Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0302 State: PUBLISHED Published: 2014-06-05T15:00:00 Last Updated: 2024-08-06T14:18:09.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors related to "inclusion of the Amazon SDK testing suite." NOTE: due to lack of details, it is not clear whether the issue exists in ownCloud itself, or in Amazon SDK. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-005/
CVE ID: CVE-2013-0303 State: PUBLISHED Published: 2014-03-23T15:00:00 Last Updated: 2024-08-06T14:18:09.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-006/
CVE ID: CVE-2013-0304 State: PUBLISHED Published: 2014-06-05T15:00:00 Last Updated: 2024-08-06T14:18:09.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to /apps/calendar/export.php. NOTE: this issue has been reported as a cross-site request forgery (CSRF) vulnerability, but due to lack of details, it is uncertain what the root cause is. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-007/ - http://securite.intrinsec.com/wp-content/upload
ences: - http://owncloud.org/about/security/advisories/oC-SA-2013-007/ - http://securite.intrinsec.com/wp-content/uploads/2013/02/ISEC-V2013-01-v-1.0-Owncloud-4.5.4-Arbitrary-calendar-export.pdf
CVE ID: CVE-2013-0305 State: PUBLISHED Published: 2013-05-02T14:00:00 Last Updated: 2024-08-06T14:18:09.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2013/feb/19/security/ - http://ubuntu.com/usn/usn-1757-1 - http://www.debian.org/security/2013/dsa-2634 - http://rhn.redhat.com/errata/RHSA-2013-0670.html
CVE ID: CVE-2013-0306 State: PUBLISHED Published: 2013-05-02T14:00:00 Last Updated: 2024-08-06T14:25:08.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2013/feb/19/security/ - http://ubuntu.com/usn/usn-1757-1 - http://www.debian.org/security/2013/dsa-2634 - http://rhn.redhat.com/errata/RHSA-2013-0
tp://ubuntu.com/usn/usn-1757-1 - http://www.debian.org/security/2013/dsa-2634 - http://rhn.redhat.com/errata/RHSA-2013-0670.html
CVE ID: CVE-2013-0307 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T14:25:08.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-003/
CVE ID: CVE-2013-0308 State: PUBLISHED Published: 2013-03-08T21:00:00 Last Updated: 2024-08-06T14:25:08.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028205 - http://rhn.redhat.com/errata/RHSA-2013-0589.html - https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt - http://s
hat.com/errata/RHSA-2013-0589.html - https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt - http://support.apple.com/kb/HT5937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82329 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html - http://secunia.com/advisories/52361 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586 - http://marc.info/?l=git&m=136134619013145&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html - http://www.securityfocus.com/bid/58148 - http://secunia.com/advisories/52443 - https://bugzilla.redhat.com/show_bug.cgi?id=
p://www.securityfocus.com/bid/58148 - http://secunia.com/advisories/52443 - https://bugzilla.redhat.com/show_bug.cgi?id=909977 - https://bugzilla.novell.com/show_bug.cgi?id=804730 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html - http://secunia.com/advisories/52467
CVE ID: CVE-2013-0309 State: PUBLISHED Published: 2013-02-22T00:00:00 Last Updated: 2024-08-06T14:25:08.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=027ef6c87853b0a9df53175063028edb4950d476 - https://bugzilla.redhat.com/show_bug.cgi?i
valds/linux-2.6.git%3Ba=commit%3Bh=027ef6c87853b0a9df53175063028edb4950d476 - https://bugzilla.redhat.com/show_bug.cgi?id=912898 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.2 - https://github.com/torvalds/linux/commit/027ef6c87853b0a9df53175063028edb4950d476 - http://www.openwall.com/lists/oss-security/2013/02/20/4
CVE ID: CVE-2013-0310 State: PUBLISHED Published: 2013-02-22T00:00:00 Last Updated: 2024-08-06T14:25:08.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0496.html - https://bugzilla.redhat.com/show_bug.cgi?id=912900 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89d7ae
dhat.com/show_bug.cgi?id=912900 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89d7ae34cdda4195809a5a987f697a517a2a3177 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.8 - https://github.com/torvalds/linux/commit/89d7ae34cdda4195809a5a987f697a517a2a3177 - http://www.openwall.com/lists/oss-security/2013/02/20/5
CVE ID: CVE-2013-0311 State: PUBLISHED Published: 2013-02-22T00:00:00 Last Updated: 2024-08-06T14:25:09.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 - http://rhn.redhat.com/er
0018.html - https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 - http://rhn.redhat.com/errata/RHSA-2013-0882.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-0928.html - http://www.openwall.com/lists/oss-security/2013/02/20/6 - http://rhn.redhat.com/errata/RHSA-2013-0579.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 - https://bugzilla.redhat.com/show_bug.cgi?id=912905 - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2
CVE ID: CVE-2013-0312 State: PUBLISHED Published: 2013-03-13T20:48:00Z Last Updated: 2024-09-16T19:41:19.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence. Additional Analyst Notes: - CVE Program Container: References: - http://directory.fedoraproject.org/wiki/Releases/1.3.0.4 - http://secunia.com/advisories/52568 - https://bugzilla.redhat.com/show_bug.cgi?id=912964 - https://fedorahosted.org/389/ticket/571 - http://www.securityfocus.com/bid/58428 - http://rhn.redhat.com/errata/RHSA-2013-0628.html - http://secunia.com/advisories/52279
CVE ID: CVE-2013-0313 State: PUBLISHED Published: 2013-02-22T00:00:00Z Last Updated: 2024-08-06T14:25:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/20/16 - https://bugzilla.redhat.com/show_bug
Container: References: - http://www.openwall.com/lists/oss-security/2013/02/20/16 - https://bugzilla.redhat.com/show_bug.cgi?id=913266 - https://github.com/torvalds/linux/commit/a67adb997419fb53540d4a4f79c6471c60bc69b6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a67adb997419fb53540d4a4f79c6471c60bc69b6 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5
CVE ID: CVE-2013-0314 State: PUBLISHED Published: 2013-04-12T22:00:00Z Last Updated: 2024-08-06T14:25:09.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=913327 - http://secunia.com/advisories/52552 - http://www.osvdb.org/91120 - http://rhn.redhat.com/errata/RHSA-2013-0613.html
