Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0111 State: PUBLISHED Published: 2013-04-08T16:00:00Z Last Updated: 2024-09-16T23:31:31.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: daemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/957036 - http://www.nvidia.com/object/product-security.html
CVE ID: CVE-2013-0113 State: PUBLISHED Published: 2013-02-24T11:00:00Z Last Updated: 2024-09-17T01:36:20.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/248449
CVE ID: CVE-2013-0118 State: PUBLISHED Published: 2013-02-24T11:00:00Z Last Updated: 2024-09-17T02:51:28.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/583564 - http://www.kb.cert.org/vuls/id/BLUU-949PQL
CVE ID: CVE-2013-0120 State: PUBLISHED Published: 2013-02-24T11:00:00Z Last Updated: 2024-09-16T23:46:01.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device crash) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/160460
CVE ID: CVE-2013-0122 State: PUBLISHED Published: 2013-04-22T01:00:00Z Last Updated: 2024-09-17T01:51:10.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/131263
CVE ID: CVE-2013-0123 State: PUBLISHED Published: 2013-03-21T21:00:00Z Last Updated: 2024-09-17T00:51:51.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via (1) the nHistoryId parameter to WebProd/pages/pgHistory.asp or (2) the OrderBy parameter to WebProd/pages/pgadmin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/406596
CVE ID: CVE-2013-0124 State: PUBLISHED Published: 2013-03-21T21:00:00Z Last Updated: 2024-09-16T21:57:11.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/406596
CVE ID: CVE-2013-0125 State: PUBLISHED Published: 2013-04-04T19:00:00Z Last Updated: 2024-09-17T02:47:14.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/418923
CVE ID: CVE-2013-0126 State: PUBLISHED Published: 2013-03-21T20:00:00Z Last Updated: 2024-09-17T03:07:46.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via the username and user_level parameters or (2) enable remote administration via the is_telnet_primary and is_telnet_secondary parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/278204 - http://www.exploit-
tional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/278204 - http://www.exploit-db.com/exploits/24860/ - http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html
CVE ID: CVE-2013-0127 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T14:18:09.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and JMOY95BN49. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Apr/262 - http://www.kb.cert.org/vuls/id/912420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83775 - http:/
13/Apr/262 - http://www.kb.cert.org/vuls/id/912420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83775 - http://www-01.ibm.com/support/docview.wss?uid=swg21633819
CVE ID: CVE-2013-0128 State: PUBLISHED Published: 2013-04-04T19:00:00Z Last Updated: 2024-09-17T00:26:53.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with unencrypted credentials, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to an e-mail endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/704916
CVE ID: CVE-2013-0129 State: PUBLISHED Published: 2013-04-19T10:00:00Z Last Updated: 2024-09-16T19:01:06.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via (1) the WebFTP Overview "Create new directory" field or (2) the body of an e-mail autoresponder message. Additional Analyst Notes: - CVE Program Container: References: - http://www.pdadmin-forum.de/thread.php?threadid=4051 - http://www.kb.cert.org/vuls/id/311644
CVE ID: CVE-2013-0130 State: PUBLISHED Published: 2013-03-29T15:00:00Z Last Updated: 2024-09-16T20:01:30.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE, (2) LIST, or (3) VIEW command. Additional Analyst Notes: - CVE Program Container: References: - http://www.coreftp.com/forums/viewtopic.php?t=222102 - http://www.kb.cert.org/vuls/id/370868
CVE ID: CVE-2013-0131 State: PUBLISHED Published: 2013-04-08T16:00:00 Last Updated: 2024-08-06T14:18:09.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201304-01.xml - http://www.nvidia.com/object/product-security.html - http://nvidia.custhelp.com/app/answers/detail/a_id/3290 - http://www.kb.cert.org/vuls/id/771620
CVE ID: CVE-2013-0132 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-17T00:45:53.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/310500
CVE ID: CVE-2013-0133 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-16T23:00:51.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/310500
CVE ID: CVE-2013-0134 State: PUBLISHED Published: 2013-04-09T01:00:00Z Last Updated: 2024-09-17T03:54:46.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text message that is transmitted by a managed phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/557252
CVE ID: CVE-2013-0135 State: PUBLISHED Published: 2013-04-09T01:00:00 Last Updated: 2024-08-06T14:18:08.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php; the email parameter to (4) addressbook/register/edit_user_save.php, (5) addressbook/register/reset_password.php, (6) addressbook/register/reset_password_save.php, or (7) addressbook/register/user_add_save.php; the username parameter to (8) addressbook/regi
r/reset_password_save.php, or (7) addressbook/register/user_add_save.php; the username parameter to (8) addressbook/register/checklogin.php or (9) addressbook/register/reset_password_save.php; the (10) lastname, (11) firstname, (12) phone, (13) permissions, or (14) notes parameter to addressbook/register/edit_user_save.php; the (15) q parameter to addressbook/register/admin_index.php; the (16) site parameter to addressbook/register/linktick.php; the (17) password parameter to addressbook/register/reset_password.php; the (18) password_hint parameter to addressbook/register/reset_password_save.php; the (19) var parameter to addressbook/register/traffic.php; or a (20) BasicLogin cookie to addre
