{"api_version":"1","generated_at":"2026-07-23T12:15:03+00:00","cve":"CVE-2014-9282","urls":{"html":"https://cve.report/CVE-2014-9282","api":"https://cve.report/api/cve/CVE-2014-9282.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-9282","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-9282"},"summary":{"title":"CVE-2014-9282","description":"Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename.","state":"PUBLISHED","assigner":"jpcert","published_at":"2015-02-24 20:59:02","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023","name":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://jvn.jp/en/jp/JVN42768331/index.html","name":"http://jvn.jp/en/jp/JVN42768331/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"JVN#42768331: Speed Software Root Explorer and Explorer vulnerable to directory traversal","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9282","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9282","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"9282","vulnerable":"1","versionEndIncluding":"2.1.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"speed_software","cpe5":"explorer","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"9282","vulnerable":"1","versionEndIncluding":"3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"speed_software","cpe5":"root_explorer","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T13:40:25.040Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"JVN#42768331","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN42768331/index.html"},{"name":"JVNDB-2015-000023","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-02-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2015-02-24T20:57:01.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"name":"JVN#42768331","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN42768331/index.html"},{"name":"JVNDB-2015-000023","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2014-9282","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"JVN#42768331","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN42768331/index.html"},{"name":"JVNDB-2015-000023","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2014-9282","datePublished":"2015-02-24T20:00:00.000Z","dateReserved":"2014-12-05T00:00:00.000Z","dateUpdated":"2024-08-06T13:40:25.040Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-02-24 20:59:02","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speed_software:explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.5","matchCriteriaId":"7203B3D1-4E96-4278-8E51-F810C675BCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:speed_software:root_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"45D5DD44-F14E-4542-9907-A84020865219"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"9282","Ordinal":"1","Title":"CVE-2014-9282","CVE":"CVE-2014-9282","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"9282","Ordinal":"1","NoteData":"Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename.","Type":"Description","Title":"CVE-2014-9282"},{"CveYear":"2014","CveId":"9282","Ordinal":"2","NoteData":"2015-02-24","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"9282","Ordinal":"3","NoteData":"2015-02-24","Type":"Other","Title":"Modified"}]}}}