Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
00034.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:146 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html - http://secunia.com/advisories/53109 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html - http://www.securityfocus.com/bid/59286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83640 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html - http://secunia.com/advisories/53117 - http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/19f5282f53e8 - http://rhn.redhat.com/errata/RHSA-2013-0753.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - http://lists.opensuse.org/opensuse-upda
3-0753.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html - http://www.ubuntu.com/usn/USN-1804-1 - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html - https://bugzilla.redhat.com/show_bug.cgi?id=884705 - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/cb58b31c450e - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html
CVE ID: CVE-2013-1928 State: PUBLISHED Published: 2013-04-29T10:00:00 Last Updated: 2024-08-06T15:20:37.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html - https://github.com/torvalds/linux/commit/12176503366885edd542389eed3aaf94be163fdb -
ty-announce/2013-05/msg00018.html - https://github.com/torvalds/linux/commit/12176503366885edd542389eed3aaf94be163fdb - http://www.openwall.com/lists/oss-security/2013/04/06/2 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html - http://www.ubuntu.com/usn/USN-1829-1 - http://www.openwall.com/lists/oss-security/2013/04/09/6 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - https://bugzilla.redhat.com/show_bug.cgi?id=949567 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12176503366885edd542389eed3aaf94be163fdb - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.5
CVE ID: CVE-2013-1929 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-06T15:20:37.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1834-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://bugzilla.re
://www.ubuntu.com/usn/USN-1834-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://bugzilla.redhat.com/show_bug.cgi?id=949932 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.ubuntu.com/usn/USN-1835-1 - http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf - http://www.ubuntu.com/usn/USN-1838-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=715230a44310a8cf66fbfb5a46f9a62a9b2de424 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1836-1 - https://github.com/torvalds/linux/commit/71523
se-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1836-1 - https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101836.html - http://www.openwall.com/lists/oss-security/2013/04/06/3
CVE ID: CVE-2013-1930 State: PUBLISHED Published: 2019-10-31T19:05:01 Last Updated: 2024-08-06T15:20:37.209Z Vendors: mantisBT Products: mantisBT Problem Types: Other Description: MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1930 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1930 - http://www.securityfocus.com/bid/58890 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html - http://www.openwall.co
/103438.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html - http://www.openwall.com/lists/oss-security/2013/04/06/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83796 - https://mantisbt.org/bugs/view.php?id=15453
CVE ID: CVE-2013-1931 State: PUBLISHED Published: 2019-10-31T19:05:05 Last Updated: 2024-08-06T15:20:37.228Z Vendors: mantisBT Products: mantisBT Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1931 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1931 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-Apr
g/pipermail/package-announce/2013-April/103438.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html - http://www.openwall.com/lists/oss-security/2013/04/06/4 - http://www.securityfocus.com/bid/58889 - https://mantisbt.org/bugs/view.php?id=15511
CVE ID: CVE-2013-1932 State: PUBLISHED Published: 2019-10-31T19:05:12 Last Updated: 2024-08-06T15:20:37.088Z Vendors: mantisBT Products: mantisBT Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1932 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1932 - http://www.openwall.com/lists/oss-security/2013/04/06/4 - http://www.securityfocus.com/bid/58893 - https://m
2013-1932 - http://www.openwall.com/lists/oss-security/2013/04/06/4 - http://www.securityfocus.com/bid/58893 - https://mantisbt.org/bugs/view.php?id=15415
CVE ID: CVE-2013-1933 State: PUBLISHED Published: 2013-04-25T23:00:00 Last Updated: 2024-08-06T15:20:37.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92117 - http://vapid.dhs.org/advisories/karteek-docsplit-cmd-inject.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83277 - http://www.openwall.com/lists/oss-security/2013/04/08/15
CVE ID: CVE-2013-1934 State: PUBLISHED Published: 2019-10-31T19:05:16 Last Updated: 2024-08-06T15:20:37.118Z Vendors: mantisBT Products: mantisBT Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3120 - https://security-tracker.debian.org/tracker/CVE-2013-1934 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1934 - http://www.openwall.com/lists/oss-security/2
CVE-2013-1934 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1934 - http://www.openwall.com/lists/oss-security/2013/04/09/1 - https://mantisbt.org/bugs/view.php?id=15416
CVE ID: CVE-2013-1935 State: PUBLISHED Published: 2013-07-16T10:00:00 Last Updated: 2024-08-06T15:20:37.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest OS users to cause a denial of service (host OS crash) by leveraging a time window during which interrupts are disabled but copy_to_user function calls are possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=949981 - https://rhn.redhat.com/errata/RHSA-2013-0907.html -
: References: - https://bugzilla.redhat.com/show_bug.cgi?id=949981 - https://rhn.redhat.com/errata/RHSA-2013-0907.html - http://rhn.redhat.com/errata/RHSA-2013-0911.html
CVE ID: CVE-2013-1936 State: REJECTED Published: 2018-02-23T17:00:00 Last Updated: 2018-02-23T16:57:01 Description: No description available.
