deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-2598
Published: 2014-08-31
Description: app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory locations within bootloader memory.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://www.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootloader-cve-2013-2598; https://www.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootloader-cve-2013-2598
CVE: CVE-2013-2599
Published: 2014-08-31
Description: A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.3.x enables debug logging, which allows attackers to obtain sensitive disk-encryption passwords via a logcat call.
CVSS Score: 5.0 (MEDIUM)
References: https://www.codeaurora.org/projects/security-advisories/logging-potentially-sensitive-information-nativedaemonconnector-cve-2013-2599; https://www.codeaurora.org/projects/security-advisories/logging-potentially-sensitive-information-nativedaemonconnector-cve-2013-2599
CVE: CVE-2013-6124
Published: 2014-08-31
Description: The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: https://www.codeaurora.org/projects/security-advisories/insecure-owner-permission-changes-init-shell-scripts-cve-2013-6124; https://www.codeaurora.org/projects/security-advisories/insecure-owner-permission-changes-init-shell-scripts-cve-2013-6124
CVE: CVE-2014-3601
Published: 2014-09-01
Description: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
CVE: CVE-2014-5471
Published: 2014-09-01
Description: Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
CVE: CVE-2014-5472
Published: 2014-09-01
Description: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
CVE: CVE-2014-3861
Published: 2014-09-02
Description: Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gforge.hl7.org/gf/project/strucdoc/frs/?action=FrsReleaseView&release_id=1088; http://motorcycleguy.blogspot.com/2014/04/hl7-cda-stylesheet-patches.html; http://smartplatforms.org/2014/04/security-vulnerabilities-in-ccda-display/
CVE: CVE-2014-3862
Published: 2014-09-02
Description: CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://gforge.hl7.org/gf/project/strucdoc/frs/?action=FrsReleaseView&release_id=1088; http://motorcycleguy.blogspot.com/2014/04/hl7-cda-stylesheet-patches.html; http://smartplatforms.org/2014/04/security-vulnerabilities-in-ccda-display/
CVE: CVE-2014-5076
Published: 2014-09-02
Description: The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.youtube.com/watch?v=MF9lrh1kpDs; https://www.youtube.com/watch?v=MF9lrh1kpDs
CVE: CVE-2014-5452
Published: 2014-09-02
Description: CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that is improperly handled during unrestricted xsl:copy operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gforge.hl7.org/gf/project/strucdoc/frs/?action=FrsReleaseView&release_id=1088; http://motorcycleguy.blogspot.com/2014/04/hl7-cda-stylesheet-patches.html; http://smartplatforms.org/2014/04/security-vulnerabilities-in-ccda-display/
CVE: CVE-2014-6041
Published: 2014-09-02
Description: The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character, as demonstrated by an onclick="window.open('\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html; http://www.securityfocus.com/bid/69548; https://android.googlesource.com/platform/external/webkit/+/1368e05e8875f00e8d2529fe6050d08b55ea4d87
CVE: CVE-2014-0485
Published: 2014-09-02
Description: S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.debian.org/security/2014/dsa-3013; http://www.openwall.com/lists/oss-security/2014/08/28/3; https://bitbucket.org/nikratio/s3ql/commits/091ac263809b4e8
CVE: CVE-2014-5136
Published: 2014-09-02
Description: Cross-site scripting (XSS) vulnerability in Innovative Interfaces Sierra Library Services Platform 1.2_3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/533267/100/0/threaded; http://www.securityfocus.com/bid/69466; http://www.securityfocus.com/archive/1/533267/100/0/threaded
CVE: CVE-2014-5137
Published: 2014-09-02
Description: Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of login requests, possibly related to the Webpac Pro submodule.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/533267/100/0/threaded; http://www.securityfocus.com/archive/1/533267/100/0/threaded
CVE: CVE-2014-5339
Published: 2014-09-02
Description: Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.
