deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-0204
Published: 2015-01-09
Description: The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679; http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html
CVE: CVE-2015-0205
Published: 2015-01-09
Description: The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html
CVE: CVE-2015-0206
Published: 2015-01-09
Description: Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html
CVE: CVE-2013-7419
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/124239/WordPress-Js-Multi-Hotel-2.2.1-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/124239/WordPress-Js-Multi-Hotel-2.2.1-Cross-Site-Scripting.html
CVE: CVE-2014-9269
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web script or HTML via the project cookie.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://seclists.org/oss-sec/2014/q4/867; http://seclists.org/oss-sec/2014/q4/902; http://secunia.com/advisories/62101
CVE: CVE-2014-9271
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2014/q4/867; http://seclists.org/oss-sec/2014/q4/902; http://seclists.org/oss-sec/2014/q4/924
CVE: CVE-2014-9272
Published: 2015-01-09
Description: The string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly validate the URL protocol, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the javascript:// protocol.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2014/q4/867; http://seclists.org/oss-sec/2014/q4/902; http://secunia.com/advisories/62101
CVE: CVE-2014-9498
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit any content permission to inject arbitrary web script or HTML via a node title.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/01/03/2; http://www.openwall.com/lists/oss-security/2015/01/04/6; https://www.drupal.org/node/2386011
CVE: CVE-2014-9499
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/01/03/2; http://www.openwall.com/lists/oss-security/2015/01/04/6; https://exchange.xforce.ibmcloud.com/vulnerabilities/99678
CVE: CVE-2014-9500
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in the Moip module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the notification page callback.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/01/03/2; http://www.openwall.com/lists/oss-security/2015/01/04/6; https://www.drupal.org/node/2390699
CVE: CVE-2014-9501
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/01/03/2; http://www.openwall.com/lists/oss-security/2015/01/04/6; https://www.drupal.org/node/2390097
CVE: CVE-2014-9505
Published: 2015-01-09
Description: Cross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/01/03/2; http://www.openwall.com/lists/oss-security/2015/01/04/6; https://exchange.xforce.ibmcloud.com/vulnerabilities/99654
CVE: CVE-2014-9510
Published: 2015-01-09
Description: Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2015/Jan/14; http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2015-001/; http://www.securityfocus.com/bid/71913
CVE: CVE-2015-0921
Published: 2015-01-09
Description: XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.
CVSS Score: 4.0 (MEDIUM)
References: http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html; http://seclists.org/fulldisclosure/2015/Jan/37; http://seclists.org/fulldisclosure/2015/Jan/8
CVE: CVE-2015-0922
Published: 2015-01-09
Description: McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html; http://seclists.org/fulldisclosure/2015/Jan/37; http://seclists.org/fulldisclosure/2015/Jan/8
CVE: CVE-2014-9529
Published: 2015-01-09
Description: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a3a[PII_REDACTED]dd72e5d5d34dcdab17b4420e74c; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html
CVE: CVE-2014-9584
Published: 2015-01-09
Description: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e2024624e678f0ebb916e6192bd23c1f9fdf696; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
CVE: CVE-2014-9585
Published: 2015-01-09
Description: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
CVSS Score: 2.1 (LOW)
References: http://git.kernel.org/?p=linux/kernel/git/luto/linux.git%3Ba=commit%3Bh=bc3b94c31d65e761ddfe150d02932c65971b74e2; http://git.kernel.org/?p=linux/kernel/git/tip/tip.git%3Ba=commit%3Bh=fbe1bf[PII_REDACTED]8dfa575d74a185ae53c5dbb; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.html
CVE: CVE-2014-1004
Published: 2015-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9456.  Reason: This candidate is not authorized for use because it is part of the 2014 CVE-ID ID-Syntax protection block, which protects against accidental truncation of CVE IDs with sequence numbers containing more than 4 digits.  See references.  Notes: All CVE users should reference CVE-2014-9456 instead of this candidate
CVE: CVE-2014-1137
Published: 2015-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9445, CVE-2014-9581, CVE-2014-9582.  Reason: This candidate is not authorized for use because it is part of the 2014 CVE-ID ID-Syntax protection block, which protects against accidental truncation of CVE IDs with sequence numbers containing more than 4 digits.  See references.  Notes: All CVE users should reference CVE-2014-9445, CVE-2014-9581, or CVE-2014-9582 instead of this candidate
CVE: CVE-2014-1155
Published: 2015-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9580.  Reason: This candidate is not authorized for use because it is part of the 2014 CVE-ID ID-Syntax protection block, which protects against accidental truncation of CVE IDs with sequence numbers containing more than 4 digits.  See references.  Notes: All CVE users should reference CVE-2014-9580 instead of this candidate
CVE: CVE-2014-3096
Published: 2015-01-10
Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21692994; https://exchange.xforce.ibmcloud.com/vulnerabilities/94264; http://www-01.ibm.com/support/docview.wss?uid=swg21692994
CVE: CVE-2014-6158
Published: 2015-01-10
Description: Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow remote authenticated users to execute arbitrary code via a (1) Script Package, (2) Add-On, or (3) Emergency Fixes component.
