Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0175 State: PUBLISHED Published: 2013-04-25T23:00:00Z Last Updated: 2024-08-06T14:18:09.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156. Additional Analyst Notes: - CVE Program Container: References: - https://gi
n, a similar vulnerability to CVE-2013-0156. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sferik/multi_xml/pull/34 - https://gist.github.com/nate/d7f6d9f4925f413621aa - http://www.openwall.com/lists/oss-security/2013/01/11/9 - https://groups.google.com/forum/?fromgroups=#%21topic/ruby-grape/fthDkMgIOa0 - https://news.ycombinator.com/item?id=5040457
CVE ID: CVE-2013-0176 State: PUBLISHED Published: 2013-02-05T23:11:00 Last Updated: 2024-08-06T14:18:09.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81595 - http://secunia.com/advisories/51982 - http://lists.fedorapro
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/81595 - http://secunia.com/advisories/51982 - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html - http://www.ubuntu.com/usn/USN-1707-1 - http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/
CVE ID: CVE-2013-0177 State: PUBLISHED Published: 2014-01-30T15:00:00 Last Updated: 2024-08-06T14:18:09.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x allow remote authenticated users to inject arbitrary web script or HTML via the (1) Screenlet.title or (2) Image.alt Widget attribute, as demonstrated by the parentPortalPageId parameter to exampleext/control/ManagePortalPages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89453 - http://ofbiz.apach
ortalPages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89453 - http://ofbiz.apache.org/download.html#vulnerabilities - http://seclists.org/fulldisclosure/2013/Jan/148 - http://osvdb.org/89452 - http://packetstormsecurity.com/files/119673/Apache-OFBiz-Cross-Site-Scripting.html - https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81398 - http://secunia.com/advisories/51812 - https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432850
CVE ID: CVE-2013-0178 State: PUBLISHED Published: 2019-11-01T18:25:27 Last Updated: 2024-08-06T14:18:09.441Z Vendors: Redis Labs Products: Redis Problem Types: Other Description: Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-0178 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0178 - http://www.openwall.com/lists/oss-security/2013/01/14/5 - http://www.openwall.com/lists/oss-security/2013/01/14/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81329 - https://github.com/antirez/redis/commit/697af434fbeb2e3ba2ba9687cd283ed1
nge.xforce.ibmcloud.com/vulnerabilities/81329 - https://github.com/antirez/redis/commit/697af434fbeb2e3ba2ba9687cd283ed1a2734fa5
CVE ID: CVE-2013-0179 State: PUBLISHED Published: 2014-01-13T21:00:00 Last Updated: 2024-08-06T14:18:09.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/memcached/issues/attachmentText?id=306&aid=3060004000&name=0001-Fix-buffer-overru
eferences: - https://code.google.com/p/memcached/issues/attachmentText?id=306&aid=3060004000&name=0001-Fix-buffer-overrun-when-logging-key-to-delete-in-bin.patch&token=3GEzHThBL5cxmUrsYANkW03RrNY%3A1358179503096 - http://www.openwall.com/lists/oss-security/2013/01/14/4 - https://code.google.com/p/memcached/wiki/ReleaseNotes1417 - http://www.openwall.com/lists/oss-security/2013/01/14/6 - http://www.ubuntu.com/usn/USN-2080-1 - https://code.google.com/p/memcached/issues/detail?id=306 - http://secunia.com/advisories/56183 - http://www.securityfocus.com/bid/64978 - https://bugzilla.redhat.com/show_bug.cgi?id=895054
CVE ID: CVE-2013-0180 State: PUBLISHED Published: 2019-11-01T18:25:30 Last Updated: 2024-08-06T14:18:09.403Z Vendors: Redis Labs Products: Redis Problem Types: Other Description: Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/01/14/7 - https://bugzilla.redhat.com/show_bug.cgi?id=894659
CVE ID: CVE-2013-0181 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T14:18:09.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89117 - http://drupalcode.org/project/search_api.git/commitdiff/35b5728 - http://secunia.com/advisories/51806 - http://www.openwall.com/lists/oss-security/2013/01
ch_api.git/commitdiff/35b5728 - http://secunia.com/advisories/51806 - http://www.openwall.com/lists/oss-security/2013/01/15/3 - https://drupal.org/node/1884076 - http://www.securityfocus.com/bid/57231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81153 - https://drupal.org/node/1884332
CVE ID: CVE-2013-0182 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T23:16:05.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1884360 - http://www.openwall.com/lists/oss-security/2013/01/15/3 - http://drupal.org/node/1883830 - http://drupal.org/node/1871508 - http://drupalcode.org/project/payment.git/commitdiff/62c9186