CVSS Score: 4.9 (MEDIUM)
References: http://mathias-kettner.de/check_mk_werks.php?werk_id=983; http://packetstormsecurity.com/files/127941/Deutsche-Telekom-CERT-Advisory-DTC-A-20140820-001.html; http://rhn.redhat.com/errata/RHSA-2015-1495.html
CVE: CVE-2014-5340
Published: 2014-09-02
Description: The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://mathias-kettner.de/check_mk_werks.php?werk_id=984; http://packetstormsecurity.com/files/127941/Deutsche-Telekom-CERT-Advisory-DTC-A-20140820-001.html; http://rhn.redhat.com/errata/RHSA-2015-1495.html
CVE: CVE-2014-5521
Published: 2014-09-02
Description: plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128030/XRMS-Blind-SQL-Injection-Command-Execution.html; http://seclists.org/fulldisclosure/2014/Aug/78; http://www.exploit-db.com/exploits/34452
CVE: CVE-2014-6064
Published: 2014-09-02
Description: The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1030675; https://exchange.xforce.ibmcloud.com/vulnerabilities/95690; https://kc.mcafee.com/corporate/index?page=content&id=SB10080
CVE: CVE-2014-1553
Published: 2014-09-03
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
CVE: CVE-2014-1554
Published: 2014-09-03
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html; http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html; http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
CVE: CVE-2014-1562
Published: 2014-09-03
Description: Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
CVE: CVE-2014-1563
Published: 2014-09-03
Description: Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
CVE: CVE-2014-1564
Published: 2014-09-03
Description: Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-824
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
CVE: CVE-2014-1565
Published: 2014-09-03
Description: The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
CVE: CVE-2014-1566
Published: 2014-09-03
Description: Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2014/mfsa2014-71.html; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/69522
CVE: CVE-2014-1567
Published: 2014-09-03
Description: Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
CVE: CVE-2012-4226
Published: 2014-09-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-08/0067.html; http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html; http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt
CVE: CVE-2014-5465
Published: 2014-09-03
Description: Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/128024/WordPress-ShortCode-1.1-Local-File-Inclusion.html; http://wordpress.org/plugins/download-shortcode/changelog/; http://wordpress.org/support/topic/plugin-download-shortcode-security-issue
CVE: CVE-2014-3075
Published: 2014-09-04
Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR50092; http://www-01.ibm.com/support/docview.wss?uid=swg21679979; https://exchange.xforce.ibmcloud.com/vulnerabilities/93817
CVE: CVE-2014-3094
Published: 2014-09-04
Description: Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/58616; http://secunia.com/advisories/60845; http://www-01.ibm.com/support/docview.wss?uid=swg1IT02291
CVE: CVE-2014-3095
Published: 2014-09-04
Description: The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted UNION clause in a subquery of a SELECT statement.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/58725; http://secunia.com/advisories/60845; http://www-01.ibm.com/support/docview.wss?uid=swg1IT02433
CVE: CVE-2014-3353
Published: 2014-09-04
Description: Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/60205; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3353; http://tools.cisco.com/security/center/viewAlert.x?alertId=35559
CVE: CVE-2014-4758
Published: 2014-09-04
Description: IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/60851; http://www-01.ibm.com/support/docview.wss?uid=swg1JR50215; http://www-01.ibm.com/support/docview.wss?uid=swg21680795
CVE: CVE-2014-4759
Published: 2014-09-04
Description: An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871; http://www-01.ibm.com/support/docview.wss?uid=swg21680809; https://exchange.xforce.ibmcloud.com/vulnerabilities/94486
CVE: CVE-2014-4805
Published: 2014-09-04
Description: IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761; http://www-01.ibm.com/support/docview.wss?uid=swg21681723; http://www.securitytracker.com/id/1030806
CVE: CVE-2014-5285
Published: 2014-09-04
Description: Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt; http://www.tibco.com/mk/advisory.jsp; http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt
CVE: CVE-2012-4234
Published: 2014-09-04
Description: Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html; http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html; http://secunia.com/advisories/50445
CVE: CVE-2012-4768
Published: 2014-09-04
Description: Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the default URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-09/0042.html; http://osvdb.org/85319; http://packetstormsecurity.org/files/116408/wpdownloadmonitor3357-xss.txt
CVE: CVE-2012-6153
Published: 2014-09-04
Description: http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field.  NOTE: this issue exists because of an incomplete fix for CVE-2012-5783.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2014-1098.html; http://rhn.redhat.com/errata/RHSA-2014-1833.html; http://rhn.redhat.com/errata/RHSA-2014-1834.html
CVE: CVE-2014-2685
Published: 2014-09-04
Description: The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://advisories.mageia.org/MGASA-2014-0151.html; http://framework.zend.com/security/advisory/ZF2014-02; http://seclists.org/oss-sec/2014/q2/0
CVE: CVE-2014-2957
Published: 2014-09-04
Description: The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://git.exim.org/exim.git/commitdiff/5b7a7c051c9ab9ee7c924a611f90ef2be03e0ad0; http://www.openwall.com/lists/oss-security/2021/05/04/7; https://lists.exim.org/lurker/message/20[PII_REDACTED]36.a31d60a4.en.html
CVE: CVE-2014-2972
Published: 2014-09-04
Description: expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-189
References: http://git.exim.org/exim.git/commitdiff/7685ce68148a083d7759e78d01aa5198fc099c44; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136251.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136264.html