deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-0475
Published: 2014-07-29
Description: Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://linux.oracle.com/errata/ELSA-2015-0092.html; http://www.debian.org/security/2014/dsa-2976; http://www.mandriva.com/security/advisories?name=MDVSA-2014:152
CVE: CVE-2014-2226
Published: 2014-07-29
Description: Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-255
References: http://packetstormsecurity.com/files/127616/Ubiquiti-UbiFi-Controller-2.4.5-Password-Hash-Disclosure.html; http://seclists.org/fulldisclosure/2014/Jul/127; http://sethsec.blogspot.com/2014/07/cve-2014-2226.html
CVE: CVE-2014-4710
Published: 2014-07-29
Description: Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127634/ZeroCMS-1.0-Cross-Site-Scripting.html; http://www.exploit-db.com/exploits/34170; https://community.qualys.com/blogs/securitylabs/2014/07/24/yet-another-zerocms-cross-site-scripting-vulnerability-cve-2014-4710
CVE: CVE-2014-4909
Published: 2014-07-29
Description: Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://inertiawar.com/submission.go; http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html; http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html
CVE: CVE-2014-5029
Published: 2014-07-29
Description: The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
CVSS Score: 1.5 (LOW)
CWE: CWE-59
References: http://advisories.mageia.org/MGASA-2014-0313.html; http://rhn.redhat.com/errata/RHSA-2014-1388.html; http://secunia.com/advisories/60509
CVE: CVE-2014-5030
Published: 2014-07-29
Description: CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://advisories.mageia.org/MGASA-2014-0313.html; http://rhn.redhat.com/errata/RHSA-2014-1388.html; http://secunia.com/advisories/60509
CVE: CVE-2014-5031
Published: 2014-07-29
Description: The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://advisories.mageia.org/MGASA-2014-0313.html; http://rhn.redhat.com/errata/RHSA-2014-1388.html; http://secunia.com/advisories/60509
CVE: CVE-2014-5114
Published: 2014-07-29
Description: WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html; http://www.securityfocus.com/bid/68519; http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html
CVE: CVE-2014-5115
Published: 2014-07-29
Description: Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/127642/DirPHP-1.0-Local-File-Inclusion.html; http://www.exploit-db.com/exploits/34173; http://packetstormsecurity.com/files/127642/DirPHP-1.0-Local-File-Inclusion.html
CVE: CVE-2014-5116
Published: 2014-07-29
Description: The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
CVSS Score: 5.0 (MEDIUM)
References: http://www.exploit-db.com/exploits/33384; http://www.osvdb.org/107083; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761
CVE: CVE-2014-0889
Published: 2014-07-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/59681; http://www-01.ibm.com/support/entdocview.wss?uid=swg21679081; http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_cross_site_scripting_vulnerabilities_cve_2014_0889
CVE: CVE-2014-3020
Published: 2014-07-29
Description: install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/59687; http://secunia.com/advisories/59795; http://secunia.com/advisories/60552
CVE: CVE-2014-3026
Published: 2014-07-29
Description: CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/59570; http://www-01.ibm.com/support/docview.wss?uid=swg21678798; https://exchange.xforce.ibmcloud.com/vulnerabilities/93065
CVE: CVE-2014-3050
Published: 2014-07-29
Description: IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21679192; https://exchange.xforce.ibmcloud.com/vulnerabilities/93436; http://www-01.ibm.com/support/docview.wss?uid=swg21679192
CVE: CVE-2014-3054
Published: 2014-07-29
Description: Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/60499; http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909; http://www-01.ibm.com/support/docview.wss?uid=swg21677032
CVE: CVE-2014-3055
Published: 2014-07-29
Description: SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/60499; http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909; http://www-01.ibm.com/support/docview.wss?uid=swg21677032
CVE: CVE-2014-3056
Published: 2014-07-29
Description: The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/60499; http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909; http://www-01.ibm.com/support/docview.wss?uid=swg21677032
CVE: CVE-2014-3057
Published: 2014-07-29
Description: Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/60499; http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909; http://www-01.ibm.com/support/docview.wss?uid=swg21677032
CVE: CVE-2014-3329
Published: 2014-07-29
Description: Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3329; http://tools.cisco.com/security/center/viewAlert.x?alertId=35065; http://www.securityfocus.com/bid/68926
CVE: CVE-2014-3895
Published: 2014-07-29
Description: The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02 and earlier allow remote attackers to bypass authentication, and consequently obtain sensitive credential and configuration data, via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN94592501/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000087; http://www.iodata.jp/support/information/2014/qwatch/
CVE: CVE-2014-3896
Published: 2014-07-29
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allow remote attackers to hijack the authentication of arbitrary users for requests that modify or delete data, as demonstrated by modifying data affecting authorization.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN42511610/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000089; http://www.acmailer.jp/info/de.cgi?id=52
CVE: CVE-2014-3897
Published: 2014-07-29
Description: Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN85748534/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000088; http://www.din.or.jp/~hideyuki/home/cgi/mailer.html
CVE: CVE-2014-0914
Published: 2014-07-30
Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/59570; http://secunia.com/advisories/59640; http://www-01.ibm.com/support/docview.wss?uid=swg1IV56679
CVE: CVE-2014-0915
Published: 2014-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/59570; http://secunia.com/advisories/59640; http://www-01.ibm.com/support/docview.wss?uid=swg1IV56680
CVE: CVE-2014-0947
Published: 2014-07-30
Description: Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update site.
CVSS Score: 6.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21678323; https://exchange.xforce.ibmcloud.com/vulnerabilities/92620; http://www-01.ibm.com/support/docview.wss?uid=swg21678323
CVE: CVE-2014-0948
Published: 2014-07-30
Description: Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute arbitrary code via a crafted ZIP archive.
CVSS Score: 6.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21678323; https://exchange.xforce.ibmcloud.com/vulnerabilities/92621; http://www-01.ibm.com/support/docview.wss?uid=swg21678323
CVE: CVE-2014-3025
Published: 2014-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via unspecified input to a .jsp file under webclient/utility/.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/59570; http://secunia.com/advisories/59640; http://www-01.ibm.com/support/docview.wss?uid=swg1IV57241
CVE: CVE-2014-2356
Published: 2014-07-30
Description: Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02; http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02
CVE: CVE-2014-5117
Published: 2014-07-30
Description: Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/60084; http://secunia.com/advisories/60647; https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack
CVE: CVE-2014-2970
Published: 2014-07-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-5139.  Reason: This candidate is a duplicate of CVE-2014-5139, and has also been used to refer to an unrelated topic that is currently outside the scope of CVE.  This unrelated topic is a LibreSSL code change adding functionality for certain process-bifurcation use cases that might arise in future LibreSSL-based applications.  There is no CVE ID associated with this LibreSSL code change.  As of 20140730, CVE-2014-5139 is an undisclosed vulnerability in a different product, with ongoing vulnerability coordination that had previously used the CVE-2014-2970 ID
CVE: CVE-2012-6651
Published: 2014-07-31
Description: Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in the path parameter to (1) add_headers.php or (2) minify.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://wordpress.org/plugins/vitamin/changelog/; http://www.openwall.com/lists/oss-security/2014/07/24/6; http://www.openwall.com/lists/oss-security/2014/07/28/3
CVE: CVE-2014-3488
Published: 2014-07-31
Description: The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://netty.io/news/2014/06/11/3-9-2-Final.html; http://secunia.com/advisories/59196; https://github.com/netty/netty/commit/2fa9400a59d0563a66908aba55c41e7285a04994
CVE: CVE-2014-3554
Published: 2014-07-31
Description: Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2014/07/29/2; http://www.securityfocus.com/bid/68945; https://bugzilla.redhat.com/show_bug.cgi?id=1118583
CVE: CVE-2014-5171
Published: 2014-07-31
Description: SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
CVSS Score: 2.9 (LOW)
CWE: CWE-310
References: http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html; http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/149
CVE: CVE-2014-5172
Published: 2014-07-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/127670/SAP-HANA-XS-Administration-Tool-Cross-Site-Scripting.html; http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/153
CVE: CVE-2014-5173
Published: 2014-07-31
Description: SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/127667/SAP-HANA-IU5-SDK-Authentication-Bypass.html; http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/150
CVE: CVE-2014-5174
Published: 2014-07-31
Description: The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://packetstormsecurity.com/files/127671/SAP-Netweaver-Business-Warehouse-Missing-Authorization.html; http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/154
CVE: CVE-2014-5175
Published: 2014-07-31
Description: The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/151; http://secunia.com/advisories/59548
CVE: CVE-2014-5176
Published: 2014-07-31
Description: SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://packetstormsecurity.com/files/127669/SAP-FI-Manager-Self-Service-Hardcoded-Username.html; http://scn.sap.com/docs/DOC-8218; http://seclists.org/fulldisclosure/2014/Jul/152
CVE: CVE-2014-2627
Published: 2014-08-01
Description: Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.
CVSS Score: 5.2 (MEDIUM)
References: http://secunia.com/advisories/60617; http://www.securitytracker.com/id/1030658; https://exchange.xforce.ibmcloud.com/vulnerabilities/95042
CVE: CVE-2014-3009
Published: 2014-08-01
Description: The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg21677306; https://exchange.xforce.ibmcloud.com/vulnerabilities/92952; http://www-01.ibm.com/support/docview.wss?uid=swg21677306
CVE: CVE-2014-3302
Published: 2014-08-01
Description: user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/58624; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3302; http://tools.cisco.com/security/center/viewAlert.x?alertId=35050
CVE: CVE-2014-0972
Published: 2014-08-01
Description: The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write to arbitrary memory locations, by using a crafted GPU command stream to modify the contents of a certain register.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://www.codeaurora.org/projects/security-advisories/unprivileged-gpu-command-streams-can-change-the-iommu-page-table-cve-2014-0972; https://www.codeaurora.org/projects/security-advisories/unprivileged-gpu-command-streams-can-change-the-iommu-page-table-cve-2014-0972
CVE: CVE-2014-3534
Published: 2014-08-01
Description: arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dab6cf55f81a6e16b8147aed9a843e1691dcd318; http://secunia.com/advisories/59790; http://secunia.com/advisories/60351
CVE: CVE-2014-5045
Published: 2014-08-01
Description: The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-59
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212; http://rhn.redhat.com/errata/RHSA-2015-0062.html; http://secunia.com/advisories/60353