deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4433
Published: 2016-07-04
Description: Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN45093481/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000112; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
CVE: CVE-2016-4438
Published: 2016-07-04
Description: The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN07710476/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000110; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2016-4465
Published: 2016-07-04
Description: The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN12352818/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000114; http://www-01.ibm.com/support/docview.wss?uid=swg21987854
CVE: CVE-2016-4953
Published: 2016-07-05
Description: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://bugs.ntp.org/3045; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
CVE: CVE-2016-4954
Published: 2016-07-05
Description: The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: http://bugs.ntp.org/3044; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
CVE: CVE-2016-4955
Published: 2016-07-05
Description: ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: http://bugs.ntp.org/3043; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
CVE: CVE-2016-4956
Published: 2016-07-05
Description: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
CVSS Score: 5.3 (MEDIUM)
References: http://bugs.ntp.org/3042; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
CVE: CVE-2016-4957
Published: 2016-07-05
Description: ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://bugs.ntp.org/3046; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html
CVE: CVE-2016-5097
Published: 2016-07-05
Description: phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html; http://www.securitytracker.com/id/1035978; https://github.com/phpmyadmin/phpmyadmin/commit/11eb574242d[PII_REDACTED]d367ab5585fbe29578f
CVE: CVE-2016-5098
Published: 2016-07-05
Description: Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html; http://www.securitytracker.com/id/1035980; https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
CVE: CVE-2016-5099
Published: 2016-07-05
Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html; http://www.debian.org/security/2016/dsa-3627; http://www.securityfocus.com/bid/90877
CVE: CVE-2016-0906
Published: 2016-07-06
Description: The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://seclists.org/bugtraq/2016/Jul/33; http://www.securitytracker.com/id/1036235; http://seclists.org/bugtraq/2016/Jul/33
CVE: CVE-2016-1546
Published: 2016-07-06
Description: The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://httpd.apache.org/security/vulnerabilities_24.html; http://svn.apache.org/viewvc?view=revision&revision=1733727; http://www.apache.org/dist/httpd/CHANGES_2.4
CVE: CVE-2016-4507
Published: 2016-07-06
Description: SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01
CVE: CVE-2016-4508
Published: 2016-07-06
Description: Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01
CVE: CVE-2016-4979
Published: 2016-07-06
Description: The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://httpd.apache.org/security/vulnerabilities_24.html; http://packetstormsecurity.com/files/137771/Apache-2.4.20-X509-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2016/Jul/11
CVE: CVE-2016-6170
Published: 2016-07-06
Description: ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/07/06/3; http://www.securityfocus.com/bid/91611; http://www.securitytracker.com/id/1036241
CVE: CVE-2016-0230
Published: 2016-07-07
Description: IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387; http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021; http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022
CVE: CVE-2016-0389
Published: 2016-07-07
Description: Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052; http://www-01.ibm.com/support/docview.wss?uid=swg21982012; http://www.securityfocus.com/bid/91515
CVE: CVE-2016-1442
Published: 2016-07-07
Description: The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-pi; http://www.securitytracker.com/id/1036238; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-pi
CVE: CVE-2016-1443
Published: 2016-07-07
Description: The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample.
CVSS Score: 8.1 (HIGH)
CWE: CWE-254
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-tg; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-tg
CVE: CVE-2016-1444
Published: 2016-07-07
Description: The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs; http://www.securityfocus.com/bid/91669; http://www.securitytracker.com/id/1036237
CVE: CVE-2016-2923
Published: 2016-07-07
Description: IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI61936; http://www-01.ibm.com/support/docview.wss?uid=swg21983700; http://www.securityfocus.com/bid/91518
CVE: CVE-2016-2119
Published: 2016-07-07
Description: libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html; http://rhn.redhat.com/errata/RHSA-2016-1486.html; http://rhn.redhat.com/errata/RHSA-2016-1487.html
CVE: CVE-2016-0252
Published: 2016-07-08
Description: IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985641; http://www-01.ibm.com/support/docview.wss?uid=swg21985641
CVE: CVE-2016-0271
Published: 2016-07-08
Description: The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors.
CVSS Score: 8.2 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150; http://www-01.ibm.com/support/docview.wss?uid=swg2C1000150
CVE: CVE-2016-0287
Published: 2016-07-08
Description: IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200, CWE-254
References: http://www-01.ibm.com/support/docview.wss?uid=nas8N1021418; http://www-01.ibm.com/support/docview.wss?uid=swg1SI60523; http://www.securityfocus.com/bid/91706
CVE: CVE-2016-0313
Published: 2016-07-08
Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0350.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-0314
Published: 2016-07-08
Description: The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www.securityfocus.com/bid/91697; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-0315
Published: 2016-07-08
Description: The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-0350
Published: 2016-07-08
Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0313.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-2888
Published: 2016-07-08
Description: Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0313 and CVE-2016-0350.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-2889
Published: 2016-07-08
Description: Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbitrary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983147; http://www.securityfocus.com/bid/91766; http://www-01.ibm.com/support/docview.wss?uid=swg21983147
CVE: CVE-2016-2945
Published: 2016-07-08
Description: The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450; http://www-01.ibm.com/support/docview.wss?uid=swg21984502; http://www.securityfocus.com/bid/91517
CVE: CVE-2016-3794
Published: 2016-07-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-3814.  Reason: This candidate is a reservation duplicate of CVE-2016-3814.  Notes: All CVE users should reference CVE-2016-3814 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-4324
Published: 2016-07-08
Description: Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2016/dsa-3608; http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/; http://www.securityfocus.com/bid/91499
CVE: CVE-2016-4463
Published: 2016-07-08
Description: Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html; http://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html; http://packetstormsecurity.com/files/137714/Apache-Xerces-C-XML-Parser-Crash.html
CVE: CVE-2013-7457
Published: 2016-07-11
Description: Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.
CVSS Score: 7.8 (HIGH)
References: http://source.android.com/security/bulletin/2016-07-01.html; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2014-9777
Published: 2016-07-11
Description: The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598501 and Qualcomm internal bug CR563654.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=17bfaf64ad503d2e6607d2d3e0956f25bf07eb43
CVE: CVE-2014-9778
Published: 2016-07-11
Description: The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598515 and Qualcomm internal bug CR563694.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=af85054aa6a1bcd38be2354921f2f80aef1440e5
CVE: CVE-2014-9779
Published: 2016-07-11
Description: arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=0b5f49b360afdebf8ef55df1e48ec141b3629621
CVE: CVE-2014-9780
Published: 2016-07-11
Description: drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28602014 and Qualcomm internal bug CR542222.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b5bb13e1f738f90df11e0c17f843c73999a84a54
CVE: CVE-2014-9781
Published: 2016-07-11
Description: Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=a2b5237ad265ec634489c8b296d870827b2a1b13
CVE: CVE-2014-9782
Published: 2016-07-11
Description: drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28431531 and Qualcomm internal bug CR511349.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=2e57a46ab2ba7299d99d9cdc1382bd1e612963fb
CVE: CVE-2014-9783
Published: 2016-07-11
Description: drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bug CR511382.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7502f4f801bb95bff[PII_REDACTED]5bb7a016cde5
CVE: CVE-2014-9784
Published: 2016-07-11
Description: Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=36503d639cedcc73880974ed[PII_REDACTED]6e72ba