Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4609 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-17T01:05:49.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2013-4610 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-17T00:21:36.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2013-4611 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-17T04:19:21.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2013-4612 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-17T00:20:53.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE ID: CVE-2013-4613 State: PUBLISHED Published: 2013-06-21T21:00:00Z Last Updated: 2024-09-16T17:27:45.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed t
ser has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password." Additional Analyst Notes: - CVE Program Container: References: - http://www.mattandreko.com/2013/06/canon-y-u-no-security.html - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html
CVE ID: CVE-2013-4614 State: PUBLISHED Published: 2013-06-21T21:00:00Z Last Updated: 2024-09-17T01:37:09.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb - http://www.mattandreko.com/2013/06/canon-y-u-no-sec
ework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb - http://www.mattandreko.com/2013/06/canon-y-u-no-security.html - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html
CVE ID: CVE-2013-4615 State: PUBLISHED Published: 2013-06-21T21:00:00Z Last Updated: 2024-09-17T03:32:37.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to English/pages_MacUS/cgi_lan.cgi followed by a direct request to English/pages_MacUS/lan_set_content.html. NOTE: the vendor has apparently responded by stating "Canon believes that its printers will not have to deal with unauthorized access to the network from an external location as long as the printers are used in a secured environment."
unauthorized access to the network from an external location as long as the printers are used in a secured environment." Additional Analyst Notes: - CVE Program Container: References: - http://www.mattandreko.com/2013/06/canon-y-u-no-security.html - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/canon_wireless_printer.rb - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html
CVE ID: CVE-2013-4616 State: PUBLISHED Published: 2013-06-18T14:00:00 Last Updated: 2024-08-06T16:52:26.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack that leverages the insufficient number of possible passphrases. Additional Analyst Notes: - CVE Program Container: References: - http://lists.owasp.org/pipermail/owasp-mobile-security-project/2013-June/000640.html - http://www.securitytr
ferences: - http://lists.owasp.org/pipermail/owasp-mobile-security-project/2013-June/000640.html - http://www.securitytracker.com/id/1029054 - http://www1.cs.fau.de/hotspot - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://www1.cs.fau.de/filepool/projects/hotspot/hotspot.pdf - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-4617 State: PUBLISHED Published: 2013-11-27T18:00:00 Last Updated: 2024-08-06T16:52:26.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.navixia.com/blog/entry/navixia-finds-critical-vulnerabilities-in-jahia-cve-2013-3920-cve-2013-4617.html
CVE ID: CVE-2013-4619 State: PUBLISHED Published: 2013-08-09T21:00:00Z Last Updated: 2024-09-17T02:26:22.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_range.php, or the (3) form_newid parameter to custom/chart_tracker.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/openemr/code/ci/8a8a4607ba5ae2b9eb6b6a3b1b8ed7c6ea7e03b1/ - http://secunia.com/advisories/54083 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-018.txt - http://
03b1/ - http://secunia.com/advisories/54083 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-018.txt - http://sourceforge.net/p/openemr/discussion/202506/thread/4854b2b1/#9658
CVE ID: CVE-2013-4620 State: PUBLISHED Published: 2013-08-09T21:00:00Z Last Updated: 2024-09-16T21:56:38.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/openemr/code/ci/8a8a4607ba5ae2b9eb6b6a3b1b8ed7c6ea7e03b1/ - http://secunia.com/advisories/54083 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-018.txt - http://sourceforge.net/p/openemr/discussion/202506/thread/4854b2b1/#9658
CVE ID: CVE-2013-4621 State: PUBLISHED Published: 2019-12-27T16:21:24 Last Updated: 2024-08-06T16:52:26.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85252
CVE ID: CVE-2013-4622 State: PUBLISHED Published: 2013-06-19T10:00:00Z Last Updated: 2024-09-16T19:14:59.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area. Additional Analyst Notes: - CVE Program Container: References: - http://www1.cs.fau.de/filepool/projects/hotspot/hotspot.pdf - http://support.verizonwireless.com/clc/devices/knowledge_base.html?id=35523
CVE ID: CVE-2013-4623 State: PUBLISHED Published: 2013-09-30T20:00:00 Last Updated: 2024-08-06T16:52:26.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certificate message that contains a PEM encoded certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116351.html - https://polarssl.org/tech-updates/security-advisorie
project.org/pipermail/package-announce/2013-September/116351.html - https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-03 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115922.html - https://bugzilla.redhat.com/show_bug.cgi?id=997767 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115927.html - https://github.com/polarssl/polarssl/commit/1922a4e6aade7b1d685af19d4d9339ddb5c02859 - http://www.debian.org/security/2013/dsa-2782 - http://www.securityfocus.com/bid/61764
CVE ID: CVE-2013-4624 State: PUBLISHED Published: 2013-11-27T18:00:00 Last Updated: 2024-08-06T16:52:26.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via (1) the site parameter to engines/manager.jsp, (2) the searchString parameter to administration/ in a search action, or the (3) username, (4) firstName, (5) lastName, (6) email, or (7) organization field to administration/ in a users action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23159
