deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3042
Published: 2014-06-10
Description: IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/59242; http://www-01.ibm.com/support/docview.wss?uid=swg1PI16710; http://www-01.ibm.com/support/docview.wss?uid=swg1PI16726
CVE: CVE-2014-3287
Published: 2014-06-10
Description: SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-89
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287; http://www.securityfocus.com/bid/68000; http://www.securitytracker.com/id/1030411
CVE: CVE-2014-3289
Published: 2014-06-10
Description: Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127004/Cisco-Ironport-Email-Security-Virtual-Appliance-8.0.0-671-XSS.html; http://seclists.org/fulldisclosure/2014/Jun/57; http://secunia.com/advisories/58296
CVE: CVE-2014-3292
Published: 2014-06-10
Description: The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/58315; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292; http://tools.cisco.com/security/center/viewAlert.x?alertId=34574
CVE: CVE-2014-3294
Published: 2014-06-10
Description: Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3294; http://www.securityfocus.com/bid/68001; http://www.securitytracker.com/id/1030412
CVE: CVE-2009-5023
Published: 2014-06-10
Description: The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/fail2ban-mail.txt.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-59
References: http://secunia.com/advisories/58841; http://security.gentoo.org/glsa/glsa-201406-03.xml; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544232
CVE: CVE-2013-6825
Published: 2014-06-10
Description: (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by creating a large number of processes.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://git.dcmtk.org/web?p=dcmtk.git%3Ba=blob%3Bf=CHANGES.361; http://packetstormsecurity.com/files/126883/DCMTK-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2014/Jun/11
CVE: CVE-2014-0220
Published: 2014-06-10
Description: Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/126956/Cloudera-Manager-4.8.2-5.0.0-Information-Disclosure.html; http://www.cloudera.com/content/cloudera-content/cloudera-docs/SecurityBulletins/Security-Bulletin/csb_topic_2.html; http://www.securityfocus.com/archive/1/532312/100/0/threaded
CVE: CVE-2014-3216
Published: 2014-06-10
Description: GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/33335; http://www.exploit-db.com/exploits/33335
CVE: CVE-2014-3465
Published: 2014-06-10
Description: The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003326.html; http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003327.html; http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html
CVE: CVE-2014-3873
Published: 2014-06-10
Description: The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault kernel trace entry size, which allows local users to obtain sensitive information from kernel memory via a kernel process trace.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/58627; http://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A12.ktrace.asc; http://www.securityfocus.com/bid/67812
CVE: CVE-2014-3880
Published: 2014-06-10
Description: The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service (triple-fault and system reboot) via a crafted system call, which triggers an invalid page table pointer dereference.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/59034; http://www.debian.org/security/2014/dsa-2952; http://www.freebsd.org/security/advisories/FreeBSD-EN-14%3A06.exec.asc
CVE: CVE-2014-4017
Published: 2014-06-10
Description: Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/126781/WordPress-Conversion-Ninja-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/126781/WordPress-Conversion-Ninja-Cross-Site-Scripting.html
CVE: CVE-2014-0282
Published: 2014-06-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/33860; http://www.osvdb.org/107851; http://www.securityfocus.com/bid/67862
CVE: CVE-2014-0296
Published: 2014-06-11
Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly encrypt sessions, which makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify session content by sending crafted RDP packets, aka "RDP MAC Vulnerability."
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-310
References: http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx; http://secunia.com/advisories/58524; http://www.securityfocus.com/bid/67865
CVE: CVE-2014-1769
Published: 2014-06-11
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/67863; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1771
Published: 2014-06-11
Description: SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack," aka "TLS Server Certificate Renegotiation Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/67861; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1772
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67864; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1773
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67866; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1774
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1788 and CVE-2014-2754.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/67867; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1775
Published: 2014-06-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67871; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1777
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/67869; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1778
Published: 2014-06-11
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-2777.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/67882; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1779
Published: 2014-06-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67872; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1780
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67873; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1781
Published: 2014-06-11
Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1792, CVE-2014-1804, and CVE-2014-2770.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67874; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1782
Published: 2014-06-11
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67875; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1783
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67876; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1784
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67877; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1785
Published: 2014-06-11
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://packetstormsecurity.com/files/140233/Microsoft-Internet-Explorer-11-MSHTML-CSpliceTreeEngine-RemoveSplice-Use-After-Free.html; http://www.securityfocus.com/bid/67878
CVE: CVE-2014-1786
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67879; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1788
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1774 and CVE-2014-2754.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67880; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1789
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67881; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1790
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1789.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67883; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1791
Published: 2014-06-11
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67884; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1792
Published: 2014-06-11
Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1781, CVE-2014-1804, and CVE-2014-2770.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67885; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1794
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67886; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1795
Published: 2014-06-11
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67887; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1796
Published: 2014-06-11
Description: Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67889; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1797
Published: 2014-06-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67890; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE: CVE-2014-1799
Published: 2014-06-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1803, and CVE-2014-2757.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/67891; http://www.securitytracker.com/id/1030370; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035