Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4497 State: PUBLISHED Published: 2013-11-05T20:00:00Z Last Updated: 2024-08-06T16:45:14.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/03/2 - https://bugs.launchpad.net/nova/+bug/1202266 - http://www.openwall.com/lists/oss-security/2013/11/03/3 - https://bugs.launchpad.net/nova/+bug/1073306
CVE ID: CVE-2013-4498 State: PUBLISHED Published: 2014-05-17T20:00:00 Last Updated: 2024-08-06T16:45:15.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes the content to be "orphaned" and allows remote authenticated users with the "access content" permission to obtain sensitive information via vectors involving a rebuild access for the site or content. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2118717 - https://drupal.org/node/2118745 - h
lyst Notes: - CVE Program Container: References: - https://drupal.org/node/2118717 - https://drupal.org/node/2118745 - http://seclists.org/oss-sec/2013/q4/210
CVE ID: CVE-2013-4499 State: PUBLISHED Published: 2014-02-14T19:00:00 Last Updated: 2024-08-06T16:45:14.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88278 - https://drupal.org/node/2118873 - https://drupal.org/node/2118867
CVE ID: CVE-2013-4500 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/210 - https://drupal.org/node/2123995 - https://drupal.org/node/2123727
CVE ID: CVE-2013-4501 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/210 - https://drupal.org/node/2123995 - https://drupal.org/node/2123727
CVE ID: CVE-2013-4502 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by attaching a file. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2124241 - https://drupal.org/node/2124219 - http://seclists.org/oss-sec/2013/q4/210 - https://drupal.org/node/2124217
CVE ID: CVE-2013-4503 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/210 - https://drupal.org/node/2124279
CVE ID: CVE-2013-4504 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2123287 - https://drupal.org/node/2124289 - http://seclists.org/oss-sec/2013/q4/210
CVE ID: CVE-2013-4505 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T16:45:14.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55855 - http://subversion.apache.org/security/CVE-2013-4505-advisory.txt - http://osvdb.org/100364 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00029
urity/CVE-2013-4505-advisory.txt - http://osvdb.org/100364 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html
CVE ID: CVE-2013-4506 State: REJECTED Published: 2022-06-30T20:30:31 Last Updated: 2022-06-30T20:30:31 Description: No description available.
CVE ID: CVE-2013-4507 State: PUBLISHED Published: 2013-11-19T15:00:00Z Last Updated: 2024-09-16T23:25:33.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.collectiveaccess.org/news/collectiveaccess-version-1-3-1-released - http://secunia.com/advisories/55481
CVE ID: CVE-2013-4508 State: PUBLISHED Published: 2013-11-08T02:00:00 Last Updated: 2024-08-06T16:45:15.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txt - http://openwall.com/lists/oss-security/2013/11/04/19 - http://marc.info/?l=bugtraq&m=141576815022399&w=2 - http://redmine.lighttpd.net/issues/252
/oss-security/2013/11/04/19 - http://marc.info/?l=bugtraq&m=141576815022399&w=2 - http://redmine.lighttpd.net/issues/2525 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.html - https://www.debian.org/security/2013/dsa-2795 - http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2913/diff/ - http://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2013-4509 State: PUBLISHED Published: 2013-11-23T19:00:00 Last Updated: 2024-08-06T16:45:14.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html - http://lists.opensuse.org/ope
268dd6b25aa740a5edfe7 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html - https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozc_support_ibus-1.5.4_rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690 - https://groups.google.com/forum/#%21topic/ibus-user/mvCHDO1BJUw - https://bugzilla.redhat.com/show_bug.cgi?id=1027028 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html
CVE ID: CVE-2013-4510 State: PUBLISHED Published: 2013-11-15T18:16:00Z Last Updated: 2024-08-06T16:45:14.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report. Additional Analyst Notes: - CVE Program Container: References: - http://hg.tryton.org/tryton/rev/357d0a4d9cb8 - http://www.tryton.org/posts/security-release-for-issue3446.html - https://bugs.tryton.org/issue3446 - http://www.openwall.com/lists/oss-security/2013/11/04/21 - http://www.debian.org/security/2013/dsa-2791
CVE ID: CVE-2013-4511 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:14.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.
s: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2073-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2036-1 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - https://github.com/torvalds/linux/c
enwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2037-1 - http://www.ubuntu.com/usn/USN-2072-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html - http://www.ubuntu.com/usn/USN-2075-1 - http://www.ubuntu.com/usn/USN-2067-1
CVE ID: CVE-2013-4512 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:14.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging root privileges for a write operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.securityfocus.com/bid/63510 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://git.kernel.org/?p=linux/kernel/git/torvald
bid/63510 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=201f99f170df14ba52ea4c52847779042b7a623b - https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b
CVE ID: CVE-2013-4513 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:15.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the oz_cdev_write function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted write operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2073-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2c65cd2e14ada6de44cb527e7f1990bede24e15 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://ww
t%3Bh=c2c65cd2e14ada6de44cb527e7f1990bede24e15 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2072-1 - http://www.securityfocus.com/bid/63508 - https://github.com/torvalds/linux/commit/c2c65cd2e14ada6de44cb527e7f1990bede24e15 - http://www.ubuntu.com/usn/USN-2075-1
CVE ID: CVE-2013-4514 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:14.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in drivers/staging/wlags49_h2/wl_priv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability and providing a long station-name string, related to the (1) wvlan_uil_put_info and (2) wvlan_set_station_nickname functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2073-1 - https
ences: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2073-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - https://github.com/torvalds/linux/commit/b5e2f339865fb443107e5b10603e53bbc92dc054 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5e2f339865fb443107e5b10603e53bbc92dc054 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/u
ttp://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-2075-1 - http://www.securityfocus.com/bid/63509 - http://www.ubuntu.com/usn/USN-2067-1
CVE ID: CVE-2013-4515 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:14.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2073-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-20
untu.com/usn/USN-2073-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d1e72250c847fa96498ec029891de4dc638a5ba - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - https://github.com/torvalds/linux/commit/8d1e72250c847fa96498ec029891de4dc638a5ba - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.htm
8a5ba - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-2075-1 - http://www.ubuntu.com/usn/USN-2067-1
CVE ID: CVE-2013-4516 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T16:45:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2073-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - https://github.com/torvalds/linux/
2.bz2 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 - http://www.ubuntu.com/usn/USN-2075-1
CVE ID: CVE-2013-4517 State: PUBLISHED Published: 2014-01-11T01:00:00 Last Updated: 2024-08-06T16:45:14.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1728.html - http://rhn.redhat.com/errata/RHSA-2014-1726.html - http://rhn.redhat.com/errata/RHSA-2014-0170.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://osvdb.org/101169 - http://rhn.redh
rrata/RHSA-2014-0170.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://osvdb.org/101169 - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2014-0195.html - https://www.tenable.com/security/tns-2018-15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89891 - http://rhn.redhat.com/errata/RHSA-2014-1727.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - http://seclists.org/fulldisclosure/2013/Dec/169 - http://www.securitytracker.com/id/1029524 - http://rhn.redhat.com/errata/RHSA-2014-0172.html - http://santuario.apache.org/secadv.data/cve-2013-4517.txt.asc - http://rhn.redhat.com/errata/RHSA-2014-0171.html - http://packetstormsecur
pache.org/secadv.data/cve-2013-4517.txt.asc - http://rhn.redhat.com/errata/RHSA-2014-0171.html - http://packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html - http://www.securityfocus.com/bid/64437 - http://rhn.redhat.com/errata/RHSA-2014-1725.html - http://secunia.com/advisories/55639 - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-4518 State: PUBLISHED Published: 2019-11-04T12:58:36 Last Updated: 2024-08-06T16:45:14.851Z Vendors: RHUI Products: RHUI Problem Types: PKI entitlement certificates are world readable Description: RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4518 - https://access.redhat.com/security/cve/cve-2013-4518
CVE ID: CVE-2013-4519 State: PUBLISHED Published: 2013-11-15T20:00:00 Last Updated: 2024-08-06T16:45:15.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55623 - http://www.securityfocus.com/bid/63601 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.17 - http://osvdb.org/99512 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.2
eleasenotes/reviewboard/1.7.17 - http://osvdb.org/99512 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.6.21 - http://osvdb.org/99513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88620
CVE ID: CVE-2013-4520 State: PUBLISHED Published: 2013-12-14T20:00:00 Last Updated: 2024-08-06T16:45:14.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/239 - https://gitorious.org/libxslt/libxslt/commit/7089a62b8f133b42a2981cf1f920a8b3fe9a8caa - https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1
mmit/7089a62b8f133b42a2981cf1f920a8b3fe9a8caa - https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html - https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html - http://secunia.com/advisories/56072 - https://bugzilla.novell.com/show_bug.cgi?id=849019 - http://www.osvdb.org/99671 - http://seclists.org/oss-sec/2013/q4/238
CVE ID: CVE-2013-4521 State: PUBLISHED Published: 2020-02-06T15:43:41 Last Updated: 2024-08-06T16:45:14.866Z Vendors: Nuxeo Products: Nuxeo Platform Problem Types: Other Description: RichFaces implementation in Nuxeo Platform 5.6.0 before HF27 and 5.8.0 before HF-01 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data. NOTE: this vulnerability may overlap CVE-2013-2165. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1027052 - http://doc.nuxeo.com/display/public/ADMINDOC58/Nuxeo+Security+Hotfixes - https://github.com/nuxeo/
_bug.cgi?id=1027052 - http://doc.nuxeo.com/display/public/ADMINDOC58/Nuxeo+Security+Hotfixes - https://github.com/nuxeo/richfaces/commit/6cbad2a6dcb70d3e33a6ce5879b1a3ad79eb1aec
CVE ID: CVE-2013-4522 State: PUBLISHED Published: 2013-11-26T02:00:00 Last Updated: 2024-08-06T16:45:15.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38743 - https://moodle.org/mod/forum/discuss.php?d=244479 - http://openwall.com/lists/oss-sec
rch&h=HEAD&st=commit&s=MDL-38743 - https://moodle.org/mod/forum/discuss.php?d=244479 - http://openwall.com/lists/oss-security/2013/11/25/1