Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1605 State: PUBLISHED Published: 2014-03-25T14:00:00 Last Updated: 2024-08-06T15:04:49.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long filename in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60196 - http://seclists.org/fulldisclosure/2013/May/194 - http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities - http://osvdb.org/93708 - http://www.exploit-db.com/exploits/25813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8459
//osvdb.org/93708 - http://www.exploit-db.com/exploits/25813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84590 - http://packetstormsecurity.com/files/121787/MayGion-IP-Camera-Path-Traversal-Buffer-Overflow.html
CVE ID: CVE-2013-1606 State: PUBLISHED Published: 2013-07-18T14:00:00Z Last Updated: 2024-09-16T19:40:44.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26138/ - http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti-aircam-rtsp-service
CVE ID: CVE-2013-1607 State: PUBLISHED Published: 2020-02-11T17:31:21 Last Updated: 2024-08-06T15:04:49.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82563 - https://www.securityfocus.com/bid/58303/info
CVE ID: CVE-2013-1608 State: PUBLISHED Published: 2013-03-26T14:00:00Z Last Updated: 2024-09-16T16:48:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58542 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130320_00
CVE ID: CVE-2013-1609 State: PUBLISHED Published: 2013-03-26T14:00:00Z Last Updated: 2024-09-16T18:59:24.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130321_00 - http://www.securityfocus.com/bid/58617
CVE ID: CVE-2013-1610 State: PUBLISHED Published: 2013-08-04T20:00:00Z Last Updated: 2024-09-17T00:46:32.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61489 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_01
CVE ID: CVE-2013-1611 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T03:54:13.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9.5.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130508_00 - http://www.securityfocus.com/bid/59700
CVE ID: CVE-2013-1612 State: PUBLISHED Published: 2013-06-20T01:00:00Z Last Updated: 2024-09-16T20:58:56.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20130618_00 - http://www.securityfocus.com/bid/60542
CVE ID: CVE-2013-1613 State: PUBLISHED Published: 2013-07-08T17:00:00Z Last Updated: 2024-09-16T17:33:39.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00 - http://www.securityfocus.com/bid/60796
CVE ID: CVE-2013-1614 State: PUBLISHED Published: 2013-07-08T17:00:00Z Last Updated: 2024-09-16T20:52:26.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00 - http://www.securityfocus.com/bid/60797
CVE ID: CVE-2013-1615 State: PUBLISHED Published: 2013-07-08T17:00:00Z Last Updated: 2024-09-17T00:25:34.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00 - http://www.securityfocus.com/bid/60798
CVE ID: CVE-2013-1616 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T15:04:49.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61106 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway
uid=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html
CVE ID: CVE-2013-1617 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T15:04:49.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Mu
=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt - http://www.securityfocus.com/bid/61101 - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html
CVE ID: CVE-2013-1618 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://openwall.com/lists/oss-security/2013/02/05/24 - htt
: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://openwall.com/lists/oss-security/2013/02/05/24 - http://www.opera.com/support/kb/view/1044/ - http://www.opera.com/docs/changelogs/unified/1213/ - http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html
CVE ID: CVE-2013-1619 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57260 - https
-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57260 - https://gitorious.org/gnutls/gnutls/commit/328ee22c1b3951e060c7124c7cb1cee592c59bc0 - http://www.gnutls.org/security.html#GNUTLS-SA-2013-1 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://secunia.com/advisories/57274 - http://openwall.com/lists/oss-security/2013/02/05/24 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html - http://nmav.gnutls.org/2013/02/time-is-money-for-cbc-ciphersuites.html - http://www.ubuntu.com/usn/USN-1752-1 - http://lists.opensuse.org/opensuse-upda
time-is-money-for-cbc-ciphersuites.html - http://www.ubuntu.com/usn/USN-1752-1 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html - http://rhn.redhat.com/errata/RHSA-2013-0588.html - https://gitorious.org/gnutls/gnutls/commit/b8391806cd79095fe566f2401d8c7ad85a64b198
CVE ID: CVE-2013-1620 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3
yst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/57777 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - http://openwall.com/lists/oss-security/2013/02/05/24 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.ubuntu.com/usn/USN-1763-1 - http://security.gentoo.org/glsa/glsa-201406-19.xml - http://rhn.redhat.com/errata/RHSA-2013-1135.html - h
n/USN-1763-1 - http://security.gentoo.org/glsa/glsa-201406-19.xml - http://rhn.redhat.com/errata/RHSA-2013-1135.html - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://rhn.redhat.com/errata/RHSA-2013-1144.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-1621 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://www.debian.org/security/2013/dsa-2622 - http://openwall.com/lists/oss-security/2013/02/05/24 - https://polarssl.org/tech-updates/releases/polarss
013/dsa-2622 - http://openwall.com/lists/oss-security/2013/02/05/24 - https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
CVE ID: CVE-2013-1622 State: REJECTED Published: 2013-02-08T19:00:00 Last Updated: 2013-02-13T10:00:00 Description: No description available.
CVE ID: CVE-2013-1623 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://openwall.com/lists/os
Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://openwall.com/lists/oss-security/2013/02/05/24 - http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.yassl.com/yaSSL/Blog/Entries/2013/2/5_WolfSSL%2C_provider_of_CyaSSL_Embedded_SSL%2C_releases_first_embedded_TLS_and_DTLS_protocol_fix_for_Lucky_Thirteen_Attack.html
CVE ID: CVE-2013-1624 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T15:04:49.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.p
VE-2013-0169. Additional Analyst Notes: - CVE Program Container: References: - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://openwall.com/lists/oss-security/2013/02/05/24 - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://secunia.com/advisories/57719 - http://secunia.com/advisories/57716 - http://rhn.redhat.com/errata/RHSA-2014-0372.html
CVE ID: CVE-2013-1627 State: PUBLISHED Published: 2013-03-11T17:00:00Z Last Updated: 2024-09-17T03:38:48.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf
CVE ID: CVE-2013-1628 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-1629 State: PUBLISHED Published: 2013-08-06T01:00:00Z Last Updated: 2024-09-16T19:25:45.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.pip-installer.org/en/latest/installing.html - https://github.com/pypa/pip/issues/425 - http://www.pip-installer.org/en/latest/news.html#changelog - https://github.com/pypa/pip/pull/791/files - https://bug
- http://www.pip-installer.org/en/latest/news.html#changelog - https://github.com/pypa/pip/pull/791/files - https://bugzilla.redhat.com/show_bug.cgi?id=968059 - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
CVE ID: CVE-2013-1630 State: PUBLISHED Published: 2013-08-06T01:00:00Z Last Updated: 2024-09-16T20:41:39.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mardiros/pyshop/commit/ffadb0bcdef1e385884571670210cfd6ba351784 - https://github.com/mardiros/pyshop/blob/master/CHANGES.txt - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_i
thub.com/mardiros/pyshop/blob/master/CHANGES.txt - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
CVE ID: CVE-2013-1631 State: PUBLISHED Published: 2020-01-30T13:31:24 Last Updated: 2024-08-06T15:04:49.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58334 - https://andrewbrooksblog.wordpress.com/2013/03/06/verax-nms-23-cve-2013-1352-cve-2013-1631/
CVE ID: CVE-2013-1633 State: PUBLISHED Published: 2013-08-06T01:00:00Z Last Updated: 2024-09-16T23:00:21.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.python.org/pypi/setuptools/0.9.8#changes - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
CVE ID: CVE-2013-1634 State: PUBLISHED Published: 2020-02-13T21:15:37 Last Updated: 2024-08-06T15:04:49.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing state when parsing 32 hex, 33 hex, or 34 hex byte values at the 0x47f offset. NOTE: A followup statement from Intel suggests that the root cause of this issue was an incorrectly configured EEPROM image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028089 - http://www.openwall.
l Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028089 - http://www.openwall.com/lists/oss-security/2013/02/12/4 - http://www.openwall.com/lists/oss-security/2013/02/12/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85069 - http://web.archive.org/web/20131205055429/https://communities.intel.com/community/wired/blog/2013/02/07/intel-82574l-gigabit-ethernet-controller-statement - http://blog.krisk.org/2013/02/packets-of-death.html
CVE ID: CVE-2013-1635 State: PUBLISHED Published: 2013-03-06T11:00:00 Last Updated: 2024-08-06T15:13:32.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=blob%3Bf=NEWS%3Bh=82afa3a040e639f3595121e45b850d5453906a00%3Bhb=refs/heads/PHP-5.3 - https://bugs.gentoo.org/s
c.git%3Ba=blob%3Bf=NEWS%3Bh=82afa3a040e639f3595121e45b850d5453906a00%3Bhb=refs/heads/PHP-5.3 - https://bugs.gentoo.org/show_bug.cgi?id=459904 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:114 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221 - https://bugzilla.redhat.com/show_bug.cgi?id=918196 - http://www.debian.org/security/2013/dsa-2639 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101 - http://support.apple.com/kb/HT5880 - ht
/msg00034.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101 - http://support.apple.com/kb/HT5880 - http://git.php.net/?p=php-src.git%3Ba=blob%3Bf=NEWS%3Bh=36f6f9a4396d3034cc903a4271e7fdeccc5d3ea6%3Bhb=refs/heads/PHP-5.4 - http://git.php.net/?p=php-src.git%3Ba=commitdiff%3Bh=702b436ef470cc02f8e2cc21f2fadeee42103c74
CVE ID: CVE-2013-1636 State: PUBLISHED Published: 2014-03-12T14:00:00 Last Updated: 2024-08-06T15:13:31.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers to inject arbitrary web script or HTML via the get-data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/pretty-link/changelog - http://packetstormsecurity.com/files/121623