Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261 - https://bugzilla.redhat.com/show_bug.cgi?id=978453
CVE ID: CVE-2013-4192 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261 - https://bugzilla.redhat.com/show_bug.cgi?id=978464
CVE ID: CVE-2013-4193 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:01.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261 - https://bugzilla.redhat.com/show_bug.cgi?id=
/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261 - https://bugzilla.redhat.com/show_bug.cgi?id=978469
CVE ID: CVE-2013-4194 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:02.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978470 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261
CVE ID: CVE-2013-4195 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978471 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/
71 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261
CVE ID: CVE-2013-4196 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:02.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978475 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists
CVE ID: CVE-2013-4197 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:01.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261 - https://bugzilla.redhat.com/show_bug.cgi?id=978478
CVE ID: CVE-2013-4198 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:01.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978480 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261
CVE ID: CVE-2013-4199 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:38:01.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978482 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/os
ity/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - http://seclists.org/oss-sec/2013/q3/261
CVE ID: CVE-2013-4200 State: PUBLISHED Published: 2014-01-21T16:00:00 Last Updated: 2024-08-06T16:38:01.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allow_external_login_sites filtering property, redirect users to arbitrary web sites, and conduct phishing attacks via a space before a URL in the "next" parameter to acl_users/credentials_cookie_auth/require_login. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.c
ntials_cookie_auth/require_login. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/01/2 - http://plone.org/products/plone/security/advisories/20130618-announcement - http://plone.org/products/plone-hotfix/releases/20130618 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4200 - http://www.securityfocus.com/archive/1/530787/100/0/threaded
CVE ID: CVE-2013-4201 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T16:38:01.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=991318
CVE ID: CVE-2013-4202 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T16:38:01.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1198.html - https://bugs.launchpad.net/ossa/+bug/1190229 - http://www.ubuntu.com/usn/USN-
hn.redhat.com/errata/RHSA-2013-1198.html - https://bugs.launchpad.net/ossa/+bug/1190229 - http://www.ubuntu.com/usn/USN-2005-1
CVE ID: CVE-2013-4203 State: PUBLISHED Published: 2013-10-11T22:00:00Z Last Updated: 2024-09-16T19:30:37.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/03/2 - https://github.com/rcook/rgpg/commit/b819b13d198495f3ecd2762a0dbe27bb6fae3505
CVE ID: CVE-2013-4204 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T16:38:01.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/05/1 - http://www.securityfocus.com/bid/61590 - http://www.openwall.com/lists/oss-security/2013/08/05/3 - http://www.gwtproject.org/release-notes.html#Release_Notes_2_5_1_RC1
CVE ID: CVE-2013-4205 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:38:01.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the unshare_userns function in kernel/user_namespace.c in the Linux kernel before 3.10.6 allows local users to cause a denial of service (memory consumption) via an invalid CLONE_NEWUSER unshare call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/6160968cee8b90a5dd95318d716e31d7775c4ef3 - http://www.openwall.com/lists/oss-security/2013/08/06/2 - http://twitter.com/grsecurity/statuses/364566062336978944 - http://www.kernel.org/pub/linux/kernel/v3.x/Chang
/08/06/2 - http://twitter.com/grsecurity/statuses/364566062336978944 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.6 - http://www.ubuntu.com/usn/USN-1971-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6160968cee8b90a5dd95318d716e31d7775c4ef3 - http://www.ubuntu.com/usn/USN-1974-1
CVE ID: CVE-2013-4206 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:38:01.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/06/11 - http://secunia.com/advisories/54533 - http://www.chiark.greenend.or
/www.openwall.com/lists/oss-security/2013/08/06/11 - http://secunia.com/advisories/54533 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html - http://www.debian.org/security/2013/dsa-2736 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html - http://secunia.com/advisories/54379 - http://svn.tartarus.org/sgt/putty/sshbn.c?sortby=date&r1=9977&r2=9976&pathrev=9977
CVE ID: CVE-2013-4207 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:38:01.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/06/11 - http://secunia.com/advisories/54533 - http://www.debian.org/security/201
openwall.com/lists/oss-security/2013/08/06/11 - http://secunia.com/advisories/54533 - http://www.debian.org/security/2013/dsa-2736 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html - http://secunia.com/advisories/54379
CVE ID: CVE-2013-4208 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:38:01.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/06/11 - http://secunia.com/advisories/54533 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html - http://www.debian.org/security/2013/d
//www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html - http://www.debian.org/security/2013/dsa-2736 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html - http://secunia.com/advisories/54379
CVE ID: CVE-2013-4209 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T16:38:01.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=991604
