboard and mouse data between programs at different integrity levels, which allows attackers to bypass intended access restrictions by leveraging control over a low-integrity process to launch the On-Screen Keyboard (OSK) and then upload a crafted application, aka "On-Screen Keyboard Elevation of Privilege Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/68397; http://www.securitytracker.com/id/1030535; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-039
CVE: CVE-2014-2783
Published: 2014-07-08
Description: Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka "Extended Validation (EV) Certificate Security Feature Bypass Vulnerability."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68391; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2785
Published: 2014-07-08
Description: Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68369; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2786
Published: 2014-07-08
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2792 and CVE-2014-2813.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68371; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2787
Published: 2014-07-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2790, CVE-2014-2802, and CVE-2014-2806.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68372; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2788
Published: 2014-07-08
Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2794.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68373; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2789
Published: 2014-07-08
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2795, CVE-2014-2798, and CVE-2014-2804.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68374; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2790
Published: 2014-07-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2802, and CVE-2014-2806.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68375; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2791
Published: 2014-07-08
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68376; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2792
Published: 2014-07-08
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2786 and CVE-2014-2813.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68377; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2794
Published: 2014-07-08
Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2788.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68378; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2795
Published: 2014-07-08
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2789, CVE-2014-2798, and CVE-2014-2804.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68379; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2797
Published: 2014-07-08
Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68380; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2798
Published: 2014-07-08
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2789, CVE-2014-2795, and CVE-2014-2804.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68381; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2800
Published: 2014-07-08
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2807 and CVE-2014-2809.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68382; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2801
Published: 2014-07-08
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68383; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2802
Published: 2014-07-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2806.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68384; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2803
Published: 2014-07-08
Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68385; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2804
Published: 2014-07-08
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2789, CVE-2014-2795, and CVE-2014-2798.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68386; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2806
Published: 2014-07-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2802.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68387; http://www.securitytracker.com/id/1030532
CVE: CVE-2014-2807
Published: 2014-07-08
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2800 and CVE-2014-2809.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/59775; http://www.securityfocus.com/bid/68388; http://www.securitytracker.com/id/1030532