Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2013-1567
Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-2395.
Affected Products: n/a
References: [{'name': '53372', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53372'}, {'name': 'GLSA-201308-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201308-06.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html'}, {'name': 'MDVSA-2013:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:150'}]
CVE State: PUBLISHED
Explain CVE-2013-1568
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 6.2.0 allows remote authenticated users to affect availability via unknown vectors related to CB.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html'}, {'name': 'MDVSA-2013:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:150'}]
CVE State: PUBLISHED
Explain CVE-2013-1570
Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote attackers to affect availability via unknown vectors related to MemCached.
Affected Products: n/a
References: [{'name': '53372', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53372'}, {'name': 'GLSA-201308-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201308-06.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html'}, {'name': 'MDVSA-2013:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:150'}]
CVE State: PUBLISHED
Explain CVE-2013-1572
The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'name': 'oval:org.mitre.oval:def:16423', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16423'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-slowprotocols.c?r1=46336&r2=46335&pathrev=46336'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8036'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46336'}]
CVE State: PUBLISHED
Explain CVE-2013-1573
The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46335'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-csn1.c?r1=46335&r2=46334&pathrev=46335'}, {'name': 'oval:org.mitre.oval:def:16016', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16016'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8037'}]
CVE State: PUBLISHED
Explain CVE-2013-1574
The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46345'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8038'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'oval:org.mitre.oval:def:16323', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16323'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-bthci_cmd.c?r1=46345&r2=46344&pathrev=46345'}]
CVE State: PUBLISHED
Explain CVE-2013-1575
The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'name': 'oval:org.mitre.oval:def:16291', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16291'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-assa_r3.c?r1=46415&r2=46414&pathrev=46415'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8040'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46415'}]
CVE State: PUBLISHED
Explain CVE-2013-1576
The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46344'}, {'name': 'oval:org.mitre.oval:def:16450', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16450'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sdp.c?r1=46344&r2=46343&pathrev=46344'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8041'}]
CVE State: PUBLISHED
Explain CVE-2013-1577
The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8042'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=46340&r2=46339&pathrev=46340'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46340'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'name': 'oval:org.mitre.oval:def:16253', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16253'}]
CVE State: PUBLISHED
Explain CVE-2013-1578
The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:16205', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16205'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8043'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-pw-eth.c?r1=46420&r2=46419&pathrev=46420'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46420'}]
CVE State: PUBLISHED
Explain CVE-2013-1579
The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=47046'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8198'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'name': 'oval:org.mitre.oval:def:16230', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps.c?r1=47046&r2=47045&pathrev=47046'}]
CVE State: PUBLISHED
Explain CVE-2013-1580
The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8199'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=47045'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/plugins/docsis/packet-cmstatus.c?r1=47045&r2=47044&pathrev=47045'}, {'name': 'oval:org.mitre.oval:def:15509', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15509'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}]
CVE State: PUBLISHED
Explain CVE-2013-1581
The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=47123'}, {'name': 'oval:org.mitre.oval:def:16370', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=47123&r2=47122&pathrev=47123'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8222'}]
CVE State: PUBLISHED
Explain CVE-2013-1582
The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=45646'}, {'name': 'DSA-2625', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2625'}, {'name': 'oval:org.mitre.oval:def:16426', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-clnp.c?r1=45646&r2=45645&pathrev=45646'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-02.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}]
CVE State: PUBLISHED
Explain CVE-2013-1583
The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:16304', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16304'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-03.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46577'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7945'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dtn.c?r1=46577&r2=46576&pathrev=46577'}]
CVE State: PUBLISHED
Explain CVE-2013-1584
The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46579'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-03.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7945'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dtn.c?r1=46579&r2=46578&pathrev=46579'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'name': 'oval:org.mitre.oval:def:16092', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16092'}]
CVE State: PUBLISHED
Explain CVE-2013-1585
epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:15801', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15801'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-04.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46705'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8112'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/tvbuff.c?r1=46705&r2=46704&pathrev=46705'}]
CVE State: PUBLISHED
Explain CVE-2013-1586
The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/reassemble.c?r1=46999&r2=46998&pathrev=46999'}, {'name': 'DSA-2625', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2625'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=46999'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8111'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-05.html'}, {'name': 'oval:org.mitre.oval:def:16048', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16048'}]
CVE State: PUBLISHED
Explain CVE-2013-1587
The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:16462', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16462'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=44700'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7679'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rohc.c?r1=44700&r2=44699&pathrev=44700'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-06.html'}]
CVE State: PUBLISHED
Explain CVE-2013-1588
Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8213'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=47098'}, {'name': 'DSA-2625', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2625'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-07.html'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'name': 'oval:org.mitre.oval:def:16402', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16402'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=47098&r2=47097&pathrev=47098'}]
CVE State: PUBLISHED
Explain CVE-2013-1589
Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc/trunk/epan/proto.c?r1=47114&r2=47113&pathrev=47114'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-08.html'}, {'name': 'oval:org.mitre.oval:def:16319', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16319'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8197'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=revision&revision=47114'}]
CVE State: PUBLISHED
Explain CVE-2013-1590
Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2013-09.html'}, {'name': 'DSA-2625', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2625'}, {'name': 'oval:org.mitre.oval:def:16004', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16004'}, {'name': 'openSUSE-SU-2013:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html'}, {'name': 'openSUSE-SU-2013:0276', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html'}]
CVE State: PUBLISHED
Explain CVE-2013-1591
Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors.  NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.palemoon.org/releasenotes-ng.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077'}, {'name': 'RHSA-2013:0687', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0687.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=910149'}, {'name': 'RHSA-2013:0746', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0746.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f'}, {'name': 'MDVSA-2013:116', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:116'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.f5.com/csp/article/K51392553'}]
CVE State: PUBLISHED
Explain CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/57956'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82064'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exploit-db.com/exploits/24511'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitytracker.com/id/1028148'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1592'}]
CVE State: PUBLISHED
Explain CVE-2013-1593
A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/57956'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitytracker.com/id/1028148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82065'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1593'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2013-1594
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59572'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83943'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exploit-db.com/exploits/25139'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1594'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt'}]
CVE State: PUBLISHED
Explain CVE-2013-1595
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59573'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83944'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1595'}]
CVE State: PUBLISHED
Explain CVE-2013-1596
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59574'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83945'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1596'}]
CVE State: PUBLISHED
Explain CVE-2013-1597
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59576'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83947'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1597'}]
CVE State: PUBLISHED
Explain CVE-2013-1598
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59575'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83946'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1598'}]
CVE State: PUBLISHED
Explain CVE-2013-1599
A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00, DCS-7410 1.00, DCS-7510 1.00, and WCS-1100 1.02, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exploit-db.com/exploits/25138'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83941'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1599'}, {'name': 'CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'https://seclists.org/fulldisclosure/2013/Apr/253'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2013-1600
An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-2121 1.06_FR, 1.06, and 1.05_RU, DCS-2102 1.06_FR. 1.06, and 1.05_RU, which could let a malicious user obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59566'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83916'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1600'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.8572'}]
CVE State: PUBLISHED
Explain CVE-2013-1601
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03, which could let a malicious user obtain sensitive information. which could let a malicious user obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59570'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83939'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1601'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.8573'}]
CVE State: PUBLISHED
Explain CVE-2013-1602
An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04_US, DCS-1130 1.03/1.04_US , DCS-2102 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-2121 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.0, DCS-7410 1.0, DCS-7510 1.0, and WCS-1100 1.02, which could let a malicious user obtain unauthorized access to video streams.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59569'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83942'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1602'}]
CVE State: PUBLISHED
Explain CVE-2013-1603
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59571'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83940'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.8575'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/cve/CVE-2013-1603'}]
CVE State: PUBLISHED
Explain CVE-2013-1604
Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.
Affected Products: n/a
References: [{'name': 'maygion-ipcamera-cve20131604-dir-traversal(84589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/84589'}, {'name': '20130528 CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/May/194'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities'}, {'name': '25813', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/25813'}, {'name': '60192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60192'}]
CVE State: PUBLISHED
Explain CVE-2013-1605
Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long filename in a GET request.
Affected Products: n/a
References: [{'name': '60196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60196'}, {'name': '20130528 CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/May/194'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities'}, {'name': '93708', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/93708'}, {'name': '25813', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/25813'}, {'name': 'maygion-ipcamera-cve20131605-bo(84590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/84590'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/121787/MayGion-IP-Camera-Path-Traversal-Buffer-Overflow.html'}]
CVE State: PUBLISHED
Explain CVE-2013-1606
Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
Affected Products: n/a
References: [{'name': '26138', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/26138/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti-aircam-rtsp-service'}]
CVE State: PUBLISHED
Explain CVE-2013-1607
Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82563'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.securityfocus.com/bid/58303/info'}]
CVE State: PUBLISHED
Explain CVE-2013-1608
Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read arbitrary files via unspecified vectors.
Affected Products: n/a
References: [{'name': '58542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58542'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130320_00'}]
CVE State: PUBLISHED
Explain CVE-2013-1609
Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130321_00'}, {'name': '58617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58617'}]
CVE State: PUBLISHED
Explain CVE-2013-1610
Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
Affected Products: n/a
References: [{'name': '61489', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/61489'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_01'}]
CVE State: PUBLISHED
Explain CVE-2013-1611
Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9.5.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130508_00'}, {'name': '59700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59700'}]
CVE State: PUBLISHED
Explain CVE-2013-1612
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20130618_00'}, {'name': '60542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60542'}]
CVE State: PUBLISHED
Explain CVE-2013-1613
SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00'}, {'name': '60796', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60796'}]
CVE State: PUBLISHED
Explain CVE-2013-1614
Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00'}, {'name': '60797', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60797'}]
CVE State: PUBLISHED
Explain CVE-2013-1615
The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00'}, {'name': '60798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60798'}]
CVE State: PUBLISHED