Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4577 State: PUBLISHED Published: 2014-05-12T14:00:00.000Z Last Updated: 2025-02-13T16:27:10.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf2 directive in the file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632598 - http://seclists.org/oss-sec/2013/q4/291 - http://seclists.org/oss-sec/2013/q4/292 - http://www.openwall.com/lists/oss-security/2024/01/15/3
CVE ID: CVE-2013-4578 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-06T16:45:15.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2014:0414 - http://www.openwall.com/lists/oss-security/2015/02/08/6 - http://www.openwall.com/lists/oss-security/2015/02/09/9 - http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e - https://bugzilla.redhat.c
ists/oss-security/2015/02/09/9 - http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d5f36e1c927e - https://bugzilla.redhat.com/show_bug.cgi?id=1031471
CVE ID: CVE-2013-4579 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T16:45:15.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - h
: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/2013/11/15/3 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2134-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://www.ubuntu.com/usn/USN-2133-1 - http://www.mathyvanhoef.com/2013/11/unmasking-spoofed-mac-address.html - https://lists.ath9k.org/pipermail/ath9k-devel/2013-November/012215.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729573
CVE ID: CVE-2013-4580 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T16:45:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/15/4 - https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/
CVE ID: CVE-2013-4581 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T16:45:14.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/15/4 - https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/
CVE ID: CVE-2013-4582 State: PUBLISHED Published: 2020-01-28T15:17:23 Last Updated: 2024-08-06T16:45:15.169Z Vendors: GitLab Products: GitLab, GitLab Community Edition, GitLab Enterprise Edition, gitlab-shell Problem Types: Path Disclosure Description: The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://ww
ta of a Git repository via the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/15/4 - https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/ - https://www.openwall.com/lists/oss-security/2013/11/18/4
CVE ID: CVE-2013-4583 State: PUBLISHED Published: 2020-01-28T15:11:45 Last Updated: 2024-08-06T16:45:14.926Z Vendors: GitLab Products: GitLab, GitLab Community Edition, GitLab Enterprise Edition, gitlab-shell Problem Types: Directory Traversal (Local File Inclusion) Description: The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/15/4 - https://www.gitlab.com/2013/11/14/mult
ontainer: References: - http://www.openwall.com/lists/oss-security/2013/11/15/4 - https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/ - https://www.openwall.com/lists/oss-security/2013/11/18/4
CVE ID: CVE-2013-4584 State: PUBLISHED Published: 2019-11-15T14:04:20 Last Updated: 2024-08-06T16:45:14.872Z Vendors: Perdition Products: Perdition Problem Types: not applied to STARTTLS connections Description: Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4584 - https://access.redhat.com/security/cve/cve-2013-4584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89184 - http://www.openwall.com/lists/oss-security/2013/
013-4584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89184 - http://www.openwall.com/lists/oss-security/2013/11/15/6 - http://www.securityfocus.com/bid/63696 - https://github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddf
CVE ID: CVE-2013-4585 State: REJECTED Published: 2022-06-30T20:21:03 Last Updated: 2022-06-30T20:21:03 Description: No description available.
CVE ID: CVE-2013-4586 State: REJECTED Published: 2022-06-30T20:22:09 Last Updated: 2022-06-30T20:22:09 Description: No description available.
CVE ID: CVE-2013-4587 State: PUBLISHED Published: 2013-12-14T18:00:00 Last Updated: 2024-08-06T16:45:15.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/201
://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/2013/12/12/12 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://www.ubuntu.com/usn/USN-2109-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=1030986 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html - http://git.kernel.org/
bug.cgi?id=1030986 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338c7dbadd2671189cec7faf64c84d01071b3f96 - https://github.com/torvalds/linux/commit/338c7dbadd2671189cec7faf64c84d01071b3f96
CVE ID: CVE-2013-4588 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T16:45:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2065-1 - https://github.com/torvalds/linux/commit/04bcef2a83f40c6db24222
er: References: - http://www.ubuntu.com/usn/USN-2065-1 - https://github.com/torvalds/linux/commit/04bcef2a83f40c6db24222b27a52892cba39dffb - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=04bcef2a83f40c6db24222b27a52892cba39dffb - http://ftp.linux.org.uk/pub/linux/linux-2.6/ChangeLog-2.6.33 - http://www.securityfocus.com/bid/63744 - https://bugzilla.redhat.com/show_bug.cgi?id=1030800 - http://www.ubuntu.com/usn/USN-2064-1 - http://www.openwall.com/lists/oss-security/2013/11/15/12
CVE ID: CVE-2013-4589 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:15.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201311-10.xml - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120008.html - http://secunia.com/advisories/55721 - http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/ -
ml - http://secunia.com/advisories/55721 - http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/ - http://www.securityfocus.com/bid/63002 - http://sourceforge.net/p/graphicsmagick/code/ci/1a2d7a38363f7f23b63d626887d22d39c7240144/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html - http://secunia.com/advisories/55288 - http://www.openwall.com/lists/oss-security/2013/11/15/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1019085
CVE ID: CVE-2013-4590 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T16:45:15.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - http://www.mand
: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://secunia.com/advisories/59724 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://tomcat.apache.org/security-8.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677147 - http://svn.apache.org/viewvc?view=revision&revision=1549528 - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://advisories.mageia.org/MGA
revision&revision=1549528 - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://advisories.mageia.org/MGASA-2014-0148.html - https://bugzilla.redhat.com/show_bug.cgi?id=1069911 - http://secunia.com/advisories/59722 - http://www.securityfocus.com/bid/65768 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://secunia.com/advisories/59873 - http://www-01.ibm.com/support/docview.wss?uid=swg21667883 - http://svn.apache.org/viewvc?view=revision&revision=1558828 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http:
nfo/?l=bugtraq&m=144498216801440&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www-01.ibm.com/support/docview.wss?uid=swg21675886 - http://svn.apache.org/viewvc?view=revision&revision=1549529 - http://secunia.com/advisories/59036 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a
2d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2013-4591 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T16:45:15.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63791 - http://www.openwall.com/lists/oss-security/2013/11/18/2 - http://rhn.redhat.com/e
tp://www.securityfocus.com/bid/63791 - http://www.openwall.com/lists/oss-security/2013/11/18/2 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d3e91a89b7adbc2831334def9e494dd9892f9af - https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 - https://bugzilla.redhat.com/show_bug.cgi?id=1031678 - http://rhn.redhat.com/errata/RHSA-2014-0284.html
CVE ID: CVE-2013-4592 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T16:45:14.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2115-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1031702 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.
15-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1031702 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 - http://www.ubuntu.com/usn/USN-2116-1 - https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 - http://www.ubuntu.com/usn/USN-2114-1 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40f193f5bb022e927a57a4f5d5194e4f12ddb74 - http://www.ubuntu.com/usn/USN-2112-1 - https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.
rvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2111-1 - http://www.ubuntu.com/usn/USN-2067-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.9.bz2 - http://www.openwall.com/lists/oss-security/2013/11/18/3
CVE ID: CVE-2013-4593 State: PUBLISHED Published: 2019-12-11T13:45:01 Last Updated: 2024-08-06T16:45:14.950Z Vendors: omniauth-facebook Products: omniauth-facebook Problem Types: UNKNOWN_TYPE Description: RubyGem omniauth-facebook has an access token security vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4593 - https://access.redhat.com/security/cve/cve-2013-4593 - http://www.openwall.com/lists/oss-security/2013/11/18/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89040
CVE ID: CVE-2013-4594 State: PUBLISHED Published: 2014-10-25T22:00:00 Last Updated: 2024-08-06T16:45:15.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by anonymous users, which allows remote anonymous users to use the payment of other anonymous users when submitting a form that requires payment. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55431 - http://seclists.org/oss-sec/2013/q4/317 - https://drupal.org/node/2128345 - https://drupal.org/node/2129373
CVE ID: CVE-2013-4595 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T16:52:26.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used instead of HTTPS and makes it easier for remote attackers to obtain sensitive information via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/317 - https://drupal.org/node/2128739 - https://drupal.org/node/2129381
CVE ID: CVE-2013-4596 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T16:52:26.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node Access Keys module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote attackers to bypass access restrictions via a node listing. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2125239 - http://www.securityfocus.com/bid/63568 - http://secunia.com/advisories/55255 - https://drupal.org/node/2129379
CVE ID: CVE-2013-4597 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T16:52:26.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2135257 - http://seclists.org/oss-sec/2013/q4/317 - https://drupal.org/node/2133555
CVE ID: CVE-2013-4598 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T16:52:26.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2132747 - http://secunia.com/advisories/55651 - https://drupal.org/node/2135267 - http://www.securityfocus.com/bid/63703
CVE ID: CVE-2013-4599 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T16:52:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2134413 - https://drupal.org/node/2135273 - http://www.securityfocus.com/bid/63705 - https://drupal.org/node/2134409 - http://seclists.org/oss-sec/2013/q4/317
CVE ID: CVE-2013-4600 State: PUBLISHED Published: 2013-08-09T21:00:00Z Last Updated: 2024-09-16T16:42:52.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter to system/login/index.html. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0113.html - https://github.com/alkacon/opencms-core/issues/173 - http://www.opencms.org/en/news/130710-opencms-v852-release
3.html - https://github.com/alkacon/opencms-core/issues/173 - http://www.opencms.org/en/news/130710-opencms-v852-releasenotes.html - https://www.htbridge.com/advisory/HTB23160
CVE ID: CVE-2013-4602 State: PUBLISHED Published: 2020-02-12T21:17:19 Last Updated: 2024-08-06T16:52:26.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60552 - http://www.securitytracker.com/id/1028666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85099 - https://vuldb.com/?id.9151 - https://packetstormsecurity.com/files/122024/Avira-AntiVir-Engine-Denial-Of-Service-Filter-Evasion.html
CVE ID: CVE-2013-4604 State: PUBLISHED Published: 2013-06-25T14:00:00Z Last Updated: 2024-09-16T23:00:24.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FGA-2013-20/
CVE ID: CVE-2013-4608 State: PUBLISHED Published: 2013-06-17T10:00:00Z Last Updated: 2024-09-16T19:24:10.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page. Additional Analyst Notes: - CVE Program Container: References: - http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf