deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0427
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495866.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96071; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0428
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32401526. References: N-CVE-2017-0428.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/96070; http://www.securitytracker.com/id/1037798
CVE: CVE-2017-0429
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32636619. References: N-CVE-2017-0429.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/96070; http://www.securitytracker.com/id/1037798
CVE: CVE-2017-0430
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. References: B-RB#107459.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96065; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0432
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-28332719.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96067; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0433
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96061; http://www.securitytracker.com/id/1037798; https://alephsecurity.com/vulns/aleph-2016001
CVE: CVE-2017-0434
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33001936.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96061; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0435
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31906657. References: QC-CR#1078000.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96053; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0436
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32624661. References: QC-CR#1078000.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96053; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0437
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402310. References: QC-CR#1092497.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0438
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402604. References: QC-CR#1092497.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0439
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32450647. References: QC-CR#1092059.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0440
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33252788. References: QC-CR#1095770.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0441
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32872662. References: QC-CR#1095009.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0442
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32871330. References: QC-CR#1092497.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0443
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32877494. References: QC-CR#1092497.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0444
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32705232.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96107; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0445
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32769717.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96054; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0446
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32917445.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96054; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0447
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32919560.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96054; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0448
Published: 2017-02-08
Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-32721029. References: N-CVE-2017-0448.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96105; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0449
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10. Android ID: A-31707909. References: B-RB#32094.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96110; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0450
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configurations. Product: Android. Versions: N/A. Android ID: A-32917432.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96109; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0451
Published: 2017-02-08
Description: An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31796345. References: QC-CR#1073129.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96108; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-0270
Published: 2017-02-08
Description: IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack." NOTE: this CVE has been incorrectly used for GCM nonce reuse issues in other products; see CVE-2016-10213 for the A10 issue, CVE-2016-10212 for the Radware issue, and CVE-2017-5933 for the Citrix issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21979604; http://www-01.ibm.com/support/docview.wss?uid=swg21979669; http://www-01.ibm.com/support/docview.wss?uid=swg21979673
CVE: CVE-2016-10212
Published: 2017-02-08
Description: Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270.  NOTE: this issue may be due to the use of a third-party Cavium product.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96172; https://github.com/nonce-disrespect/nonce-disrespect; https://support.radware.com/app/answers/answer_view/a_id/18456
CVE: CVE-2016-10213
Published: 2017-02-08
Description: A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96163; https://github.com/nonce-disrespect/nonce-disrespect; https://www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerability
CVE: CVE-2016-8492
Published: 2017-02-08
Description: The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94480; https://fortiguard.com/advisory/FG-IR-16-067; http://www.securityfocus.com/bid/94480
CVE: CVE-2017-5933
Published: 2017-02-08
Description: Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96151; https://github.com/nonce-disrespect/nonce-disrespect; https://support.citrix.com/article/CTX220329
CVE: CVE-2017-2765
Published: 2017-02-08
Description: EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited by attackers to compromise the affected system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/archive/1/540100/30/0/threaded; http://www.securityfocus.com/bid/95945; http://www.securityfocus.com/archive/1/540100/30/0/threaded
CVE: CVE-2015-5013
Published: 2017-02-08
Description: The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.ibm.com/support/docview.wss?uid=swg21993722; http://www.securityfocus.com/bid/96090; http://www.securitytracker.com/id/1037792
CVE: CVE-2016-2866
Published: 2017-02-08
Description: An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21997104; http://www.ibm.com/support/docview.wss?uid=swg21997104
CVE: CVE-2016-6032
Published: 2017-02-08
Description: IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21997104; http://www.ibm.com/support/docview.wss?uid=swg21997104
CVE: CVE-2016-9748
Published: 2017-02-08
Description: IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21991461; http://www.securityfocus.com/bid/96074; http://www.ibm.com/support/docview.wss?uid=swg21991461
CVE: CVE-2017-1127
Published: 2017-02-08
Description: IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21996645; http://www.securityfocus.com/bid/96019; http://www.ibm.com/support/docview.wss?uid=swg21996645
CVE: CVE-2017-1128
Published: 2017-02-08
Description: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21996645; http://www.securityfocus.com/bid/96017; http://www.ibm.com/support/docview.wss?uid=swg21996645
CVE: CVE-2015-1976
Published: 2017-02-08
Description: IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg21980585; http://www.securityfocus.com/bid/90526; http://www.ibm.com/support/docview.wss?uid=swg21980585
CVE: CVE-2015-7418
Published: 2017-02-08
Description: IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21971657; http://www.securityfocus.com/bid/83634; http://www.ibm.com/support/docview.wss?uid=swg21971657
CVE: CVE-2015-7493
Published: 2017-02-08
Description: IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21982034; http://www.securityfocus.com/bid/90529; http://www.ibm.com/support/docview.wss?uid=swg21982034
CVE: CVE-2015-7494
Published: 2017-02-08
Description: A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.
CVSS Score: 2.8 (LOW)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000140; http://www.securityfocus.com/bid/94438; http://www.ibm.com/support/docview.wss?uid=swg2C1000140
CVE: CVE-2016-0202
Published: 2017-02-08
Description: A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000134; http://www.securityfocus.com/bid/94578; http://www.ibm.com/support/docview.wss?uid=swg2C1000134
CVE: CVE-2016-0203
Published: 2017-02-08
Description: A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000140; http://www.securityfocus.com/bid/94440; http://www.ibm.com/support/docview.wss?uid=swg2C1000140
CVE: CVE-2016-0206
Published: 2017-02-08
Description: IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000141; http://www.securityfocus.com/bid/94656; http://www.ibm.com/support/docview.wss?uid=swg2C1000141