deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-5302
Published: 2014-08-21
Description: Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.osvdb.org/71878; https://code.google.com/p/timthumb/source/detail?r=88; http://www.osvdb.org/71878
CVE: CVE-2010-5303
Published: 2014-08-21
Description: Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://code.google.com/p/timthumb/source/detail?r=88; https://code.google.com/p/timthumb/source/detail?r=88
CVE: CVE-2014-5385
Published: 2014-08-21
Description: com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2014/Jul/38; http://www.securityfocus.com/archive/1/532726/100/0/threaded; http://seclists.org/fulldisclosure/2014/Jul/38
CVE: CVE-2014-0965
Published: 2014-08-22
Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI11434; http://www-01.ibm.com/support/docview.wss?uid=swg21676091; http://www-01.ibm.com/support/docview.wss?uid=swg21676092
CVE: CVE-2014-3022
Published: 2014-08-22
Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI09594; http://www-01.ibm.com/support/docview.wss?uid=swg21676091; http://www-01.ibm.com/support/docview.wss?uid=swg21676092
CVE: CVE-2014-3070
Published: 2014-08-22
Description: The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765; http://www-01.ibm.com/support/docview.wss?uid=swg21681249; http://www.securityfocus.com/bid/69296
CVE: CVE-2014-3083
Published: 2014-08-22
Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI17768; http://www-01.ibm.com/support/docview.wss?uid=swg21681249; http://www.securityfocus.com/bid/69298
CVE: CVE-2014-3089
Published: 2014-08-22
Description: The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21681554; http://www.securityfocus.com/bid/69300; https://exchange.xforce.ibmcloud.com/vulnerabilities/94255
CVE: CVE-2014-3436
Published: 2014-08-22
Description: Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/69259; http://www.securitytracker.com/id/1030761; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140821_00
CVE: CVE-2014-4764
Published: 2014-08-22
Description: IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors.
CVSS Score: 7.1 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI21189; http://www-01.ibm.com/support/docview.wss?uid=swg21681249; http://www.securityfocus.com/bid/69301
CVE: CVE-2014-4767
Published: 2014-08-22
Description: IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI21284; http://www-01.ibm.com/support/docview.wss?uid=swg21681249; http://www.securityfocus.com/bid/69297
CVE: CVE-2014-5273
Published: 2014-08-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html; http://secunia.com/advisories/60397; http://www.phpmyadmin.net/home_page/security/PMASA-2014-8.php
CVE: CVE-2014-5274
Published: 2014-08-22
Description: Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html; http://secunia.com/advisories/60397; http://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php
CVE: CVE-2014-0232
Published: 2014-08-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ofbiz.apache.org/download.html#vulnerabilities; http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.html; http://seclists.org/oss-sec/2014/q3/405
CVE: CVE-2014-3525
Published: 2014-08-22
Description: Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.
CVSS Score: 10.0 (HIGH)
References: http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07%40yahoo-inc.com%3E; http://secunia.com/advisories/60375; https://exchange.xforce.ibmcloud.com/vulnerabilities/95495
CVE: CVE-2014-3594
Published: 2014-08-22
Description: Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html; http://rhn.redhat.com/errata/RHSA-2014-1335.html; http://rhn.redhat.com/errata/RHSA-2014-1336.html
CVE: CVE-2014-4197
Published: 2014-08-22
Description: Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CARDS or (2) XACTION parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/59319; https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt; http://secunia.com/advisories/59319
CVE: CVE-2014-5097
Published: 2014-08-22
Description: Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/127943/ArticleFR-3.0.4-SQL-Injection.html; http://www.securityfocus.com/archive/1/533183/100/0/threaded; http://www.securityfocus.com/bid/69307
CVE: CVE-2014-5121
Published: 2014-08-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html; http://www.securityfocus.com/archive/1/533189/100/0/threaded; http://www.securitytracker.com/id/1030752
CVE: CVE-2014-5122
Published: 2014-08-22
Description: Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html; http://www.securityfocus.com/archive/1/533189/100/0/threaded; http://www.securityfocus.com/bid/69341
CVE: CVE-2014-5146
Published: 2014-08-22
Description: Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5149.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136980.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136981.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
CVE: CVE-2014-5149
Published: 2014-08-22
Description: Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136980.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136981.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
CVE: CVE-2014-5246
Published: 2014-08-22
Description: The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/show/osvdb/110146; http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html; http://www.exploit-db.com/exploits/34361
CVE: CVE-2014-5261
Published: 2014-08-22
Description: The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://seclists.org/oss-sec/2014/q3/351; http://seclists.org/oss-sec/2014/q3/386; http://svn.cacti.net/viewvc?view=rev&revision=7454
