Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sn/USN-2044-1 - http://rhn.redhat.com/errata/RHSA-2013-1801.html - http://www.ubuntu.com/usn/USN-2066-1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html - https://bugzilla.redhat.com/show_bug.cgi?id=1023477 - https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b - http://www.ubuntu.com/usn/USN-2049-1 - http://rhn.redhat.com/errata/RHSA-2014-0284.html - http://www.securityfocus.com/bid/63359 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e93b7d748be887cd7639b113ba7d7ef792a7efb9 - http://www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-2042-1 - https://github.com/torvalds/linux/commit/e93b7d
//www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-2042-1 - https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 - http://rhn.redhat.com/errata/RHSA-2014-0100.html - http://www.ubuntu.com/usn/USN-2067-1 - http://www.ubuntu.com/usn/USN-2046-1
CVE ID: CVE-2013-4471 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T16:45:14.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack/2013-November/003299.html - https://bugs.launchpad.net/horizon/+bug/1237989
CVE ID: CVE-2013-4472 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T16:45:14.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/183 - http://osvdb.org/99064 - http://seclists.org/oss-sec/2013/q4/181 - http://poppler.freedesktop.org/releases.html
CVE ID: CVE-2013-4473 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/723124 - http://secunia.com/advisories/56567 - http://security.gentoo.org/glsa/glsa-201401-21.xml - https://bugs.freedesktop.org/show_bug.cgi?id=69434 - http://www.ubuntu.com/usn/USN-2958-1 - http://cgit.freedesktop.or
- https://bugs.freedesktop.org/show_bug.cgi?id=69434 - http://www.ubuntu.com/usn/USN-2958-1 - http://cgit.freedesktop.org/poppler/poppler/commit/utils/pdfseparate.cc?id=b8682d868ddf7f741e93b - http://cgit.freedesktop.org/poppler/poppler/tree/NEWS - http://www.securityfocus.com/bid/63368 - http://www.openwall.com/lists/oss-security/2013/10/29/1
CVE ID: CVE-2013-4474 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/723124 - http://cgit.freedesktop.org/poppler/poppler/commit/?id=61f79b8447c3ac8ab5a26e79e0c28053ffdccf75 - http://secunia.com/advisories/56567 - http://security.gentoo.org/glsa/glsa-201401-21.xml - http://www.securityfocu
f75 - http://secunia.com/advisories/56567 - http://security.gentoo.org/glsa/glsa-201401-21.xml - http://www.securityfocus.com/bid/63374 - https://bugs.freedesktop.org/show_bug.cgi?id=69434 - http://www.ubuntu.com/usn/USN-2958-1 - http://www.openwall.com/lists/oss-security/2013/10/29/1
CVE ID: CVE-2013-4475 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T16:45:14.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS). Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2054-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.org/samba/history/samba-4.1.1.ht
fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.org/samba/history/samba-4.1.1.html - http://secunia.com/advisories/56508 - http://www.samba.org/samba/history/samba-4.0.11.html - http://www.securityfocus.com/bid/63646 - http://www.debian.org/security/2013/dsa-2812 - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html - http://www.samba.org/samba/history/samba-3.6.20.html - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://lists.opensuse.org/opensuse-updates/2013-11/msg00083.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00115.html - https://
org/opensuse-updates/2013-12/msg00088.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00115.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - http://www.samba.org/samba/security/CVE-2013-4475 - http://rhn.redhat.com/errata/RHSA-2013-1806.html - https://blogs.oracle.com/sunsecurity/entry/cve_2013_4475_access_control - http://lists.opensuse.org/opensuse-updates/2013-11/msg00117.html - http://rhn.redhat.com/errata/RHSA-2014-0009.html
CVE ID: CVE-2013-4476 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T16:45:14.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/history/samba-4.1.1.html - http://www.samba.org/samba/history/samba-4.0.11.html - http://security.gentoo.org/glsa/glsa-201502-15.xml - http
.html - http://www.samba.org/samba/history/samba-4.0.11.html - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://lists.opensuse.org/opensuse-updates/2013-11/msg00083.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html - http://www.samba.org/samba/security/CVE-2013-4476
CVE ID: CVE-2013-4477 State: PUBLISHED Published: 2013-11-02T19:00:00 Last Updated: 2024-08-06T16:45:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/30/6 - http://www.ubuntu.com/usn/USN-2034-1 - http://rhn.redhat.com/errata/RHSA-2014-0113.html - https://bugs.launchpad.net/keystone/+bug/1242855
