rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-100023 
Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100024 
Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100025 
Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100026 
Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100027 
Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100028 
Cross-site scripting (XSS) vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100029 
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) newlang or (2) newtheme parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100030 
Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100031 
Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100032 
Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100033 
Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100034 
Cross-site scripting (XSS) vulnerability in the frontend interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100035 
SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100036 
Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100037 
Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100038 
Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter to search/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-100039 
mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10001 
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the i18n[1][name] parameter in a pjActionCreate action to the pjAdminServices controller or (2) add an administrator via a pjActionCreate action to the pjAdminUsers controller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10002 
Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10003 
Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10004 
SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10005 
Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10006 
Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10007 
Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10008 
Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add (1) an administrator via a crafted request to the admin page, (2) an agent via a crafted request to the agent page, (3) a sub-agent via a crafted request to the sub_agent page, (4) a partner via a crafted request to the partner page, or (5) a client via a crafted request to the client page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10009 
Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) notes parameter to the client page; (4) insu_name or (5) price parameter to the add_insurance_cat page; or (6) status[] parameter to the add_status page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10010 
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a pjActionDownload action to the pjBackup controller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10011 
Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10012 
Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10013 
SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a dosearch action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10014 
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change the username and password of the administrator via an update action to the AdminOptions controller or conduct cross-site scripting (XSS) attacks via the (2) event_title parameter in a create action to the AdminEvents controller or (3) category_title parameter in a create action to the AdminCategories controller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10015 
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10016 
Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors related to purchase_limit or the (2) name, (3) intl, (4) nocod, or (5) time parameter in an add_delivery_method action to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10017 
Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10018 
Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10019 
Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID or (2) change the password via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10020 
SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10021 
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10022 
Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10023 
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.php, or (4) rmv_topic.php in admincp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10024 
Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10025 
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enable Wireless, (2) MBSSID, (3) BSSID, (4) Hide Access Point, (5) SSID, (6) Country, (7) Channel, (8) Wireless mode, or (9) Max Associated Clients setting via a crafted request to index.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10026 
index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10027 
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change the MAC filter restrict mode, (2) add a MAC address to the filter, or (3) remove a MAC address from the filter via a crafted request to index.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10028 
Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10029 
SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10030 
Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T11:00:00.000Z
CVE-2014-10031 
Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10032 
SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10033 
SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10034 
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10035 
Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to comments_paginate.php or (2) stores_paginate.php or the (3) affiliate_url, (4) description, (5) domain, (6) seo[description], (7) seo[heading], (8) seo[title], (9) seo[keywords], (10) setting[logo], (11) setting[perpage], or (12) setting[sitename] to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10036 
Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary web script or HTML via the cameFromUrl parameter to feed/generateFeedUrl.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10037 
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10038 
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-13T15:00:00.000Z
CVE-2014-10039 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qsee_app_entry_return() without first calling qsee_app_entry() will cause the stack to be restored to an older state resulting in a return to an unexpected location.
Problem types: description: Lack of enforcement of proper sequence of calls in QTEE
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10043 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, and SD 800, while reading PlayReady rights string information from command buffer (which is sent from non-secure side), if length of rights string is very large, a buffer over read occurs, exposing TZ App memory to non-secure side.
Problem types: description: Buffer Over-Read in Core.
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10044 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound.
Problem types: description: Improper Validation of Array Index in Core
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10045 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 820, and SDX20, buffer overflow vulnerability exist in Sahara boot when program header are parsing.
Problem types: description: Buffer Copy without Checking Size of Program Headers in Boot
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10046 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the corresponding active timer.
Problem types: description: Use after free vulnerability while handling dual IP data call
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10047 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur.
Problem types: description: Information exposure vulnerability in QTEE
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10048 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, while setting the offsets, time-services allows the user to set bases greater than valid base value which will lead to array index out-of-bound.
Problem types: description: Improper validation of Array Index in Services.
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-18T14:00:00.000Z
CVE-2014-10050 
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM845, and SDM660, access control collision vulnerability when accessing the replay protected memory block.
Problem types: description: Improper access control vulnerability in Core
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-04-18T14:00:00.000Z