CVE ID: CVE-2013-4625 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T16:52:26.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122535/WordPress-Duplicator-0.4.4-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85939 - http://osvdb.org/95627 - http://support.lifeinthegrid.com/knowledgebase.php?article=20 - http
om/vulnerabilities/85939 - http://osvdb.org/95627 - http://support.lifeinthegrid.com/knowledgebase.php?article=20 - https://www.htbridge.com/advisory/HTB23162 - http://www.securityfocus.com/bid/61425 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0161.html
CVE ID: CVE-2013-4626 State: PUBLISHED Published: 2013-09-26T15:00:00Z Last Updated: 2024-09-16T20:22:02.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/backwpup/changelog - http://www.securityfocus.com/bid/61904 - http://secunia.com/advisories/54515 - https://www.htbridge.com/advisory/HTB23161 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0127.html
CVE ID: CVE-2013-4627 State: PUBLISHED Published: 2013-08-01T16:00:00Z Last Updated: 2024-09-16T19:41:14.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a denial of service (memory consumption) via a large amount of tx message data. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE ID: CVE-2013-4628 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-17T03:06:58.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firewall module on the Huawei Quidway Service Process Unit (SPU) board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261458.htm
CVE ID: CVE-2013-4629 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T16:19:01.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm
CVE ID: CVE-2013-4630 State: PUBLISHED Published: 2013-06-20T15:00:00 Last Updated: 2024-08-06T16:52:26.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/25295 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-260626.htm
CVE ID: CVE-2013-4631 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T21:58:23.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service (device crash) via malformed SNMPv3 requests that leverage unspecified overflow issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-260601.htm
CVE ID: CVE-2013-4632 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-16T17:08:33.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei Access Router (AR) before V200R002SPC003 allows remote attackers to cause a denial of service (device reset) via a crafted field in a DHCP request, as demonstrated by a request from an IP phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-258476.htm
CVE ID: CVE-2013-4633 State: PUBLISHED Published: 2013-06-20T15:00:00Z Last Updated: 2024-09-17T01:06:56.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-258449.htm
CVE ID: CVE-2013-4634 State: PUBLISHED Published: 2013-06-20T23:00:00 Last Updated: 2024-08-06T16:52:26.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the jQuery autocomplete for indexed_search (rzautocomplete) extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84659 - http://secunia.com/advisories/53633 - http://osvdb.org/93815 - http://typo3.org/extensions/repository/view/rzautocomplete - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-e
/extensions/repository/view/rzautocomplete - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/ - http://www.securityfocus.com/bid/60276
CVE ID: CVE-2013-4635 State: PUBLISHED Published: 2013-06-21T21:00:00 Last Updated: 2024-08-06T16:52:26.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028699 - http://secunia.com/advisories/54104 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html - http://www.ubuntu.com/usn/USN-1905-1 - http://ww
//lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html - http://www.ubuntu.com/usn/USN-1905-1 - http://www.php.net/ChangeLog-5.php - http://www.attrition.org/pipermail/vim/2013-June/002697.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html - https://bugs.php.net/bug.php?id=64895
CVE ID: CVE-2013-4636 State: PUBLISHED Published: 2013-06-21T21:00:00Z Last Updated: 2024-09-16T18:49:25.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=64830 - http://www.php.net/ChangeLog-5.php
CVE ID: CVE-2013-4649 State: PUBLISHED Published: 2014-03-12T14:00:00 Last Updated: 2024-08-06T16:52:27.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53493 - http://packetstormsecurity.com/files/122792/DotNetNuke-DNN-7.1.0-6.2.8-Cross-Site-Scripting.html - http://www.dnnsoftware.com/platform/manage/security-center - https://exchange.xforce.ibmcloud.com/vulnerabilities/86432
CVE ID: CVE-2013-4650 State: PUBLISHED Published: 2013-07-04T10:00:00Z Last Updated: 2024-09-16T23:11:11.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-9983 - http://www.mongodb.org/about/alerts/
CVE ID: CVE-2013-4651 State: PUBLISHED Published: 2013-07-31T18:00:00Z Last Updated: 2024-09-17T03:32:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
CVE ID: CVE-2013-4652 State: PUBLISHED Published: 2013-07-31T18:00:00Z Last Updated: 2024-09-16T22:26:37.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
CVE ID: CVE-2013-4653 State: PUBLISHED Published: 2013-08-20T00:00:00 Last Updated: 2024-08-06T16:52:27.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System (AMDS) before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and OmniTouch 8400 Instant Communications Suite before 6.7.3 (1) allow remote attackers to inject arbitrary web script or HTML via a crafted URL that results in a reflected XSS or (2) allow user-assisted remote attackers to inject arbitrary
r HTML via a crafted URL that results in a reflected XSS or (2) allow user-assisted remote attackers to inject arbitrary web script or HTML via a user's personal bookmark entry that results in a stored XSS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85382 - http://www.securityfocus.com/bid/60902 - http://secunia.com/advisories/54000 - http://www3.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2013001.htm - http://osvdb.org/94810
CVE ID: CVE-2013-4654 State: PUBLISHED Published: 2019-11-13T15:56:46 Last Updated: 2024-08-06T16:52:26.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE ID: CVE-2013-4655 State: PUBLISHED Published: 2019-11-13T15:16:12 Last Updated: 2024-08-06T16:52:26.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf