Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7182 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T18:01:19.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-003/ - http://osvdb.org/102819 - http://www.securityfocus.com/bid/65308 - http://www.securitytracker.com/id/1029730 - http://secunia.com/advisories/56739 - http://www.kb.cert.org/vuls/id/728638 - http://archives.neohapsis.com/archives/ful
http://secunia.com/advisories/56739 - http://www.kb.cert.org/vuls/id/728638 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0016.html
CVE ID: CVE-2013-7183 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T18:01:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_default action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56756 - http://www.kb.cert.org/vuls/id/431726 - http://osvdb.org/102817
CVE ID: CVE-2013-7184 State: PUBLISHED Published: 2014-01-24T15:00:00 Last Updated: 2024-08-06T18:01:19.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89914 - http://www.exploit-db.com/exploits/30414
CVE ID: CVE-2013-7185 State: PUBLISHED Published: 2020-01-14T14:45:42 Last Updated: 2024-08-06T18:01:20.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: PotPlayer 1.5.40688: .avi File Memory Corruption Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89981
CVE ID: CVE-2013-7186 State: PUBLISHED Published: 2013-12-20T23:00:00 Last Updated: 2024-08-06T18:01:19.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124284 - http://www.exploit-db.com/exploits/30032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89454 - http://packetstormsecurity.com/files/124283 - http:/
9468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89454 - http://packetstormsecurity.com/files/124283 - http://packetstormsecurity.com/files/124282
CVE ID: CVE-2013-7187 State: PUBLISHED Published: 2013-12-20T23:00:00 Last Updated: 2024-08-06T18:01:19.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124343/wpformcraft-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/89581 - http://www.exploit-db.com/exploits/30002 - http://secunia.com/advisories/56044 - http://www.securityfocus.com/bid/64183
CVE ID: CVE-2013-7188 State: PUBLISHED Published: 2013-12-20T23:00:00 Last Updated: 2024-08-06T18:01:19.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56124 - http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/ - http://osvdb.org/101030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89750 - http://hostbillapp.com/changelog - https://blog.rack911.com/security-advisories/hostbill-x
d.com/vulnerabilities/89750 - http://hostbillapp.com/changelog - https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099
CVE ID: CVE-2013-7189 State: PUBLISHED Published: 2013-12-20T23:00:00 Last Updated: 2024-08-06T18:01:19.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno parameter to payinvoiceothers.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89816 - http://seclists.org/fulldisclosure/2013/Dec/121 - http://osvdb.org/101050 -
.xforce.ibmcloud.com/vulnerabilities/89816 - http://seclists.org/fulldisclosure/2013/Dec/121 - http://osvdb.org/101050 - http://osvdb.org/101051 - http://osvdb.org/101053
CVE ID: CVE-2013-7190 State: PUBLISHED Published: 2013-12-20T23:00:00 Last Updated: 2024-08-06T18:01:19.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1) tmpid parameter to websitebuilder/showtemplateimage.php, (2) fname parameter to admin/downloadfile.php, or (3) id parameter to support/admin/csvdownload.php; or (4) have an unspecified impact via unspecified vectors in support/parser/main_smtp.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89818 - http://seclists
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89818 - http://seclists.org/fulldisclosure/2013/Dec/121
CVE ID: CVE-2013-7191 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T18:01:20.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI for a ticket. Additional Analyst Notes: - CVE Program Container: References: - http://makthepla.net/blog/=/helpdesk-pilot-add-admin - http://secunia.com/advisories/55797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89510
CVE ID: CVE-2013-7192 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T18:01:19.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89844 - http://www.securityfocus.com/bid/64371 - http://packetstormsecurity.com/files/124451
CVE ID: CVE-2013-7193 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T18:01:19.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89755 - http://www.securityfocus.com/bid/64329 - http://osvdb.org/101075 - http://pac
force.ibmcloud.com/vulnerabilities/89755 - http://www.securityfocus.com/bid/64329 - http://osvdb.org/101075 - http://packetstormsecurity.com/files/124441/c2cfac-sql.txt
CVE ID: CVE-2013-7194 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T18:01:19.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Last name, (2) Lesson name, or (3) Course name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30213 - http://packetstormsecurity.com/files/124400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89660
CVE ID: CVE-2013-7195 State: PUBLISHED Published: 2014-04-18T19:00:00 Last Updated: 2024-08-06T18:01:19.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request that specifies the ID for the publication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92335 - http://www.securityfocus.com/archive/1/531745/100/0/threaded
CVE ID: CVE-2013-7196 State: PUBLISHED Published: 2014-04-18T19:00:00 Last Updated: 2024-08-06T18:01:20.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92336 - http://www.securityfocus.com/bid/66677 - http://www.securityfocus.com/archive/1/531745/100/0/threaded
CVE ID: CVE-2013-7201 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T18:01:19.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92098 - https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/ - http://secunia.com/advisories/57351
CVE ID: CVE-2013-7202 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T18:01:19.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92099 - https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/
CVE ID: CVE-2013-7203 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-06T18:01:19.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html - https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.html - https://marc.info/?l=oss-security&m=138783069700756&w=2
