deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9360
Published: 2014-12-10
Description: XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.
CVSS Score: 6.4 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Oct/133; http://www.securityfocus.com/archive/1/533861/100/0/threaded; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141031-0_Scalix_Web_Access_XXE_v10.txt
CVE: CVE-2014-7866
Published: 2014-12-10
Description: Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1) fileName parameter to the MigrateLEEData servlet or (2) zipFileName parameter in a downloadFileFromProbe operation to the MigrateCentralData servlet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/129037/ManageEngine-OpManager-Social-IT-Plus-IT360-File-Upload-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Nov/21; http://www.securityfocus.com/archive/1/533946/100/0/threaded
CVE: CVE-2014-9361
Published: 2014-12-10
Description: The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain users, which allows remote attackers with the pre-authorized role to gain privileges and possibly obtain sensitive information by accessing a Page Not Found (404) page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.drupal.org/node/2299467; https://www.drupal.org/node/2300369; https://www.drupal.org/node/2299467
CVE: CVE-2014-9362
Published: 2014-12-10
Description: Cross-site scripting (XSS) vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users with the "Edit path based meta tags" permission to inject arbitrary web script or HTML via vectors related to deleting a Path-based Metatag.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://www.drupal.org/node/2295975; https://www.drupal.org/node/2296511; https://www.drupal.org/node/2295975
CVE: CVE-2014-9363
Published: 2014-12-10
Description: Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.
CVSS Score: 5.5 (MEDIUM)
References: https://www.drupal.org/node/2295975; https://www.drupal.org/node/2296511; https://www.drupal.org/node/2295975
CVE: CVE-2014-9364
Published: 2014-12-10
Description: Cross-site scripting (XSS) vulnerability in the Unified Login form in the LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/node/2299467; https://www.drupal.org/node/2300369; https://www.drupal.org/node/2299467
CVE: CVE-2014-0580
Published: 2014-12-10
Description: Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
CVE: CVE-2014-0587
Published: 2014-12-10
Description: Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
CVE: CVE-2014-2608
Published: 2014-12-10
Description: Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04302476; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04302476
CVE: CVE-2014-4465
Published: 2014-12-10
Description: WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote attackers to bypass the Same Origin Policy via crafted Cascading Style Sheets (CSS) token sequences within an SVG file in the SRC attribute of an IMG element.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4466
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4468
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4469
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4470
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4471
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4472
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4473
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4474
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-4475
Published: 2014-12-10
Description: WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
CVE: CVE-2014-7879
Published: 2014-12-10
Description: HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.
CVSS Score: 8.5 (HIGH)
CWE: CWE-287
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778
CVE: CVE-2014-8003
Published: 2014-12-10
Description: Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8003; http://tools.cisco.com/security/center/viewAlert.x?alertId=36562; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8003
CVE: CVE-2014-8009
Published: 2014-12-10
Description: The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8009; http://tools.cisco.com/security/center/viewAlert.x?alertId=36640; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8009
CVE: CVE-2014-8010
Published: 2014-12-10
Description: The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID CSCuq50205.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8010; http://www.securitytracker.com/id/1031339; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8010
CVE: CVE-2014-8443
Published: 2014-12-10
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
CVE: CVE-2014-8445
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8446
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8447
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8448
Published: 2014-12-10
Description: An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8451.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8449
Published: 2014-12-10
Description: Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8451
Published: 2014-12-10
Description: An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2014-8448.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8452
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8453
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8454
Published: 2014-12-10
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165.
CVSS Score: 10.0 (HIGH)
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8455
Published: 2014-12-10
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165.
CVSS Score: 10.0 (HIGH)
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8456
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8457
Published: 2014-12-10
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8458
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8459
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8460
Published: 2014-12-10
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-9159.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-8461
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-9158.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-9158
Published: 2014-12-10
Description: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-8461.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-9159
Published: 2014-12-10
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-8460.
CVSS Score: 10.0 (HIGH)
References: http://helpx.adobe.com/security/products/reader/apsb14-28.html; http://helpx.adobe.com/security/products/reader/apsb14-28.html
CVE: CVE-2014-9162
Published: 2014-12-10
Description: Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
CVE: CVE-2014-9163
Published: 2014-12-10
Description: Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; https://github.com/cisagov/vulnrichment/issues/196
CVE: CVE-2014-9164
Published: 2014-12-10
Description: Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html; http://helpx.adobe.com/security/products/flash-player/apsb14-27.html