Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2555 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T15:44:32.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: Refe
trated by VUPEN during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0197.html - http://twitter.com/VUPEN/statuses/309713355466227713 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html - http://www.adobe.com/support/security/bulletins/apsb13-11.html - http://twitter.com/thezdi/statuses/309756927301283840 - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0730.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html - htt
pensuse-updates/2013-04/msg00081.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2556 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T15:44:32.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 through SP1 allows attackers to bypass the ASLR protection mechanism via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "ASLR Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-063 - http://twitter.com/VUPEN/statuses/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-063 - http://twitter.com/VUPEN/statuses/309713355466227713 - http://twitter.com/thezdi/statuses/309756927301283840 - http://www.us-cert.gov/ncas/alerts/TA13-225A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18132 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2557 State: PUBLISHED Published: 2013-03-11T10:00:00Z Last Updated: 2024-09-17T02:00:55.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/VUPEN/statuses/309713355466227713 - http://twitter.com/thezdi/statuses/309756927301283840 - http://h30499.www3.hp.com/t5/HP-Security-Research-Bl
466227713 - http://twitter.com/thezdi/statuses/309756927301283840 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2558 State: PUBLISHED Published: 2013-03-13T00:00:00Z Last Updated: 2024-09-16T18:08:19.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown other impact via a crafted TrueType Font (TTF) file, as demonstrated by the 120612-69701-01.dmp error report. Additional Analyst Notes: - CVE Program Container: References: - http://immunityproducts.blogspot.com/2013/03/infiltrate-preview-truetype-font.html
CVE ID: CVE-2013-2559 State: PUBLISHED Published: 2014-03-27T16:00:00 Last Updated: 2024-08-06T15:44:32.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83227 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0018.html - https://www.htbridge.com/advisory/HTB23148 - http://www
tp://archives.neohapsis.com/archives/bugtraq/2013-04/0018.html - https://www.htbridge.com/advisory/HTB23148 - http://www.securityfocus.com/bid/58843 - https://github.com/symphonycms/symphony-2/commit/6c8aa4e9c810994f7632837487426867ce50f468 - http://www.getsymphony.com/download/releases/version/2.3.2
CVE ID: CVE-2013-2560 State: PUBLISHED Published: 2013-03-15T01:00:00Z Last Updated: 2024-09-16T17:18:39.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-03/0080.html
CVE ID: CVE-2013-2561 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T15:44:32.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Mar/87 - http://www.securityfocus.com/bid/58335 - http://www.openwall.com/lists/oss-security/2013/03/26/1 - http://ww
13/Mar/87 - http://www.securityfocus.com/bid/58335 - http://www.openwall.com/lists/oss-security/2013/03/26/1 - http://www.openwall.com/lists/oss-security/2013/03/26/4 - http://rhn.redhat.com/errata/RHSA-2013-1661.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://bugzilla.redhat.com/show_bug.cgi?id=927430 - http://www.openwall.com/lists/oss-security/2013/03/19/8 - http://www.openwall.com/lists/oss-security/2013/03/26/11
CVE ID: CVE-2013-2562 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T15:44:32.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q1/689 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt - http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html
CVE ID: CVE-2013-2563 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T15:44:32.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q1/689 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt - http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html
CVE ID: CVE-2013-2564 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T15:44:32.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q1/689 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt - http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html
CVE ID: CVE-2013-2565 State: PUBLISHED Published: 2019-02-15T21:00:00 Last Updated: 2024-08-06T15:44:32.128Z Vendors: Mambo Products: Mambo CMS Problem Types: Mambo CMS vulnerabilities Description: A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/mambo/ - http://www.vapidlabs.com/advisory.php?v=75
CVE ID: CVE-2013-2566 State: PUBLISHED Published: 2013-03-14T22:00:00 Last Updated: 2024-08-06T15:44:32.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html - http://www.securityfo
l - http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html - http://www.securityfocus.com/bid/58796 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://cr.yp.to/talks/2013.03.12/slides.pdf - http://marc.info/?l=bugtraq&m=143039468003789&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://security.gentoo.org/glsa/201504-01 - http://security.gentoo.org/glsa/glsa-201406-19.xml - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://marc.info/?l=bugtraq&m=143039468003789&w=2 - http://www.ubuntu.com/usn/USN-2031-1 - http://www.ubuntu.com/usn/USN-2032-1 -
c.info/?l=bugtraq&m=143039468003789&w=2 - http://www.ubuntu.com/usn/USN-2031-1 - http://www.ubuntu.com/usn/USN-2032-1 - http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.opera.com/security/advisory/1046 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888 - http://www.mozilla.org/security/announce/2013/mfsa2013-103.html - http://www.isg.rhul.ac.uk/tls/ - http://www.opera.com/docs/changelogs/unified/1215/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDispla
- http://www.opera.com/docs/changelogs/unified/1215/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935
CVE ID: CVE-2013-2567 State: PUBLISHED Published: 2020-01-29T16:47:20 Last Updated: 2024-08-06T15:44:32.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60189 - http://www.exploit-db.com/exploits/25815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84568 - https://packetstormsecurity.com/files/cve/CVE-2013-2567 - http://www.coresecurity.com/advisories/zavio-
bilities/84568 - https://packetstormsecurity.com/files/cve/CVE-2013-2567 - http://www.coresecurity.com/advisories/zavio-IP-cameras-multiple-vulnerabilities
CVE ID: CVE-2013-2568 State: PUBLISHED Published: 2020-01-29T17:07:27 Last Updated: 2024-08-06T15:44:32.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84569 - https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2568/page1/ - https://vulmon.com/vul
meras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2568/page1/ - https://vulmon.com/vulnerabilitydetails?qid=CVE-2013-2568
CVE ID: CVE-2013-2569 State: PUBLISHED Published: 2020-01-29T17:20:55 Last Updated: 2024-08-06T15:44:32.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84570 - https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2569
CVE ID: CVE-2013-2570 State: PUBLISHED Published: 2020-01-29T17:31:40 Last Updated: 2024-08-06T15:44:32.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84567 - https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve
://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2570
CVE ID: CVE-2013-2571 State: PUBLISHED Published: 2020-01-28T14:44:13 Last Updated: 2024-08-06T15:44:31.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/25987 - http://www.securityfocus.com/bid/60359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84761 - https://packetstormsecurity.com/files/121917/Xpient-POS-Iris-3.8-Cash-Drawer-Operation-Remote-Trigger.html
CVE ID: CVE-2013-2572 State: PUBLISHED Published: 2020-01-29T18:04:50 Last Updated: 2024-08-06T15:44:32.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60194 - http://www.exploit-db.com/exploits/25812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84573 - https://www.coresecurity.com/advisories/tp-link-ip-ca
812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84573 - https://www.coresecurity.com/advisories/tp-link-ip-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2572
CVE ID: CVE-2013-2573 State: PUBLISHED Published: 2020-01-29T18:31:45 Last Updated: 2024-08-06T15:44:32.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84574 - https://www.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/C
ww.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities - https://packetstormsecurity.com/files/cve/CVE-2013-2573 - https://vuldb.com/?id.8912
CVE ID: CVE-2013-2574 State: PUBLISHED Published: 2020-01-29T18:41:10 Last Updated: 2024-08-06T15:44:32.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61415 - http://www.exploit-db.com/exploits/27076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85941 - https://packetstormsecurity.com/files/cve/CVE-2013-2574 - http://www.coresecurity.com/advisories/foscam-ip-cameras-improper
ps://packetstormsecurity.com/files/cve/CVE-2013-2574 - http://www.coresecurity.com/advisories/foscam-ip-cameras-improper-access-restrictions
CVE ID: CVE-2013-2576 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T15:44:32.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Artweaver before 3.1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AWD file. Additional Analyst Notes: - CVE Program Container: References: - http://www.artweaver.de/en/help/81 - http://www.exploit-db.com/exploits/27047 - http://osvdb.org/95573 - http://www.artweaver.de/en/help/80 - http://www.coresecurity.com/advisories/artweaver-buffer-overflow-vulnerability - http://archives.neohapsis.com/archives/bugtraq/2013-07/0154.html - http://secunia
weaver-buffer-overflow-vulnerability - http://archives.neohapsis.com/archives/bugtraq/2013-07/0154.html - http://secunia.com/advisories/54167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85924
CVE ID: CVE-2013-2577 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T15:44:32.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Additional Analyst Notes: - CVE Program Container: References: - http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85919 - http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability - http://www.securitytracker.com/id/1028817 - http://www.exploit-db.com/exploits/27049 - http://osvdb.org/95580 - http://archives.neohapsis.com/archives/bugtraq/
17 - http://www.exploit-db.com/exploits/27049 - http://osvdb.org/95580 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.html - http://secunia.com/advisories/54174
CVE ID: CVE-2013-2578 State: PUBLISHED Published: 2013-10-11T21:00:00Z Last Updated: 2024-09-16T20:47:22.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2) other unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE ID: CVE-2013-2579 State: PUBLISHED Published: 2013-10-11T21:00:00Z Last Updated: 2024-09-17T00:37:09.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE ID: CVE-2013-2580 State: PUBLISHED Published: 2013-10-11T21:00:00Z Last Updated: 2024-09-17T03:33:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file in the mnt/mtd directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE ID: CVE-2013-2581 State: PUBLISHED Published: 2013-10-11T21:00:00Z Last Updated: 2024-09-16T23:35:58.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the firmware revision via a "preset" action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54155 - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE ID: CVE-2013-2582 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-16T18:08:06.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0183.html
CVE ID: CVE-2013-2583 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-16T19:31:11.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL, (2) malformed nested SCRIPT elements, (3) a mail signature, or (4) JavaScript code within an image file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0183.html
CVE ID: CVE-2013-2585 State: PUBLISHED Published: 2014-02-12T18:00:00 Last Updated: 2024-08-06T15:44:32.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x before 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId/<MessageID>/filenameOriginal/. Additional Analyst Notes: - CVE Program Container: References: - http://www.isecauditors.com/advisories-2013#2013-004 - http://www.securityfocus.com/archive/1/530934/100/0/threaded - https://atmail.com/changelog