CVE: CVE-2014-5262
Published: 2014-08-22
Description: SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/oss-sec/2014/q3/351; http://seclists.org/oss-sec/2014/q3/386; http://svn.cacti.net/viewvc?view=rev&revision=7454
CVE: CVE-2014-5338
Published: 2014-08-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) render_status_icons function in htmllib.py or (2) ajax_action function in actions.py.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://mathias-kettner.de/check_mk_werks.php?werk_id=0982&HTML=yes; http://packetstormsecurity.com/files/127941/Deutsche-Telekom-CERT-Advisory-DTC-A-20140820-001.html; http://rhn.redhat.com/errata/RHSA-2015-1495.html
CVE: CVE-2014-5368
Published: 2014-08-22
Description: Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/oss-sec/2014/q3/407; http://seclists.org/oss-sec/2014/q3/417; http://www.securityfocus.com/bid/69278
CVE: CVE-2014-5396
Published: 2014-08-22
Description: The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/fulldisclosure/2014/Jul/40; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt; http://seclists.org/fulldisclosure/2014/Jul/40
CVE: CVE-2013-6306
Published: 2014-08-22
Description: Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=isg3T1021104; https://exchange.xforce.ibmcloud.com/vulnerabilities/88555; http://www-01.ibm.com/support/docview.wss?uid=isg3T1021104
CVE: CVE-2014-3563
Published: 2014-08-22
Description: Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59
References: http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html; http://seclists.org/oss-sec/2014/q3/428; http://www.securityfocus.com/bid/69319
CVE: CVE-2014-5241
Published: 2014-08-22
Description: The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted OBJECT element with SWF content consistent with a restricted character set.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://advisories.mageia.org/MGASA-2014-0309.html; http://openwall.com/lists/oss-security/2014/08/14/5; http://secunia.com/advisories/59738
CVE: CVE-2014-5242
Published: 2014-08-22
Description: Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving the multipageimagenavbox class in conjunction with an action=raw value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://advisories.mageia.org/MGASA-2014-0309.html; http://openwall.com/lists/oss-security/2014/08/14/5; http://www.mandriva.com/security/advisories?name=MDVSA-2014:153
CVE: CVE-2014-5243
Published: 2014-08-22
Description: MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://advisories.mageia.org/MGASA-2014-0309.html; http://openwall.com/lists/oss-security/2014/08/14/5; http://secunia.com/advisories/59738
CVE: CVE-2014-3587
Published: 2014-08-23
Description: Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2014-1326.html
CVE: CVE-2014-3597
Published: 2014-08-23
Description: Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function.  NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html
CVE: CVE-2014-5120
Published: 2014-08-23
Description: gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html; http://php.net/ChangeLog-5.php
CVE: CVE-2013-6222
Published: 2014-08-23
Description: Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127; http://secunia.com/advisories/60028; http://secunia.com/advisories/60714
CVE: CVE-2014-2632
Published: 2014-08-23
Description: Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127; http://secunia.com/advisories/60028; http://secunia.com/advisories/60714
CVE: CVE-2014-2633
Published: 2014-08-23
Description: Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127; http://secunia.com/advisories/60028; http://secunia.com/advisories/60714
CVE: CVE-2014-2634
Published: 2014-08-23
Description: Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors.
CVSS Score: 9.4 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127; http://secunia.com/advisories/60028; http://secunia.com/advisories/60714
CVE: CVE-2014-0973
Published: 2014-08-25
Description: The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSA_public_decrypt API specification, which makes it easier for attackers to bypass boot-image authentication requirements via trailing data.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://source.android.com/security/bulletin/2016-07-01.html; https://www.codeaurora.org/projects/security-advisories/incomplete-signature-parsing-during-boot-image-authentication-leads-to-signature-forgery-cve-2014-0973; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2014-0974
Published: 2014-08-25
Description: The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a controllable memory location by leveraging the ability to initiate an attempted boot of an arbitrary image.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; https://www.codeaurora.org/projects/security-advisories/lk-insufficient-verification-tagaddr-when-loading-device-tree-cve-2014-0974; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2014-4325
Published: 2014-08-25
Description: The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://www.codeaurora.org/projects/security-advisories/fastboot-boot-command-bypasses-signature-verification-cve-2014-4325; https://www.codeaurora.org/projects/security-advisories/fastboot-boot-command-bypasses-signature-verification-cve-2014-4325
CVE: CVE-2014-2216
Published: 2014-08-25
Description: The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on FortiGate devices allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted request.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/60724; http://www.fortiguard.com/advisory/FG-IR-14-006/; http://www.kb.cert.org/vuls/id/730964