CVE ID: CVE-2013-1937 State: PUBLISHED Published: 2013-04-16T10:00:00 Last Updated: 2024-08-06T15:20:37.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter. NOTE: a third party reports that this is "not exploitable. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:144 - http://immunityservices.blogspot.com/2019/02/cvss.html - https://github
va.com/security/advisories?name=MDVSA-2013:144 - http://immunityservices.blogspot.com/2019/02/cvss.html - https://github.com/phpmyadmin/phpmyadmin/commit/79089c9bc02c82c15419fd9d6496b8781ae08a5a - http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103188.html - http://packetstormsecurity.com/files/121205/phpMyAdmin-3.5.7-Cross-Site-Scripting.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103195.html - http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0101.html - http://openwall.com/lists/oss-security/2013/04/09/13 - http://lists.fedoraproject.org/pipermail/package-ann
/0101.html - http://openwall.com/lists/oss-security/2013/04/09/13 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103184.html - http://www.phpmyadmin.net/home_page/security/PMASA-2013-1.php - http://www.waraxe.us/advisory-102.html
CVE ID: CVE-2013-1938 State: PUBLISHED Published: 2020-02-12T15:02:24 Last Updated: 2024-08-06T15:20:37.024Z Vendors: Zimbra Products: Zimbra Problem Types: XSS Description: Zimbra 2013 has XSS in aspell.php Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58913 - http://www.openwall.com/lists/oss-security/2013/04/09/14 - http://www.openwall.com/lists/oss-security/2013/04/09/15
CVE ID: CVE-2013-1939 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ - http://owncloud.org/about/security/advisories/oC-SA-2013-016/
CVE ID: CVE-2013-1940 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=63353 - http://www.ubuntu.com/usn/USN-1803-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html - http://lists.opensuse.o
/USN-1803-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00015.html - http://www.debian.org/security/2013/dsa-2661 - http://www.openwall.com/lists/oss-security/2013/04/18/3 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html
CVE ID: CVE-2013-1941 State: PUBLISHED Published: 2014-06-04T14:00:00 Last Updated: 2024-08-06T15:20:37.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-015/
CVE ID: CVE-2013-1942 State: PUBLISHED Published: 2013-08-15T17:00:00 Last Updated: 2024-08-06T15:20:37.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, as demonstrated using document.write in the jQuery parameter, a different vulnerability than CVE-2013-2022 and CVE-2013-2023. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
022 and CVE-2013-2023. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59030 - http://marc.info/?l=oss-security&m=136773622321563&w=2 - http://marc.info/?l=oss-security&m=136570964825921&w=2 - http://www.jplayer.org/2.3.0/release-notes/ - http://owncloud.org/about/security/advisories/oC-SA-2013-014/ - https://github.com/happyworm/jPlayer/commit/e8ca190f7f972a6a421cb95f09e138720e40ed6d - http://seclists.org/fulldisclosure/2013/Apr/192 - http://marc.info/?l=oss-security&m=136726705917858&w=2
CVE ID: CVE-2013-1943 State: PUBLISHED Published: 2013-07-16T10:00:00 Last Updated: 2024-08-06T15:20:37.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20130329070349/http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0
iner: References: - http://web.archive.org/web/20130329070349/http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - https://github.com/torvalds/linux/commit/fa3d315a4ce2c0891cdde262562e710d95fba19e - https://bugzilla.redhat.com/show_bug.cgi?id=950490 - http://www.ubuntu.com/usn/USN-1939-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa3d315a4ce2c0891cdde262562e710d95fba19e
CVE ID: CVE-2013-1944 State: PUBLISHED Published: 2013-04-29T22:00:00 Last Updated: 2024-08-06T15:20:37.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:151 - http://www.osvdb.org/92316 - http://www.debian.org/security/2012/dsa-2660 - http://lists.fedo
ries?name=MDVSA-2013:151 - http://www.osvdb.org/92316 - http://www.debian.org/security/2012/dsa-2660 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104598.html - http://www.ubuntu.com/usn/USN-1801-1 - https://bugzilla.redhat.com/show_bug.cgi?id=950577 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104207.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102056.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102711.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://curl.haxx.se/docs/adv_20130412.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg000
t/msg00004.html - http://curl.haxx.se/docs/adv_20130412.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00016.html - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0121 - http://www.securityfocus.com/bid/59058 - http://secunia.com/advisories/53044 - http://rhn.redhat.com/errata/RHSA-2013-0771.html - http://secunia.com/advisories/53051 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105539.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106606.html - http://secunia.com/advisories/53097 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00013.html - https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702
use.org/opensuse-updates/2013-06/msg00013.html - https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702dbcab66
CVE ID: CVE-2013-1945 State: PUBLISHED Published: 2019-10-31T19:24:57 Last Updated: 2024-08-06T15:20:37.287Z Vendors: ruby193 Products: ruby193 Problem Types: Unknown Description: ruby193 uses an insecure LD_LIBRARY_PATH setting. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1945
CVE ID: CVE-2013-1946 State: PUBLISHED Published: 2014-04-06T16:00:00 Last Updated: 2024-08-06T15:20:37.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/92259 - https://drupal.org/node/1966758 - https://drupal.org/node/1966752 - https://
References: - http://www.osvdb.org/92259 - https://drupal.org/node/1966758 - https://drupal.org/node/1966752 - https://drupal.org/node/1966780 - http://www.openwall.com/lists/oss-security/2013/04/12/1
CVE ID: CVE-2013-1947 State: PUBLISHED Published: 2013-04-25T23:00:00Z Last Updated: 2024-09-16T18:19:38.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/12/2 - http://www.openwall.com/lists/oss-security/2013/04/10/3
CVE ID: CVE-2013-1948 State: PUBLISHED Published: 2013-04-25T23:00:00 Last Updated: 2024-08-06T15:20:37.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://vapid.dhs.org/advisories/md2pdf-remote-exec.html - http://osvdb.org/92290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83416 - http://www.securityfocus.com/bid/59061
CVE ID: CVE-2013-1949 State: PUBLISHED Published: 2013-04-25T23:00:00Z Last Updated: 2024-09-17T00:16:39.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://it.slashdot.org/story/13/04/13/212226/popular-wordpress-plug-in-caught-spamming-is-put-on-probation - http://securityledger.com/hacked-wordpress-plug-in-put-on-double-secret-probation/ - http://www.openwall.com/lists/oss-security/2013/04/14/1 - http://blog.su
press-plug-in-put-on-double-secret-probation/ - http://www.openwall.com/lists/oss-security/2013/04/14/1 - http://blog.sucuri.net/2013/04/wordpress-plugin-social-media-widget.html
CVE ID: CVE-2013-1950 State: PUBLISHED Published: 2013-07-09T17:00:00Z Last Updated: 2024-08-06T15:20:37.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=948378 - http://git.infradead.org/users/steved/libtirpc.git/commitdiff/a9f437119d79a438cb12e510f3cadd4060102c9f - http://rhn.redhat.com/errata/RHSA-2013-0884.html
CVE ID: CVE-2013-1951 State: PUBLISHED Published: 2019-10-31T19:33:37 Last Updated: 2024-08-06T15:20:37.304Z Vendors: ikimedia Foundation Products: MediaWiki Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1951 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951 - http://security.gentoo.org/glsa/glsa-201310-21.xml - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951 - http://lists.
tp://security.gentoo.org/glsa/glsa-201310-21.xml - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.html - http://www.openwall.com/lists/oss-security/2013/04/16/12 - http://www.securityfocus.com/bid/59077 - https://phabricator.wikimedia.org/T48084