rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-9911 
Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-04T20:00:00.000Z
CVE-2014-9912 
The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-04T20:00:00.000Z
CVE-2014-9913 
Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T17:00:00.000Z
CVE-2014-9914 
Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T07:02:00.000Z
CVE-2014-9915 
Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T17:00:00.000Z
CVE-2014-9916 
Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) tribe_name or (2) tags parameter in a tribes page request to user/ or the (3) user_id or (4) fullname parameter to signup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-23T21:00:00.000Z
CVE-2014-9917 
An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T13:23:02.000Z
CVE-2014-9918 
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the user_id parameter to signup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T13:21:28.000Z
CVE-2014-9919 
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T13:17:30.000Z
CVE-2014-9920 
Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances.
Problem types: description: Unauthorized execution of binary vulnerability
Affected products: vendor: Intel
product: McAfee Application Control (MAC)
Published: 2017-03-14T22:00:00.000Z
CVE-2014-9921 
Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error.
Problem types: description: Information disclosure vulnerability
Affected products: vendor: Intel
product: Cloud Analysis and Deconstructive Services (CADS)
Published: 2017-03-14T22:00:00.000Z
CVE-2014-9922 
The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T04:54:00.000Z
CVE-2014-9923 
In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
Problem types: description: Buffer Copy without Checking Size of Input Vulnerability in NAS
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9924 
In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.
Problem types: description: Signed to Unsigned Conversion Error in 1x
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9925 
In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
Problem types: description: Buffer Copy without Checking Size of Input Vulnerability in HDR
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9926 
In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
Problem types: description: Use After Free Vulnerability in GNSS
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9927 
In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
Problem types: description: Buffer Copy without Checking Size of Input Vulnerability in UIM
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9928 
In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
Problem types: description: Buffer Copy without Checking Size of Input Vulnerability in GERAN
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9929 
In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.
Problem types: description: Use of Out-of-range Pointer Offset Vulnerability in WCDMA
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9930 
In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
Problem types: description: Use After Free Vulnerability in WCDMA
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9931 
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
Problem types: description: Buffer Overflow Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9932 
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
Problem types: description: Integer Overflow Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9933 
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
Problem types: description: Improper Input Validation in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9934 
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
Problem types: description: Cryptographic Issues
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9935 
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
Problem types: description: Integer Overflow to Buffer Overflow Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9936 
In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.
Problem types: description: Time-of-check Time-of-use Race Condition in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9937 
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
Problem types: description: Buffer Overflow Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2014-9938 
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-20T00:00:00.000Z
CVE-2014-9939 
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-21T06:21:00.000Z
CVE-2014-9940 
The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T21:00:00.000Z
CVE-2014-9941 
In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
Problem types: description: Time-of-Check Time-of-Use Race Condition Vulnerability in Embedded File System
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9942 
In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.
Problem types: description: Use of Uninitialized Variable Vulnerability in Boot
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9943 
In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.
Problem types: description: Null Pointer Dereference Vulnerability in Core Kernel
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9944 
In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.
Problem types: description: Integer Overflow to Buffer Overflow Vulnerability in Secure File System
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9945 
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.
Problem types: description: Improper Authorization Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9946 
In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
Problem types: description: Use After Free Vulnerability in Core Kernel
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9947 
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.
Problem types: description: Information Exposure Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9948 
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.
Problem types: description: Improper Validation of Array Index Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9949 
In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.
Problem types: description: Untrusted Pointer Dereference Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9950 
In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.
Problem types: description: Improper Authorization Vulnerability in Core Kernel
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9951 
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.
Problem types: description: Information Exposure Through Timing Discrepancy Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9952 
In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.
Problem types: description: Capture-Replay Vulnerability in Secure File System
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2014-9953 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9954 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9955 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9956 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9957 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9958 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9959 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2014-9960 
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.
Problem types: description: Buffer Copy without Checking Size of Input in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9961 
In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.
Problem types: description: Data Processing Error in Boot
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9962 
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.
Problem types: description: Improper Input Validation Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9963 
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.
Problem types: description: Buffer Copy without Checking Size of Input in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9964 
In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.
Problem types: description: Integer Overflow Vulnerability in Boot
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9965 
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.
Problem types: description: Improper Input Validation Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9966 
In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.
Problem types: description: Time-of-check Time-of-use (TOCTOU) Race Condition in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9967 
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
Problem types: description: Untrusted Pointer Dereference Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-13T20:00:00.000Z
CVE-2014-9968 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface.
Problem types: description: Buffer Copy without Checking Size of Input in UIM
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9969 
In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm.
Problem types: description: Use of a Broken or Risky Cryptographic Algorithm in GNSS
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9970 
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-21T18:00:00.000Z
CVE-2014-9971 
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow.
Problem types: description: Always-Incorrect Control Flow Implementation in TD-SCDMA
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9972 
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition.
Problem types: description: NULL Pointer Dereference in MMCP
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9973 
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.
Problem types: description: Improper Input Validation in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9974 
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.
Problem types: description: Improper Input Validation in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9975 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption.
Problem types: description: Improper Authentication in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9976 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.
Problem types: description: Buffer Copy without Checking Size of Input in 1x
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9977 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.
Problem types: description: Buffer Copy without Checking Size of Input in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9978 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.
Problem types: description: Buffer Copy without Checking Size of Input in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9979 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.
Problem types: description: Use of Uninitialized Variable in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z
CVE-2014-9980 
In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory.
Problem types: description: Information Exposure in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-08-18T18:00:00.000Z