rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-4254 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4255 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4256 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to WLS - Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4257 
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4258 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4259 
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to System management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-21T02:00:00.000Z
CVE-2014-4260 
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4261 
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2487.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4262 
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4263 
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4264 
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect availability via unknown vectors related to Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4265 
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4266 
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4267 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4268 
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4269 
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4270.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4270 
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4269.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4271 
Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-17T10:00:00.000Z
CVE-2014-4274 
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4275 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4276 
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System (CIFS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4277 
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4278 
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4279 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-21T02:00:00.000Z
CVE-2014-4280 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4281 
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Portal Integration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4282 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4283 
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4284 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4285 
Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4287 
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4288 
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4289 
Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2014-6544.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4290 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4291 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4292 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4293 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4294 
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4295, CVE-2014-6538, and CVE-2014-6563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4295 
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294, CVE-2014-6538, and CVE-2014-6563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4296 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4297 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4298 
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4299 
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4300 
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4301 
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4302 
Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4303 
Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4304 
Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4305 
Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4306 
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) in the logfile parameter in a download action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4307 
SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4308 
Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to (2) iframe.picker.statchannels.asp, (3) iframe.picker.channelgroups.asp, (4) iframe.picker.extensions.asp, (5) iframe.picker.licenseusergroups.asp, (6) iframe.picker.licenseusers.asp, (7) iframe.picker.lookup.asp, or (8) iframe.picker.marks.asp in _ifr/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4309 
Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html, or remote authenticated users to inject arbitrary web script or HTML via the (2) MaxInstances, (3) PassivePorts, (4) Port, (5) ServerName, (6) TimeoutLogin, (7) TimeoutNoTransfer, or (8) TimeoutStalled parameter to admin/services_ftp.html; the (9) dns1 or (10) dns2 parameter to admin/system.html; the (11) newTgtName parameter to admin/volumes_iscsi_targets.html; the User-Agent HTTP header to (12) language.html, (13) login.html, or (14) password.html in account/; or the User-Agent HTTP header to (15) account_groups.html, (16) account_users.html, (17) services.html, (18) services_ftp.html, (19) services_iscsi_target.html, (20) services_rsync.html, (21) system_clock.html, (22) system_info.html, (23) system_ups.html, (24) volumes_editpartitions.html, or (25) volumes_iscsi_targets.html in admin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T14:00:00.000Z
CVE-2014-4310 
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-6547, and CVE-2014-6477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-15T15:15:00.000Z
CVE-2014-4311 
Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Connection passwords by reading HTML source code of the database connection and email settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-04T02:00:00.000Z
CVE-2014-4312 
Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the (1) Notes section to Order details; (2) Description section to "Order to consume"; (3) Favorites name section to Favorites; (4) FiltKeyword parameter to Procurement/EKPHTML/search_item_bt.asp; (5) Act parameter to Procurement/EKPHTML/EnterpriseManager/Budget/ImportBudget_fr.asp; (6) hdnOpener or (7) hdnApproverFieldName parameter to Procurement/EKPHTML/EnterpriseManager/UserSearchDlg.asp; or (8) INTEGRATED parameter to Procurement/EKPHTML/EnterpriseManager/Codes.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-10T14:00:00.000Z
CVE-2014-4313 
SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-10T14:00:00.000Z
CVE-2014-4322 
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-24T15:00:00.000Z
CVE-2014-4323 
The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-12T11:00:00.000Z
CVE-2014-4325 
The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-25T01:00:00.000Z
CVE-2014-4326 
Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-22T14:00:00.000Z