Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1370 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:57:04.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-13
pecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1372, and CVE-2013-1373. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-1371 State: PUBLISHED Published: 2013-03-13T10:00:00 Last Updated: 2024-08-06T14:57:05.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lis
(memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb13-09.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0643.html
CVE ID: CVE-2013-1372 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:57:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-13
pecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-1373 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:57:05.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-13
pecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1372. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-1374 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:57:05.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649. Additional Analyst Notes:
code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-1375 State: PUBLISHED Published: 2013-03-13T10:00:00 Last Updated: 2024-08-06T14:57:05.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/op
e via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb13-09.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0643.html
CVE ID: CVE-2013-1376 State: PUBLISHED Published: 2014-01-30T15:00:00 Last Updated: 2024-08-06T14:57:05.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-02.html
CVE ID: CVE-2013-1377 State: PUBLISHED Published: 2013-07-31T01:00:00Z Last Updated: 2024-09-16T23:31:25.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-20.html
CVE ID: CVE-2013-1378 State: PUBLISHED Published: 2013-04-10T01:00:00 Last Updated: 2024-08-06T14:57:05.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1380. Additional Analyst Notes: - CVE Program Container: References:
ed vectors, a different vulnerability than CVE-2013-1380. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html - http://www.adobe.com/support/security/bulletins/apsb13-11.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0730.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html
CVE ID: CVE-2013-1379 State: PUBLISHED Published: 2013-04-10T01:00:00 Last Updated: 2024-08-06T14:57:05.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Referen
enial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html - http://www.adobe.com/support/security/bulletins/apsb13-11.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0730.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html
CVE ID: CVE-2013-1380 State: PUBLISHED Published: 2013-04-10T01:00:00 Last Updated: 2024-08-06T14:57:05.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1378. Additional Analyst Notes: - CVE Program Container: References:
ed vectors, a different vulnerability than CVE-2013-1378. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html - http://www.adobe.com/support/security/bulletins/apsb13-11.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0730.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html
CVE ID: CVE-2013-1381 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1382 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1383 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-16T20:38:02.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-12.html
CVE ID: CVE-2013-1384 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-17T03:54:57.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1386. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-12.html
CVE ID: CVE-2013-1385 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-16T18:17:46.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-12.html
CVE ID: CVE-2013-1386 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-16T16:24:02.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1384. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-12.html
CVE ID: CVE-2013-1387 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-16T20:47:08.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-10.html
CVE ID: CVE-2013-1388 State: PUBLISHED Published: 2013-04-10T01:00:00Z Last Updated: 2024-09-16T18:08:49.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-10.html
CVE ID: CVE-2013-1389 State: PUBLISHED Published: 2013-05-16T10:00:00Z Last Updated: 2024-09-16T23:16:34.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before Update 10 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-13.html
CVE ID: CVE-2013-1391 State: PUBLISHED Published: 2019-10-30T20:36:40 Last Updated: 2024-08-06T14:57:05.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure - http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html - https://www.securityfocus.com/bid/57579/info
CVE ID: CVE-2013-1393 State: PUBLISHED Published: 2013-06-20T21:00:00 Last Updated: 2024-08-06T14:57:05.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CurvyCorners module 6.x-1.x and 7.x-1.x for Drupal allows remote authenticated users with the "administer curvycorners" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/119814/CurvyCorners-Cross-Site-Scripting.html - http://packetstormsecurity.com/files/119766/Drupal-CurvyCorners-6.x-7.x-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2013
ecurity.com/files/119766/Drupal-CurvyCorners-6.x-7.x-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2013/Jan/218 - http://osvdb.org/89571 - http://seclists.org/fulldisclosure/2013/Jan/211 - http://www.securityfocus.com/bid/57526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81499 - http://www.csnc.ch/misc/files/advisories/CVE-2013-1393.txt - https://drupal.org/node/1896718
CVE ID: CVE-2013-1397 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T14:57:05.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51980 - http://www.securityfocus.com/bid/57574 - http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/81551
CVE ID: CVE-2013-1398 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T14:57:05.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-1398
CVE ID: CVE-2013-1399 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T14:57:05.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet Enterprise (PE) before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://puppetlabs.com/security/cve/cve-2013-1399
CVE ID: CVE-2013-1400 State: PUBLISHED Published: 2020-02-13T20:19:32 Last Updated: 2024-08-06T14:57:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81466 - https://www.securityfocus.com/archive/1/525370
CVE ID: CVE-2013-1401 State: PUBLISHED Published: 2020-02-13T20:48:39 Last Updated: 2024-08-06T14:57:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57479 - https://www.securityfocus.com/archive/1/525370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81467
CVE ID: CVE-2013-1402 State: PUBLISHED Published: 2013-02-14T22:00:00Z Last Updated: 2024-09-17T00:52:18.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a direct request to configuration/general_configuration.html. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-01/0095.html
CVE ID: CVE-2013-1405 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-17T03:38:50.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/secur
n) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2013-0001.html
CVE ID: CVE-2013-1406 State: PUBLISHED Published: 2013-02-11T22:00:00 Last Updated: 2024-08-06T14:57:05.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.ci
ain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164 - http://www.vmware.com/security/advisories/VMSA-2013-0002.html
CVE ID: CVE-2013-1407 State: PUBLISHED Published: 2014-05-13T14:00:00 Last Updated: 2024-08-06T14:57:05.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) scope parameter to index.php; (2) user_name, (3) dbem_phone, (4) user_email, or (5) booking_comment parameter to an event with registration enabled; or the (6) _wpnonce parameter to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bu
min/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-03/0034.html - http://wp-events-plugin.com/blog/2013/01/22/5-3-5-released-includes-a-security-update - https://www.htbridge.com/advisory/HTB23139