deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9245
Published: 2017-03-07
Description: In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in iRules and/or BIG-IP LTM policies. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/96471; http://www.securitytracker.com/id/1037964; https://support.f5.com/csp/article/K22216037
CVE: CVE-2017-2636
Published: 2017-03-07
Description: Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-415
References: http://www.debian.org/security/2017/dsa-3804; http://www.openwall.com/lists/oss-security/2017/03/07/6; http://www.securityfocus.com/bid/96732
CVE: CVE-2017-6518
Published: 2017-03-08
Description: Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://daimacn.com/?id=6; http://www.securityfocus.com/bid/97152; http://daimacn.com/?id=6
CVE: CVE-2016-8413
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32709702. References: QC-CR#518731.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96749; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8416
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32510746. References: QC-CR#1088206.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96734; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8417
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32342399. References: QC-CR#1088824.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96832; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8477
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32720522. References: QC-CR#1090007.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96749; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8478
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511270. References: QC-CR#1088206.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96734; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8479
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31824853. References: QC-CR#1093687.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96801; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8483
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-33745862. References: QC-CR#1035099.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96805; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0306
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-34132950. References: N-CVE-2017-0306.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/96723; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0307
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33177895. References: N-CVE-2017-0307.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/96809; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0333
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33899363. References: N-CVE-2017-0333.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96723; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html
CVE: CVE-2017-0334
Published: 2017-03-08
Description: An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33245849. References: N-CVE-2017-0334.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0335
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33043375. References: N-CVE-2017-0335.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96723; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html
CVE: CVE-2017-0336
Published: 2017-03-08
Description: An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33042679. References: N-CVE-2017-0336.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0337
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-31992762. References: N-CVE-2017-0337.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96723; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html
CVE: CVE-2017-0338
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33057977. References: N-CVE-2017-0338.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96723; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01.html
CVE: CVE-2017-0452
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32873615. References: QC-CR#1093693.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96836; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0453
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33979145. References: QC-CR#1105085.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96735; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0455
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrary code within the context of the bootloader. This issue is rated as High because it is a general bypass for a bootloader level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-32370952. References: QC-CR#1082755.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96812; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0456
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33106520. References: QC-CR#1099598.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96947; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0457
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31695439. References: QC-CR#1086123, QC-CR#1100695.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96803; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0458
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32588962. References: QC-CR#1089433.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96951; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0459
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32644895. References: QC-CR#1091939.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96743; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0460
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31252965. References: QC-CR#1098801.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96948; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0461
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32073794. References: QC-CR#1100132.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96743; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0463
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33277611. References: QC-CR#1101792.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96948; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0464
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32940193. References: QC-CR#1102593.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96735; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0466
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33139050.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0467
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33250932.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0468
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33351708.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0469
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33450635.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0470
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33818500.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0471
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33816782.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0472
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33862021.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0473
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33982658.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0474
Published: 2017-03-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32589224.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96717; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0475
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31914369.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96716; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01