CVSS Score: 9.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/61956; http://secunia.com/advisories/62032; http://www-01.ibm.com/support/docview.wss?uid=swg21693292
CVE: CVE-2014-6199
Published: 2015-01-10
Description: The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/62082; http://www-01.ibm.com/support/docview.wss?uid=swg1IT05121; http://www-01.ibm.com/support/docview.wss?uid=swg21693131
CVE: CVE-2014-6212
Published: 2015-01-10
Description: The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2.x before 10.0.2.5; and Emptoris Program Management (aka PGM) and Strategic Supply Management (aka SSMP) 10.0.0.x before 10.0.0.3 iFix6, 10.0.1.x before 10.0.1.4 iFix1, and 10.0.2.x before 10.0.2.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 4.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21693069; https://exchange.xforce.ibmcloud.com/vulnerabilities/98689; http://www-01.ibm.com/support/docview.wss?uid=swg21693069
CVE: CVE-2014-8020
Published: 2015-01-10
Description: Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance degradation or service outage) via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8020; http://www.securityfocus.com/bid/71975; http://www.securitytracker.com/id/1031520
CVE: CVE-2014-8035
Published: 2015-01-10
Description: The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8035; http://www.securityfocus.com/bid/71980; https://exchange.xforce.ibmcloud.com/vulnerabilities/100662
CVE: CVE-2014-8036
Published: 2015-01-10
Description: The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/60330; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8036; http://www.securityfocus.com/bid/71982
CVE: CVE-2014-9190
Published: 2015-01-10
Description: Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.
CVSS Score: 10.0 (HIGH)
CWE: CWE-121, CWE-119
References: https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000104.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-15-008-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-008-02
CVE: CVE-2014-9191
Published: 2015-01-10
Description: The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service (DTM outage and FDT Frame application hang) by transmitting crafted response packets on the 4-20 mA current loop.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://www.securityfocus.com/bid/71952; http://www2.emersonprocess.com/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-15-008-01A
CVE: CVE-2015-0559
Published: 2015-01-10
Description: Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://secunia.com/advisories/62612; http://www.wireshark.org/security/wnpa-sec-2015-01.html
CVE: CVE-2015-0560
Published: 2015-01-10
Description: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-19
References: http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://secunia.com/advisories/62612; http://www.wireshark.org/security/wnpa-sec-2015-01.html
CVE: CVE-2015-0561
Published: 2015-01-10
Description: asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://secunia.com/advisories/62612; http://www.oracle.com/technetwork/topics/security/bulletinjan2[PII_REDACTED].html
CVE: CVE-2015-0562
Published: 2015-01-10
Description: Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
CVSS Score: 5.0 (MEDIUM)
References: http://advisories.mageia.org/MGASA-2015-0019.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://rhn.redhat.com/errata/RHSA-2015-1460.html
CVE: CVE-2015-0563
Published: 2015-01-10
Description: epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://advisories.mageia.org/MGASA-2015-0019.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://secunia.com/advisories/62612
CVE: CVE-2015-0564
Published: 2015-01-10
Description: Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0019.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html; http://rhn.redhat.com/errata/RHSA-2015-1460.html
CVE: CVE-2015-0582
Published: 2015-01-10
Description: The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0582; http://www.securityfocus.com/bid/71979; http://www.securitytracker.com/id/1031539
CVE: CVE-2014-9495
Published: 2015-01-10
Description: Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-122
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://secunia.com/advisories/62725; http://sourceforge.net/p/png-mng/mailman/message/33172831/
CVE: CVE-2014-2838
Published: 2015-01-12
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct (1) SQL injection attacks via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php or (2) cross-site scripting (XSS) attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2014/Mar/399; http://secunia.com/advisories/57667; https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/
CVE: CVE-2014-2839
Published: 2015-01-12
Description: SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2014/Mar/399; https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/; https://exchange.xforce.ibmcloud.com/vulnerabilities/92156
CVE: CVE-2014-6268
Published: 2015-01-12
Description: The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/69753; http://www.securitytracker.com/id/1030829; http://xenbits.xen.org/xsa/advisory-107.html
CVE: CVE-2013-7420
Published: 2015-01-12
Description: Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0100.html; http://www.securityfocus.com/bid/88211; https://exchange.xforce.ibmcloud.com/vulnerabilities/89871
CVE: CVE-2013-2603
Published: 2015-01-12
Description: The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted arguments to the (1) AddTag, (2) Ping, (3) QueuePause, (4) QueueRemove, (5) QueueTop, (6) RemoveTag, (7) TagRemoved, or (8) message method.
CVSS Score: 10.0 (HIGH)
References: http://www.osvdb.org/96919; http://www.riskbasedsecurity.com/reports/RBS-GameHouseAnalysis-Sept2013.pdf; https://www.riskbasedsecurity.com/research/RBS-2013-006.pdf