eset_password_save.php; the (19) var parameter to addressbook/register/traffic.php; or a (20) BasicLogin cookie to addressbook/register/router.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/183692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99623 - http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html - http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2013-0136 State: PUBLISHED Published: 2013-06-01T10:00:00Z Last Updated: 2024-09-17T02:48:04.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation. Additional Analyst Notes: - CVE Program Container: References: - https://
parameter in a (5) CUT or (6) COPY operation. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities - http://www.kb.cert.org/vuls/id/701572
CVE ID: CVE-2013-0137 State: PUBLISHED Published: 2013-06-29T21:00:00 Last Updated: 2024-08-06T14:18:09.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/AAMN-98MUK2 - http://www.kb.cert.org/vuls/id/662676 - http://www.kb.cert.org/vuls/id/AAMN-98MU7H - http://www.monroe-electronics.com/MONROE_ELECTRON
cert.org/vuls/id/662676 - http://www.kb.cert.org/vuls/id/AAMN-98MU7H - http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf - http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf - https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable/
CVE ID: CVE-2013-0138 State: PUBLISHED Published: 2013-04-22T01:00:00Z Last Updated: 2024-09-16T22:50:52.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/880916 - http://www.kb.cert.org/vuls/id/BLUU-95GP23
CVE ID: CVE-2013-0139 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-17T01:11:12.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service (video-capture outage) via a packet to UDP port 69. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/375180
CVE ID: CVE-2013-0140 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T14:18:09.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/209131 - https://kc.mcafee.com/corporate/index?page=content&id=SB10042 - http://www.us-cert.gov/ncas/alerts/TA13-193A - http://www.securityfocus.com/bid/59500 - http://seclists.or
&id=SB10042 - http://www.us-cert.gov/ncas/alerts/TA13-193A - http://www.securityfocus.com/bid/59500 - http://seclists.org/fulldisclosure/2014/Apr/289
CVE ID: CVE-2013-0141 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T14:18:08.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/209131 - https://kc.mcafee.com/corporate/index?page=content&id=SB10042 - http://www.us-cert.gov/ncas/alerts/TA13-193A - http://seclists.org/fulldisclosure/20
ate/index?page=content&id=SB10042 - http://www.us-cert.gov/ncas/alerts/TA13-193A - http://seclists.org/fulldisclosure/2014/Apr/289
CVE ID: CVE-2013-0142 State: PUBLISHED Published: 2013-06-07T20:00:00Z Last Updated: 2024-09-16T19:36:46.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/927644
CVE ID: CVE-2013-0143 State: PUBLISHED Published: 2013-06-07T20:00:00Z Last Updated: 2024-09-17T00:51:53.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/927644
CVE ID: CVE-2013-0144 State: PUBLISHED Published: 2013-06-07T20:00:00Z Last Updated: 2024-09-16T17:17:56.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a NEW USER action. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/927644
CVE ID: CVE-2013-0145 State: PUBLISHED Published: 2013-05-19T10:00:00Z Last Updated: 2024-09-17T00:52:21.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in a read request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/127108
CVE ID: CVE-2013-0148 State: PUBLISHED Published: 2013-06-16T17:00:00Z Last Updated: 2024-09-16T18:59:25.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/900031
CVE ID: CVE-2013-0149 State: PUBLISHED Published: 2013-08-03T01:00:00 Last Updated: 2024-08-06T14:18:09.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39
ation via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-0150 State: PUBLISHED Published: 2013-08-09T18:00:00Z Last Updated: 2024-09-16T18:29:34.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/ - http://support.f5.com/kb
References: - https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/ - http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html - http://secunia.com/advisories/53477
CVE ID: CVE-2013-0151 State: PUBLISHED Published: 2013-03-07T02:00:00 Last Updated: 2024-08-06T14:18:09.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://xenbits.
References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=d60d7082289a74e44b3dc8f67df46c3404ca08bf - http://openwall.com/lists/oss-security/2013/01/22/10
CVE ID: CVE-2013-0152 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T14:18:09.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id/1028032 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/01/23/8
CVE ID: CVE-2013-0153 State: PUBLISHED Published: 2013-02-14T22:00:00 Last Updated: 2024-08-06T14:18:09.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81831 - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://secunia.com/advisories/5
om/advisories/55082 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://secunia.com/advisories/51881 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2013/dsa-2636 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html - http://www.openwall.com/lists/oss-security/2013/02/05/7 - http://osvdb.org/89867 - http://rhn.redhat.com/errata/RHSA-2013-0847.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.securityfocus.com/bid/57745
CVE ID: CVE-2013-0154 State: PUBLISHED Published: 2013-01-12T02:00:00 Last Updated: 2024-08-06T14:18:09.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://www.securityfocus.com/bid/57159 - http://www.securitytracker.com/id?1027937 - http://security.gentoo.org/g