CVE ID: CVE-2013-7204 State: PUBLISHED Published: 2014-01-17T15:00:00 Last Updated: 2024-08-06T18:01:20.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101930 - http://www.exploit-db.com/exploits/30914 - http://www.securityfocus.com/archive/1/530717/100/0/threaded
CVE ID: CVE-2013-7205 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T18:01:20.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64489 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:004 - http://sourcefor
p://www.securityfocus.com/bid/64489 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:004 - http://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - http://www.openwall.com/lists/oss-security/2013/12/24/1 - http://secunia.com/advisories/55976
CVE ID: CVE-2013-7209 State: PUBLISHED Published: 2013-12-30T15:00:00 Last Updated: 2024-08-06T18:01:19.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101438 - http://seclists.org/fulldisclosure/2013/Dec/206 - http://packetstormsecurity.com/files/124598/JForum-Cross-Site-Request-Forgery.html
CVE ID: CVE-2013-7216 State: PUBLISHED Published: 2013-12-24T22:00:00 Last Updated: 2024-08-06T18:01:20.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to demo/classifieds/product.asp, or (2) UserID or (3) Password field to demo/classifieds/admin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89772 - http://osvdb.org/101073 - http://www.securityfocus.com/bid/64330 - http://packetstormsecurity.com/files/124442
CVE ID: CVE-2013-7217 State: PUBLISHED Published: 2013-12-26T18:00:00 Last Updated: 2024-08-06T18:01:19.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.zimbra.com/show_bug.cgi?id=84547 - http://www.zimbra.com/forums/announcements/67336-critical-security-vulnerability-addressed-7-2-6-8-0-6-maintenance-releases.html - http://secunia.com/advisories/56138 - http://www.osvdb.org/101147 - http://www.securityfocu
-maintenance-releases.html - http://secunia.com/advisories/56138 - http://www.osvdb.org/101147 - http://www.securityfocus.com/bid/64415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89847 - http://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.6.pdf - http://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.6.pdf
CVE ID: CVE-2013-7219 State: PUBLISHED Published: 2014-01-21T16:00:00 Last Updated: 2024-08-06T18:01:19.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answer_id[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://2glux.com/forum/sexypolling/sexy-polling-security-vulnerability-notification-t2026.html - https://www.htbridge.com/advisory/HTB23193 - http://www.securityfocus.com/archive/1/530789/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/9
- http://www.securityfocus.com/archive/1/530789/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/90519
CVE ID: CVE-2013-7220 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:19.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j - https://bugzilla.redhat.com/show_bug.cgi?id=1030431 - https://bugzilla.gnome.org/show_bug.cgi?id=686740 - http://www.openwall.com/lists/oss-security/2013/12/27/4 - htt
0431 - https://bugzilla.gnome.org/show_bug.cgi?id=686740 - http://www.openwall.com/lists/oss-security/2013/12/27/4 - http://www.openwall.com/lists/oss-security/2013/12/27/6 - http://www.openwall.com/lists/oss-security/2013/12/27/8
CVE ID: CVE-2013-7221 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:19.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/27/4 - https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088 - http://www.openwall.com/lists/oss-security/2
me-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088 - http://www.openwall.com/lists/oss-security/2013/12/27/8 - https://bugzilla.gnome.org/show_bug.cgi?id=708313
CVE ID: CVE-2013-7222 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:19.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fatfreecrm/fat_free_crm/commit/93c182dd4c6f3620b721d2a15ba6a6ecab5669df - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff
s.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/issues/300 - https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29
CVE ID: CVE-2013-7223 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:19.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a protect_from_forgery line in app/controllers/application_controller.rb. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fatfreecrm/fat_free_crm/commit/a7fedbb36388bad0c0f32b2346481e0ea126dea6 - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/201
0c0f32b2346481e0ea126dea6 - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/issues/300 - https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29
CVE ID: CVE-2013-7224 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:19.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/commit/cf26a04b356ad2161c4c6160260eb870a3de5328 - https://github.com/fatfreecrm/f
s://github.com/fatfreecrm/fat_free_crm/commit/cf26a04b356ad2161c4c6160260eb870a3de5328 - https://github.com/fatfreecrm/fat_free_crm/issues/300 - https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29
CVE ID: CVE-2013-7225 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:20.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in app/controllers/home_controller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the homepage timeline feature or (2) the activity feature. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/commit/d4b2de81a4d8c1b201482edcb2488
tp://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/commit/d4b2de81a4d8c1b201482edcb2488ed9280a65fd - https://github.com/fatfreecrm/fat_free_crm/commit/078035f1ef73ed85285ac9d128c3c5f670cef066 - https://github.com/fatfreecrm/fat_free_crm/issues/300 - https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29
CVE ID: CVE-2013-7226 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T18:01:19.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56829 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - http://www.securityfocus.com/bid
://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - http://www.securityfocus.com/bid/65533 - https://bugzilla.redhat.com/show_bug.cgi?id=1065108 - https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:027 - http://www.php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1029767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91099 - http://www.ubuntu.com/usn/USN-2126-1 - https://bugs.php.net/bug.php?id=66356