deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-0441
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect availability via unknown vectors related to Integration Broker.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102047; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0443
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity via unknown vectors related to Security.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102032; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0444
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5868 and CVE-2013-5871.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102089; http://secunia.com/advisories/56473; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0445
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2014-0381.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/102038; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-2819
Published: 2014-01-15
Description: The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
CVSS Score: 9.3 (HIGH)
CWE: CWE-255
References: http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A; http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf; http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
CVE: CVE-2013-2820
Published: 2014-01-15
Description: The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A; http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf; http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
CVE: CVE-2013-2826
Published: 2014-01-15
Description: WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01
CVE: CVE-2013-2827
Published: 2014-01-15
Description: An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01
CVE: CVE-2014-1201
Published: 2014-01-15
Description: Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/101903; http://www.securityfocus.com/archive/1/530739/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/90223
CVE: CVE-2014-1206
Published: 2014-01-15
Description: SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/56350; http://wiki.openwebanalytics.com/index.php?title=1.5.5; http://www.exploit-db.com/exploits/31738
CVE: CVE-2014-1466
Published: 2014-01-15
Description: SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/101867; http://packetstormsecurity.com/files/124724/cspmysql-sql.txt; http://secunia.com/advisories/56348
CVE: CVE-2013-3830
Published: 2014-01-15
Description: Unspecified vulnerability in the Hyperion Strategic Finance component in Oracle Hyperion 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/102113; http://secunia.com/advisories/56470; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5764
Published: 2014-01-15
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00007.html; http://osvdb.org/102083; http://secunia.com/advisories/56452
CVE: CVE-2013-5785
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.6, 11.1.1.7, and 11.1.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security and Authentication.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/102111; http://secunia.com/advisories/56465; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5795
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102096; http://secunia.com/advisories/56474; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5808
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration.
CVSS Score: 2.6 (LOW)
References: http://osvdb.org/102029; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5821
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via vectors related to RPC.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/102051; http://secunia.com/advisories/56488; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5833
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 8 and 9 allows local users to affect availability via unknown vectors related to Filesystem.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/102049; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5834
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps.
CVSS Score: 6.2 (MEDIUM)
References: http://osvdb.org/102048; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5853
Published: 2014-01-15
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00007.html; http://osvdb.org/102079; http://secunia.com/advisories/56452
CVE: CVE-2013-5858
Published: 2014-01-15
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2015-0370.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00007.html; http://osvdb.org/102082; http://secunia.com/advisories/56452
CVE: CVE-2013-5860
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5868
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5871 and CVE-2014-0444.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102088; http://secunia.com/advisories/56473; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5869
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Page Service.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102092; http://secunia.com/advisories/56467; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5870
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2; http://osvdb.org/101994; http://rhn.redhat.com/errata/RHSA-2014-0030.html
CVE: CVE-2013-5871
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5868 and CVE-2014-0444.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102087; http://secunia.com/advisories/56473; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5872
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/102055; http://secunia.com/advisories/56488; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5873
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102046; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5874
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows local users to affect confidentiality via unknown vectors related to Logging.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/102091; http://secunia.com/advisories/56471; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5875
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity and availability via vectors related to Role Based Access Control (RBAC).
CVSS Score: 2.7 (LOW)
References: http://osvdb.org/102054; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5876
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-0447.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/102050; http://secunia.com/advisories/56488; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5877
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102094; http://secunia.com/advisories/56474; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5878
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU.  Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2013-5879
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/102030; http://secunia.com/advisories/56463; http://secunia.com/advisories/59704
CVE: CVE-2013-5880
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102095; http://secunia.com/advisories/56474; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5881
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102066; http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE: CVE-2013-5882
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5883
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 8 allows local users to affect integrity and availability via unknown vectors related to Kernel.
CVSS Score: 3.2 (LOW)
References: http://osvdb.org/102053; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5884
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.
CVSS Score: 5.0 (MEDIUM)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html
CVE: CVE-2013-5885
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/102056; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2013-5886
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Common Application Objects.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/102036; http://secunia.com/advisories/56477; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-5887
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2013-5888
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2013-5889
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2013-5890
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Exception Reporting.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/102104; http://secunia.com/advisories/56471; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-6142
Published: 2014-01-15
Description: DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service (resource consumption) via IP packets containing errors that trigger event-journal messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01; http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01
CVE: CVE-2014-0665
Published: 2014-01-15
Description: The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/102118; http://secunia.com/advisories/56439; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0665
CVE: CVE-2013-7293
Published: 2014-01-15
Description: The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traffic by controlling the server associated with that hostname.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16, CWE-284
References: http://www.kb.cert.org/vuls/id/191750; http://www.securityfocus.com/bid/64799; http://www.kb.cert.org/vuls/id/191750
CVE: CVE-2014-0258
Published: 2014-01-15
Description: Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1029598; http://www.securitytracker.com/id/1029599; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-001
CVE: CVE-2014-0259
Published: 2014-01-15
Description: Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1029598; http://www.securitytracker.com/id/1029599; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-001