Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m/2013/12/16/mybb-1-6-12-released-security-maintenance-release - http://secunia.com/advisories/55945 - http://www.securityfocus.com/bid/64570 - http://osvdb.org/show/osvdb/101544
CVE ID: CVE-2013-7289 State: PUBLISHED Published: 2014-01-10T16:00:00Z Last Updated: 2024-09-16T17:03:40.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/aphpkb/code/91 - http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html - http://secunia.com/advisories/56228 - http://osvdb.org/101466
CVE ID: CVE-2013-7290 State: PUBLISHED Published: 2014-01-13T21:00:00 Last Updated: 2024-08-06T18:01:20.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr, a different vulnerability than CVE-2013-0179. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/memcached/wiki/ReleaseNotes1417 - http://www.s
t Notes: - CVE Program Container: References: - https://code.google.com/p/memcached/wiki/ReleaseNotes1417 - http://www.securityfocus.com/bid/64988 - https://code.google.com/p/memcached/issues/detail?id=306
CVE ID: CVE-2013-7291 State: PUBLISHED Published: 2014-01-13T21:00:00 Last Updated: 2024-08-06T18:01:20.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/memcached/wiki/ReleaseNotes1417 - http://www.securityfocus.com/bid/64989 - https://code.google.com/p/memcached/issues/det
emcached/wiki/ReleaseNotes1417 - http://www.securityfocus.com/bid/64989 - https://code.google.com/p/memcached/issues/detail?id=306
CVE ID: CVE-2013-7292 State: PUBLISHED Published: 2014-01-13T15:00:00Z Last Updated: 2024-09-17T04:04:09.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/612076
CVE ID: CVE-2013-7293 State: PUBLISHED Published: 2014-01-15T02:00:00 Last Updated: 2024-08-06T18:01:20.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traffic by controlling the server associated with that hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64799 - http://www.kb.cert.org/vuls/id/191750
CVE ID: CVE-2013-7294 State: PUBLISHED Published: 2014-01-16T02:00:00 Last Updated: 2024-08-06T18:01:20.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification without a KE payload. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56276 - http://secunia.com/advisories/56915 - https://lists.libreswan.org/pipermail/swan-announce/2013/000007.html - https://github.com/libreswan/libreswan/commit/2899351224fe2940aec37d7656e1e392c0fe07f0 - http://www.osvdb.org/101573
CVE ID: CVE-2013-7295 State: PUBLISHED Published: 2014-01-17T19:00:00 Last Updated: 2024-08-06T18:01:20.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for (1) relay identity keys and (2) hidden-service identity keys, which might make it easier for remote attackers to bypass cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-01/msg00095.html - https://lists.torproject.or
Container: References: - http://lists.opensuse.org/opensuse-updates/2014-01/msg00095.html - https://lists.torproject.org/pipermail/tor-talk/2013-December/031483.html
CVE ID: CVE-2013-7296 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T18:01:20.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125710.html - http://secunia.com/advisories/56567 - http://seclists.org/oss-sec/2014/q1/105 - http://security.gentoo.org
125710.html - http://secunia.com/advisories/56567 - http://seclists.org/oss-sec/2014/q1/105 - http://security.gentoo.org/glsa/glsa-201401-21.xml - http://cgit.freedesktop.org/poppler/poppler/commit/?id=58e04a08afee39370283c494ee2e4e392fd3b684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90552 - https://bugzilla.redhat.com/show_bug.cgi?id=1048199 - http://seclists.org/oss-sec/2014/q1/97 - http://secunia.com/advisories/56776
CVE ID: CVE-2013-7298 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:20.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90564 - http://www.securityfocus.com/bid/65020 - http://seclists.org/oss-sec/2014/q1/116 - http://seclists.org/oss-sec/2014/q1/112 - http://secunia.com/advisories/56363 - http://www.tntnet.org/download/cxxtools-2.2.1/Release
ts.org/oss-sec/2014/q1/112 - http://secunia.com/advisories/56363 - http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html
CVE ID: CVE-2013-7299 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:20.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information via a header that ends in \n instead of \r\n, which prevents a null terminator from being added and causes Tntnet to include headers from other requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56400 - https://github.com/maekitalo/tntnet/commit/9bd3b14042e12d84f39ea9f55731705ba516f525 - http://seclists.org/oss-sec/2014/q1/116 - http://lists.fedoraproject.
/commit/9bd3b14042e12d84f39ea9f55731705ba516f525 - http://seclists.org/oss-sec/2014/q1/116 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127746.html - http://seclists.org/oss-sec/2014/q1/112 - http://www.securityfocus.com/bid/65025 - http://www.tntnet.org/download/tntnet-2.2.1/Releasenotes-2.2.1.markdown - https://exchange.xforce.ibmcloud.com/vulnerabilities/90565
CVE ID: CVE-2013-7300 State: PUBLISHED Published: 2014-02-02T00:00:00 Last Updated: 2024-08-06T18:01:20.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/cantata/issues/detail?id=356 - http://seclists.org/oss-sec/2014/q1/124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90580 - http://seclists.org/oss-sec/2014/q1/121
CVE ID: CVE-2013-7301 State: PUBLISHED Published: 2014-02-02T00:00:00 Last Updated: 2024-08-06T18:01:20.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/cantata/issues/detail?id=356 - http://seclists.org/oss-sec/2014/q1/124 - http://seclists.org/oss-sec/2014/q1/121
CVE ID: CVE-2013-7302 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:20.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2158651 - https://drupal.org/node/2158567 - https://drupal.org/node/2158565
CVE ID: CVE-2013-7303 State: PUBLISHED Published: 2014-01-30T21:00:00 Last Updated: 2024-08-06T18:01:20.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56381 - http://core.spip.org/projects/spip/repository/revisions/20902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90643 - http://www.securitytracker.c
p/repository/revisions/20902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90643 - http://www.securitytracker.com/id/1029703 - http://seclists.org/oss-sec/2014/q1/128 - http://www.spip.net/fr_article5665.html - http://zone.spip.org/trac/spip-zone/changeset/77768 - http://www.spip.net/fr_article5648.html - http://seclists.org/oss-sec/2014/q1/123
CVE ID: CVE-2013-7304 State: PUBLISHED Published: 2014-01-22T19:00:00 Last Updated: 2024-08-06T18:01:20.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which allows man-in-the-middle attackers to spoof SSL servers by presenting an arbitrary certificate during a session established by a client. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97784 - http://secunia.com/advisories/56744 - https://exchange.xforce.ibmcloud.com/
oGoviewsolutiondetails=&solutionid=sk97784 - http://secunia.com/advisories/56744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90674 - http://www.securityfocus.com/bid/65135 - http://www.securitytracker.com/id/1029704
CVE ID: CVE-2013-7305 State: PUBLISHED Published: 2014-01-22T19:00:00Z Last Updated: 2024-09-16T20:26:33.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/e107/svn/13114
CVE ID: CVE-2013-7306 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T16:12:31.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-98MS25 - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7307 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T18:28:32.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-97KQ2C - h
13-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-97KQ2C - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7308 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-17T04:15:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QRV -
013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QRV - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7309 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T22:41:35.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QSE - http://www.kb.cert.org/vuls/id/22
s: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QSE - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7310 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T20:47:17.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html - http://www.kb.cert.or
E Program Container: References: - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html - http://www.kb.cert.org/vuls/id/229804 - http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ
CVE ID: CVE-2013-7311 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T23:32:05.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-
to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QRC - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7312 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-17T00:21:07.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QS8 - https://community.entera
lyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QS8 - https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3 - http://www.kb.cert.org/vuls/id/229804 - https://cp-enterasys.kb.net/article.aspx?article=15134&p=1
CVE ID: CVE-2013-7313 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-16T17:24:00.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-9
to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-97KQ26 - http://www.kb.cert.org/vuls/id/229804
CVE ID: CVE-2013-7314 State: PUBLISHED Published: 2014-01-23T17:00:00Z Last Updated: 2024-09-17T04:23:52.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QUQ - http://jp
Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-985QUQ - http://jpn.nec.com/security-info/secinfo/nv13-006.html - http://www.kb.cert.org/vuls/id/229804 - http://jpn.nec.com/univerge/ix/Support/CERT/VU229804.html
CVE ID: CVE-2013-7315 State: PUBLISHED Published: 2014-01-23T21:00:00 Last Updated: 2024-08-06T18:01:20.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions. Additional Analyst Notes: - CVE Program Container: References:
T from CVE-2013-4152 due to different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.gopivotal.com/security/cve-2013-4152 - http://seclists.org/fulldisclosure/2013/Nov/14 - http://seclists.org/bugtraq/2013/Aug/154 - http://www.debian.org/security/2014/dsa-2842 - http://www.securityfocus.com/bid/77998 - https://jira.springsource.org/browse/SPR-10806
CVE ID: CVE-2013-7316 State: PUBLISHED Published: 2014-01-24T15:00:00 Last Updated: 2024-08-06T18:01:20.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML file, as demonstrated by README.html. Additional Analyst Notes: - CVE Program Container: References: - https://www.gitlab.com/2014/01/30/xss-vulnerability-in-gitlab/ - http://www.securityfocus.com/bid/64490 - http://www.exploit-db.com/exploits/30329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89932
CVE ID: CVE-2013-7317 State: PUBLISHED Published: 2014-01-24T15:00:00Z Last Updated: 2024-09-17T02:32:17.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) settings_file or (2) data_file parameter to (a) ampie.swf, (b) amline.swf, or (c) amcolumn.swf. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/405942
CVE ID: CVE-2013-7318 State: PUBLISHED Published: 2014-01-29T18:00:00Z Last Updated: 2024-09-16T22:24:35.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122899/algosec64-xss.txt - http://www.osvdb.org/96807
CVE ID: CVE-2013-7319 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T18:01:20.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64159 - http://www.wpdownloadmanager.com/support/topic/security-issue-found-who-to-contact - http://secunia.com/advisories/55969 - http://www.exploit-db.com/exploits/30105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89524 - http://www.nerdb