CVE ID: CVE-2013-0183 State: PUBLISHED Published: 2013-03-01T02:00:00 Last Updated: 2024-08-06T14:18:09.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff - https://bugzilla.redhat.com/show_bug.cgi?id=895282 - http://rack.github.com/ - https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtI - https://groups.google.com/fo
ttp://rack.github.com/ - https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtI - https://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSs - http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html - http://rhn.redhat.com/errata/RHSA-2013-0548.html - https://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18 - http://rhn.redhat.com/errata/RHSA-2013-0544.html - http://www.debian.org/security/2013/dsa-2783
CVE ID: CVE-2013-0184 State: PUBLISHED Published: 2013-03-01T02:00:00 Last Updated: 2024-08-06T14:18:08.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=895384 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html - http://rhn.redhat.com/errata/RHSA-2013-0548.html - http://rhn.redhat.com/errata/RHS
suse-updates/2013-03/msg00048.html - http://rhn.redhat.com/errata/RHSA-2013-0548.html - http://rhn.redhat.com/errata/RHSA-2013-0544.html - http://www.debian.org/security/2013/dsa-2783
CVE ID: CVE-2013-0185 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T14:18:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=895345
CVE ID: CVE-2013-0186 State: PUBLISHED Published: 2019-11-01T18:38:38 Last Updated: 2024-08-06T14:18:09.045Z Vendors: ManageIQ EVM, Red Hat Products: ManageIQ EVM, Red Hat CloudForms 3.0 Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0186 - https://access.redhat.com/errata/RHSA-2014:0215
CVE ID: CVE-2013-0187 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T14:18:09.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request. Additional Analyst Notes: - CVE Program Container: References: - http://theforeman.org/security.html
CVE ID: CVE-2013-0188 State: REJECTED Published: 2013-10-04T23:00:00Z Last Updated: 2024-09-17T01:47:02.689Z Description: No description available.
CVE ID: CVE-2013-0189 State: PUBLISHED Published: 2013-02-08T20:00:00 Last Updated: 2024-08-06T14:18:09.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch - http://www.debian.org/security/2013/dsa-2631 - http://www.mandriva.com/
/Versions/v3/3.1/changesets/SQUID-2012_1.patch - http://www.debian.org/security/2013/dsa-2631 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:129 - http://www.ubuntu.com/usn/USN-1713-1 - http://bazaar.launchpad.net/~squid/squid/3.2/revision/11744 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0029 - https://bugzilla.redhat.com/show_bug.cgi?id=887962#c9 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html - http://www.squid-cache.org/Versions/v3/3.2/changesets/SQUID-2012_1.patch - http://lists.fedoraproject.org/pipermail/scm-commits/2013-January/934637.html - http://secunia.com
/SQUID-2012_1.patch - http://lists.fedoraproject.org/pipermail/scm-commits/2013-January/934637.html - http://secunia.com/advisories/52024 - http://bazaar.launchpad.net/~squid/squid/3.2/revision/11743 - http://secunia.com/advisories/54839 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.securityfocus.com/bid/57646 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=895972
CVE ID: CVE-2013-0190 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T14:18:09.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggering an iret fault, leading to use of an incorrect stack pointer and stack corruption. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=896038 - http://rhn.redhat.com/errata/RHSA-2013-0496.html - http://www.ubuntu.com/usn/USN-1728-1 - http://www.ubuntu.com/usn/USN-1725-1 - ht
redhat.com/errata/RHSA-2013-0496.html - http://www.ubuntu.com/usn/USN-1728-1 - http://www.ubuntu.com/usn/USN-1725-1 - http://www.openwall.com/lists/oss-security/2013/01/16/6 - http://www.openwall.com/lists/oss-security/2013/01/16/8 - http://www.securityfocus.com/bid/57433
CVE ID: CVE-2013-0191 State: PUBLISHED Published: 2014-06-03T14:00:00 Last Updated: 2024-08-06T14:18:09.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://seclists.org/oss-sec/2013/q1/86 - http://www.securityfocus.com/bid/57440 - http://sourceforge.net/p/pam-pgsql/bugs/13/ - http://sourceforge.net/u/lvella/pam-pgsql/ci/9361f5970e5dd90a747319995b67
http://sourceforge.net/p/pam-pgsql/bugs/13/ - http://sourceforge.net/u/lvella/pam-pgsql/ci/9361f5970e5dd90a747319995b67c2f73b91448c/ - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://seclists.org/oss-sec/2013/q1/99 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81363
CVE ID: CVE-2013-0192 State: PUBLISHED Published: 2020-02-07T13:29:07 Last Updated: 2024-08-06T14:18:09.489Z Vendors: SMF Products: SMF Problem Types: file exposure Description: File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/01/4 - http://www.openwall.com/lists/oss-security/2013/01/17/5 - http://www.openwall.com/lists/oss-security/2013/01/31/1