CVE ID: CVE-2013-4478 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T16:45:14.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment. Additional Analyst Notes: - CVE Program Container: References: - http://rubyforge.org/pipermail/sup-talk/2013-August/004993.html - http://secunia.com/advisories/55294 - http://secunia.com/advisories/55400 - http://rubyforge.org/pipermail/sup-talk/2013-October/004996.html - http://www.debian.org/security/2012/dsa-2805 - https://github.com/sup-heliotrope/sup/commit/
/2013-October/004996.html - http://www.debian.org/security/2012/dsa-2805 - https://github.com/sup-heliotrope/sup/commit/8b46cdbfc14e07ca07d403aa28b0e7bc1c544785 - http://www.openwall.com/lists/oss-security/2013/10/30/2
CVE ID: CVE-2013-4479 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T16:45:14.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sup-heliotrope/sup/commit/ca0302e0c716682d2de22e9136400c704cc93e42 - http://secunia.com/advisories/55294 - http://secunia.com/advisories/55400 - http://seclists.org/fulldisclosure/2013/Oct/272 - http://rubyforge.org/pipermail/sup-talk/2013-October/0
isories/55400 - http://seclists.org/fulldisclosure/2013/Oct/272 - http://rubyforge.org/pipermail/sup-talk/2013-October/004996.html - http://www.debian.org/security/2012/dsa-2805 - http://www.openwall.com/lists/oss-security/2013/10/30/2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165917.html
CVE ID: CVE-2013-4480 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T16:45:14.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00009.html - https://bugzilla.redhat.com/show_bug.cgi?id=1024614 - http://rhn.redhat.com/errata/RHSA-2013-1513.html - http://rhn.redhat.com/errata/RHSA-2013-1514.html - https://access.redhat.com/site/articles/539283
CVE ID: CVE-2013-4481 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1603.html - https://bugzilla.redhat.com/show_bug.cgi?id=988998
CVE ID: CVE-2013-4482 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the (1) current working directory or (2) its parent directories. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1603.html - https://bugzilla.redhat.com/show_bug.cgi?id=990321
CVE ID: CVE-2013-4483 State: PUBLISHED Published: 2013-11-04T11:00:00 Last Updated: 2024-08-06T16:45:14.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of service (memory consumption or system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.openwall.com/lists/oss-security/2013/10/30/4 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10
html - http://www.openwall.com/lists/oss-security/2013/10/30/4 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6062a8dc0517bce23e3c2f7d2fea5e22411269a3 - https://bugzilla.redhat.com/show_bug.cgi?id=1024854 - http://rhn.redhat.com/errata/RHSA-2015-0284.html - https://github.com/torvalds/linux/commit/6062a8dc0517bce23e3c2f7d2fea5e22411269a3
CVE ID: CVE-2013-4484 State: PUBLISHED Published: 2013-11-01T01:00:00 Last Updated: 2024-08-06T16:45:14.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html - http://www.debian.org/security/2012/dsa-2814 - http://www.openwall.com/lists/oss-security/2013/10/30/5 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html - http://lists.opensuse.org/opensuse-up
/2013/10/30/5 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html - https://www.varnish-cache.org/trac/ticket/1367 - http://secunia.com/advisories/55746 - http://secunia.com/advisories/55452
CVE ID: CVE-2013-4485 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1752.html - http://secunia.com/advisories/55765 - http://rhn.redhat.com/errata/RHSA-2013-1753.html
CVE ID: CVE-2013-4486 State: PUBLISHED Published: 2019-12-03T14:43:19 Last Updated: 2024-08-06T16:45:14.643Z Vendors: Zanata Products: Zanata Problem Types: Remote code execution due to EL interpolation in logging Description: Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4486 - https://access.redhat.com/security/cve/cve-2013-4486 - https://github.com/zanata/zanata-server/wiki/Security-advisories
CVE ID: CVE-2013-4487 State: PUBLISHED Published: 2013-11-19T19:00:00Z Last Updated: 2024-09-16T21:09:04.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries. NOTE: this issue is due to an incomplete fix for CVE-2013-4466. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html - http://www.openwall.com/lists/oss-security/2013/10/31/4 - https://gitorious.org/gnutls/gnutls/
s/2013-11/msg00064.html - http://www.openwall.com/lists/oss-security/2013/10/31/4 - https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc
CVE ID: CVE-2013-4488 State: PUBLISHED Published: 2014-10-10T01:00:00 Last Updated: 2024-08-06T16:45:14.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201508-02 - https://bugzilla.redhat.com/show_bug.cgi?id=1025718 - http://www.securityfocus.com/bid/63473 - http://www.openwall.com/lists/oss-security/2013/10/31/5 - http://www.mail-archive.com/libgadu-devel%40lists.ziew.org/msg01017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:
-archive.com/libgadu-devel%40lists.ziew.org/msg01017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:185 - https://lists.fedoraproject.org/pipermail/package-announce/2013-December/125143.html
CVE ID: CVE-2013-4489 State: PUBLISHED Published: 2014-05-17T20:00:00 Last Updated: 2024-08-06T16:45:14.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release/
CVE ID: CVE-2013-4490 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:14.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key. Additional Analyst Notes: - CVE Program Container: References: - https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release/
CVE ID: CVE-2013-4491 State: PUBLISHED Published: 2013-12-07T00:00:00 Last Updated: 2024-08-06T16:45:14.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generation of a fallback string by the i18n gem. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0008.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html - http://
//rhn.redhat.com/errata/RHSA-2014-0008.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html - http://secunia.com/advisories/57836 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html - http://www.securityfocus.com/bid/64076 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/pLrh6DUw998/bLFEyIO4k_EJ - http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/ - http://rhn.redhat.com/errata/RHSA-2014-1863.html - http://rhn.redhat.com/errata/RHSA-2013-1794.html - http://www.getchef.com/blog
n.redhat.com/errata/RHSA-2014-1863.html - http://rhn.redhat.com/errata/RHSA-2013-1794.html - http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ - http://www.debian.org/security/2014/dsa-2888 - https://puppet.com/security/cve/cve-2013-4491
CVE ID: CVE-2013-4492 State: PUBLISHED Published: 2013-12-07T00:00:00 Last Updated: 2024-08-06T16:45:15.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00093.html - http://www.securityfocus.com/bid/64076 - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/pLrh6DUw998/bLFEyIO4k_EJ - http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_a
orum/message/raw?msg=ruby-security-ann/pLrh6DUw998/bLFEyIO4k_EJ - http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/ - http://www.debian.org/security/2013/dsa-2830 - https://github.com/svenfuchs/i18n/commit/92b57b1e4f84adcdcc3a375278f299274be62445
CVE ID: CVE-2013-4493 State: REJECTED Published: 2022-06-30T20:29:03 Last Updated: 2022-06-30T20:29:03 Description: No description available.
CVE ID: CVE-2013-4494 State: PUBLISHED Published: 2013-11-02T18:00:00 Last Updated: 2024-08-06T16:45:14.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://www.openwall.com/lists/oss-security/2013/11/01/2 - http://www.openwall.com/lists/oss-security/2013/11/01/3 - http://rhn.redhat.com/err
om/lists/oss-security/2013/11/01/2 - http://www.openwall.com/lists/oss-security/2013/11/01/3 - http://rhn.redhat.com/errata/RHSA-2014-0108.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
CVE ID: CVE-2013-4495 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T16:45:14.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55622 - https://www.debian.org/security/2013/dsa-2796 - https://www.adaptivecomputing.com/wp-content/uploads/releasenotes/releaseNotes-4.2.6.html - http://secunia.com/advisories/555
://www.adaptivecomputing.com/wp-content/uploads/releasenotes/releaseNotes-4.2.6.html - http://secunia.com/advisories/55535
CVE ID: CVE-2013-4496 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T16:45:15.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/history/samba-4.1.6.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - https://bugzilla.samba.org/show_bug.cgi?id=10245 - htt
aproject.org/pipermail/package-announce/2014-August/136864.html - https://bugzilla.samba.org/show_bug.cgi?id=10245 - http://www.samba.org/samba/security/CVE-2013-4496 - http://advisories.mageia.org/MGASA-2014-0138.html - http://www.samba.org/samba/history/samba-4.0.16.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00063.html - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00062.html - https://h205
ecurity-announce/2016-04/msg00047.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00062.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://www.securityfocus.com/bid/66336 - http://rhn.redhat.com/errata/RHSA-2014-0330.html - http://www.ubuntu.com/usn/USN-2156-1 - http://www.samba.org/samba/history/samba-3.6.23.html