CVE ID: CVE-2013-4210 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T16:38:01.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1373.html - http://rhn.redhat.com/errata/RHSA-2013-1369.html - http://rhn.redhat.com/errata/RHSA-2013-1372.html - ht
013-1373.html - http://rhn.redhat.com/errata/RHSA-2013-1369.html - http://rhn.redhat.com/errata/RHSA-2013-1372.html - http://rhn.redhat.com/errata/RHSA-2013-1370.html - http://rhn.redhat.com/errata/RHSA-2013-1371.html - http://rhn.redhat.com/errata/RHSA-2013-1448.html - http://rhn.redhat.com/errata/RHSA-2013-1374.html
CVE ID: CVE-2013-4211 State: PUBLISHED Published: 2020-02-14T19:59:06 Last Updated: 2024-08-06T16:38:01.692Z Vendors: OpenX Products: Ad Server Problem Types: backdoor Description: A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61650 - http://www.exploit-db.com/exploits/27529 - http://www.openwall.com/lists/oss-security/2013/08/07/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86259 - https://packetstormsecurity.com/files/cve/CVE-2013-4211
CVE ID: CVE-2013-4212 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T16:38:01.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection." Additional Analyst Notes: - CVE Program Container: References: - http://rollerweblogger.org/project/entry/apache_roller_5_0_2 - http://www.osvdb.org/100342 - http://www.exploit-db.com/exploits/2985
rweblogger.org/project/entry/apache_roller_5_0_2 - http://www.osvdb.org/100342 - http://www.exploit-db.com/exploits/29859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89239 - http://secunia.com/advisories/55862 - http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html - http://secunia.com/advisories/55877
CVE ID: CVE-2013-4213 State: PUBLISHED Published: 2013-08-16T16:00:00 Last Updated: 2024-08-06T16:38:01.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1152.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86387 - http://osvdb.org/96216 - http://secunia.com/advisories/54508 - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://www.securitytracker.com/id/1028898 - htt
om/advisories/54508 - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://www.securitytracker.com/id/1028898 - https://bugzilla.redhat.com/show_bug.cgi?id=985359 - http://rhn.redhat.com/errata/RHSA-2013-1151.html
CVE ID: CVE-2013-4214 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T16:38:01.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1526.html - https://bugzilla.redhat.com/show_bug.cgi?id=958002 - https://www.nagios.org/projects/nagios-core/history/4x/ - http://www.securityfocus.com/bid/61747
CVE ID: CVE-2013-4215 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T16:38:01.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPXPING_COMMAND in contrib/check_ipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.nagios.org/view.php?id=451 - https://bugzilla.redhat.com/show_bug.cgi?id=957482 - http://seclists.org/oss-sec/2013/q3/310 - http://osvdb.org/96085
CVE ID: CVE-2013-4216 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Trace_OpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users to cause a denial of service (data corruption) by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/08/17 - https://bugzilla.redhat.com/show_bug.c
ntainer: References: - http://www.openwall.com/lists/oss-security/2013/08/08/17 - https://bugzilla.redhat.com/show_bug.cgi?id=911122
CVE ID: CVE-2013-4217 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSAL_Crypt_SetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimax_osal_crypt_services.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a password, which allows local users to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=911121 - http://www.openwall.co
otes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=911121 - http://www.openwall.com/lists/oss-security/2013/08/08/17
CVE ID: CVE-2013-4218 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicant_key.pem on all systems, which allows local users to obtain sensitive information via unspecified decryption operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/08/17 - https://bugzilla.redhat.com/show_bug
Container: References: - http://www.openwall.com/lists/oss-security/2013/08/08/17 - https://bugzilla.redhat.com/show_bug.cgi?id=911126
CVE ID: CVE-2013-4219 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices allow remote attackers to cause a denial of service (component crash) or possibly execute arbitrary code via an L5 connection with a crafted PDU value that triggers a heap-based buffer overflow within (1) L5SocketsDispatcher.c or (2) L5Connector.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=911129 - http://www.openwall.com/lists/oss-secur
am Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=911129 - http://www.openwall.com/lists/oss-security/2013/08/08/17
CVE ID: CVE-2013-4220 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bad_mode function in arch/arm64/kernel/traps.c in the Linux kernel before 3.9.5 on the ARM64 platform allows local users to cause a denial of service (system crash) via vectors involving an attempted register access that triggers an unexpected value in the Exception Syndrome Register (ESR). Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9955ac47f4ba1c95ecb6092aeaefb40a22e99268 - http://www.openwall.com/lists/oss-security/2013
/linux-2.6.git%3Ba=commit%3Bh=9955ac47f4ba1c95ecb6092aeaefb40a22e99268 - http://www.openwall.com/lists/oss-security/2013/08/08/12 - https://bugzilla.redhat.com/show_bug.cgi?id=996380 - https://github.com/torvalds/linux/commit/9955ac47f4ba1c95ecb6092aeaefb40a22e99268 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.5
CVE ID: CVE-2013-4221 State: PUBLISHED Published: 2013-10-10T00:00:00 Last Updated: 2024-08-06T16:38:01.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1862.html - http://restlet.org/learn/2.1/changes - http://blog.diniscruz.com/2013/08/using-xmldecoder-to-execute-server-side.html - https://bugzilla.redhat.com/show_bug.cgi?id=995275 - https://gi
m/2013/08/using-xmldecoder-to-execute-server-side.html - https://bugzilla.redhat.com/show_bug.cgi?id=995275 - https://github.com/restlet/restlet-framework-java/issues/774 - http://rhn.redhat.com/errata/RHSA-2013-1410.html