CVE ID: CVE-2013-0315 State: PUBLISHED Published: 2013-04-12T22:00:00Z Last Updated: 2024-08-06T14:25:09.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/91121 - http://secunia.com/advisories/52552 - https://bugzilla.redhat.com/show_bug.cgi?id=913340 - http://rhn.redhat.com/errata/RHSA-2013-0613.html
CVE ID: CVE-2013-0316 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T20:42:44.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a large number of new derivative requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupal.org/SA-CORE-2013-002
CVE ID: CVE-2013-0317 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T03:12:57.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupal.org/node/1915408 - http://drupal.org/node/1916312 - http://drupalcode.org/project/og_manager_change.git/commitdiff/ab7152b
CVE ID: CVE-2013-0318 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T16:58:49.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupal.org/node/1916370
CVE ID: CVE-2013-0319 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T03:58:39.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the Yandex.Metrica service data. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901 - http://drupal.org/node/1921340 - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupal.org/node/1921342 - http://drupalcode.org/
1340 - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupal.org/node/1921342 - http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718 - http://drupal.org/node/1922400
CVE ID: CVE-2013-0320 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T19:37:07.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before 7.x-1.0-rc1 for Drupal allows remote attackers to hijack the authentication of users with 'administer taxonomy' permissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1922170 - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/taxonomy_manager.git/commitdiff/2d05801 - http://drupal.
lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/taxonomy_manager.git/commitdiff/2d05801 - http://drupal.org/node/1922168 - http://drupal.org/node/1922410 - http://drupalcode.org/project/taxonomy_manager.git/commitdiff/595f1b3
CVE ID: CVE-2013-0321 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T20:31:21.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/uc_views.git/commitdiff/157d5d3 - http://drupal.org/node/1922128 - http://drupal.org/node/1922416
CVE ID: CVE-2013-0322 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T14:25:09.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/ubercart.git/commitdiff/f9d69b5 - http://secunia.com/advisories/52298 - http://drupal.org/node/1922136 - http://drupal.org/node/1922418
CVE ID: CVE-2013-0323 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T19:20:21.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/ds.git/commitdiff/45d490e - http://drupal.org/node/1922430 - http://drupalcode.org/project/ds.git/commitdiff/90bcd8f - http://drupal.org/node/1922424 - http://drup
rg/node/1922430 - http://drupalcode.org/project/ds.git/commitdiff/90bcd8f - http://drupal.org/node/1922424 - http://drupal.org/node/1922438 - http://drupalcode.org/project/ds.git/commitdiff/665c791
CVE ID: CVE-2013-0324 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T01:10:38.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the "Administer menus and menu items" permission to inject arbitrary web script or HTML via the menu link title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1922446 - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/menu_reference.git/commitdiff/7e7367d - http://drupal.org
ists/oss-security/2013/02/21/5 - http://drupalcode.org/project/menu_reference.git/commitdiff/7e7367d - http://drupal.org/node/1922434
CVE ID: CVE-2013-0325 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T02:06:01.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a (1) Watchdog message or (2) admin setting. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1922756 - http://www.openwall.com/lists/oss-security/2013/02/21/5 - http://drupalcode.org/project/varnish.git/commitdiff/f69a62c - http://drupalcode.org/project/varnish.git/commitdiff
/5 - http://drupalcode.org/project/varnish.git/commitdiff/f69a62c - http://drupalcode.org/project/varnish.git/commitdiff/e6726b4 - http://drupal.org/node/1922726 - http://drupal.org/node/1922730
CVE ID: CVE-2013-0326 State: PUBLISHED Published: 2019-12-05T16:09:36 Last Updated: 2024-08-06T14:25:09.127Z Vendors: openstack-nova Products: openstack-nova Problem Types: images permissions world readable Description: OpenStack nova base images permissions are world readable Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-0326 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0326 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-0326 - https://access.redhat.com/security/cve/cve-2013-0326
CVE ID: CVE-2013-0327 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T14:25:09.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0638.html - http://www.openwall.com/lists/oss-security/2013/02/21/7 - https://bugzilla.redhat.com/show_bug.cgi?id=914875 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.o
d=914875 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
CVE ID: CVE-2013-0328 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T14:25:09.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0638.html - https://bugzilla.redhat.com/show_bug.cgi?id=914876 - http://www.openwall.com/lists/oss-security/2013/02/21/7 - http://www.securityfocus.com/bid/57994 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - http
w.securityfocus.com/bid/57994 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
CVE ID: CVE-2013-0329 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T14:25:09.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=914877 - http://rhn.redhat.com/errata/RHSA-2013-0638.html - http://www.openwall.com/lists/oss-security/2013/02/21/7 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Sec
.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
CVE ID: CVE-2013-0330 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T14:25:09.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0638.html - http://www.openwall.com/lists/oss-security/2013/02/21/7 - http://www.securityfocus.com/bid/57994 - https://bugzilla.redhat.com/show_bug.cgi?id=914878 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - htt
hat.com/show_bug.cgi?id=914878 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16