CVE ID: CVE-2013-0193 State: PUBLISHED Published: 2019-11-20T14:26:54 Last Updated: 2024-08-06T14:18:09.554Z Vendors: piwik Products: piwik Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-0193 - http://www.openwall.com/lists/oss-security/2013/01/17/15 - https://matomo.org/changelog/piwik-1-10/
CVE ID: CVE-2013-0194 State: PUBLISHED Published: 2019-11-20T14:30:12 Last Updated: 2024-08-06T14:18:09.458Z Vendors: piwik Products: piwik Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/01/17/15 - https://security-tracker.debian.org/tracker/CVE-2013-0194 - https://matomo.org/changelog/piwik-1-10/
CVE ID: CVE-2013-0195 State: PUBLISHED Published: 2019-11-20T14:31:59 Last Updated: 2024-08-06T14:18:09.555Z Vendors: piwik Products: piwik Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/01/17/15 - https://security-tracker.debian.org/tracker/CVE-2013-0195 - https://matomo.org/changelog/piwik-1-10/
CVE ID: CVE-2013-0196 State: PUBLISHED Published: 2019-12-30T21:17:02 Last Updated: 2024-08-06T14:18:09.499Z Vendors: OpenShift Products: OpenShift Enterprise Problem Types: Cross-Site Request Forgery Description: A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196 - https://access.redhat.com/security/cve/cve-2013-0196
CVE ID: CVE-2013-0197 State: PUBLISHED Published: 2014-05-15T14:00:00 Last Updated: 2024-08-06T14:18:09.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the match_type parameter to bugs/search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.mantisbt.org/bugs/view.php?id=15373 - http://seclists.org/oss-sec/2013/q1/125 - http://hauntit.blogspot.de/2013/01/en-mantis-bug-tracker-1212-persistent.html - http://seclists.org/oss-sec/2013/q1/140 - h
p://hauntit.blogspot.de/2013/01/en-mantis-bug-tracker-1212-persistent.html - http://seclists.org/oss-sec/2013/q1/140 - http://secunia.com/advisories/51853 - http://seclists.org/oss-sec/2013/q1/118
CVE ID: CVE-2013-0198 State: PUBLISHED Published: 2013-03-04T21:00:00 Last Updated: 2024-08-06T14:18:09.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=894486 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:072 - http://www.thekelleys.org.uk/g
how_bug.cgi?id=894486 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:072 - http://www.thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=22ce550e5346947a12a781ed0959a7b1165d0dc6 - http://www.openwall.com/lists/oss-security/2013/01/18/7 - http://www.openwall.com/lists/oss-security/2013/01/18/2
CVE ID: CVE-2013-0199 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T14:18:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57542 - http://www.freeipa.org/page/Releases/3.1.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81486 - http://osvdb.org/89539 - http://www.freeipa.org/page/CVE-2013-0199
CVE ID: CVE-2013-0200 State: PUBLISHED Published: 2013-03-06T20:00:00 Last Updated: 2024-08-06T14:18:09.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55083 - http://www.ubuntu.com/usn/USN-1981-1 - ftp://ftp.scientificlinux.org/linux/scientific/6x/SRPMS/vendo
/advisories/55083 - http://www.ubuntu.com/usn/USN-1981-1 - ftp://ftp.scientificlinux.org/linux/scientific/6x/SRPMS/vendor/hplip-3.12.4-4.el6.src.rpm - https://bugzilla.redhat.com/show_bug.cgi?id=902163 - http://www.debian.org/security/2013/dsa-2829 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:088 - http://hplipopensource.com/hplip-web/release_notes.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0072
CVE ID: CVE-2013-0201 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T14:18:09.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to core/lostpassword/templates/resetpassword.php, (2) mime parameter to apps/files/ajax/mimeicon.php, or (3) token parameter to apps/gallery/sharing.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/89511 - https://github.com/owncloud/core/commit/b8e0309 - https://github.com/owncloud/core/commit/4e2b834 - http://osv
g/89511 - https://github.com/owncloud/core/commit/b8e0309 - https://github.com/owncloud/core/commit/4e2b834 - http://osvdb.org/89505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81475 - http://osvdb.org/89506 - http://owncloud.org/about/security/advisories/oC-SA-2013-001
CVE ID: CVE-2013-0202 State: PUBLISHED Published: 2019-11-22T18:53:38 Last Updated: 2024-08-06T14:18:09.399Z Vendors: ownCloud Products: ownCloud Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 - https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/
CVE ID: CVE-2013-0203 State: PUBLISHED Published: 2019-11-22T18:53:44 Last Updated: 2024-08-06T14:18:09.286Z Vendors: ownCloud Products: ownCloud Server Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81478 - https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/