Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5087 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5088 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5089 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5090 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5091 State: PUBLISHED Published: 2013-10-04T20:00:00Z Last Updated: 2024-09-17T01:16:46.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php. NOTE: this issue might be a duplicate of CVE-2011-4559. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0079.html - http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.4.0/Core%20Product/ - https://www.htbridge.com/advisory/
ttp://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.4.0/Core%20Product/ - https://www.htbridge.com/advisory/HTB23168 - http://osvdb.org/76138 - http://www.exploit-db.com/exploits/28409
CVE ID: CVE-2013-5092 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:41.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61733 - http://packetstormsecurity.com/files/122737/algosec-xss.txt - http://www.osvdb.org/96806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86336
CVE ID: CVE-2013-5093 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T21:57:06.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - http://ceriksen.com/2013/08/20/graphite-remote-code-execution-vulnerability-advisory/ - http://www.exploit-db.com/exploits/27752 - https://github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst - http://www.osvdb.org/
ts/27752 - https://github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst - http://www.osvdb.org/96436 - http://www.securityfocus.com/bid/61894 - http://secunia.com/advisories/54556 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/graphite_pickle_exec.rb
CVE ID: CVE-2013-5094 State: PUBLISHED Published: 2014-01-28T17:00:00 Last Updated: 2024-08-06T16:59:41.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120721/McAfee-Vulnerability-Manager-7.5-Cross-Site-Scripting.html - http://www.tenable.com/plugins/index.php?view=single&id=65738 - http://asheesh2000.blogspot.com/2013/08/mcafee-vulnerability-manager-75-cross.html - https://kc.mcafee.com/corp
=65738 - http://asheesh2000.blogspot.com/2013/08/mcafee-vulnerability-manager-75-cross.html - https://kc.mcafee.com/corporate/index?page=content&id=KB77772 - http://www.securityfocus.com/bid/58401
CVE ID: CVE-2013-5095 State: PUBLISHED Published: 2013-08-16T10:00:00 Last Updated: 2024-08-06T16:59:41.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/JSA10585 - http://www.securitytracker.com/id/1028923
CVE ID: CVE-2013-5096 State: PUBLISHED Published: 2013-08-16T10:00:00 Last Updated: 2024-08-06T16:59:41.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61794 - http://kb.juniper.net/JSA10585 - http://www.securitytracker.com/id/1028923
CVE ID: CVE-2013-5097 State: PUBLISHED Published: 2013-08-16T10:00:00 Last Updated: 2024-08-06T16:59:41.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, aka PR 879462. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/JSA10585 - http://www.securitytracker.com/id/1028923
CVE ID: CVE-2013-5098 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T16:59:41.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/723187/download-monitor - https://exchange.xforce.ibmcloud.com/vulnerabilities/85921 - http://secunia.com/advisories/53116 - http://www.securityfocus.com/bid/61407
CVE ID: CVE-2013-5099 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T16:59:41.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61376 - http://www.exploit-db.com/exploits/26958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85888
CVE ID: CVE-2013-5100 State: PUBLISHED Published: 2013-08-09T22:00:00 Last Updated: 2024-08-06T16:59:41.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81195 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001/ - http://secunia.com/advisories/51836 - http://www.securityf
/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001/ - http://secunia.com/advisories/51836 - http://www.securityfocus.com/bid/57288 - http://osvdb.org/89131 - http://typo3.org/extensions/repository/view/div2007
CVE ID: CVE-2013-5106 State: PUBLISHED Published: 2020-02-12T21:35:44 Last Updated: 2024-08-06T16:59:41.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/klen/python-mode/issues/162
CVE ID: CVE-2013-5107 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T16:59:41.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ROCK_LANG cookie, as demonstrated in a login.index action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-026.txt
CVE ID: CVE-2013-5108 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T16:59:41.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the login page or (2) username parameter in a login.index action to index.php and other unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89366 - http://secunia.com/advisories/55756 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-026.txt
CVE ID: CVE-2013-5112 State: PUBLISHED Published: 2020-01-31T13:55:29 Last Updated: 2024-08-06T16:59:41.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evernote before 5.5.1 has insecure PIN storage Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89735 - https://blog.c22.cc/advisories/cve-2013-5112-evernote-android-insecure-storage-of-pin-data-bypass-of-pin-protection/
CVE ID: CVE-2013-5113 State: PUBLISHED Published: 2020-01-31T14:14:13 Last Updated: 2024-08-06T17:06:50.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: LastPass prior to 2.5.1 has an insecure PIN implementation. Additional Analyst Notes: - CVE Program Container: References: - http://blog.c22.cc/2013/09/05/a-sneak-peak-into-android-secure-containers-2/ - https://blog.c22.cc/advisories/cve-2013-51135114-lastpass-android-container-pin-and-auto-wipe-security-feature-bypass/ - https://www.securityfocus.com/archive/1/529783
CVE ID: CVE-2013-5114 State: PUBLISHED Published: 2020-01-31T14:13:35 Last Updated: 2024-08-06T17:06:50.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: LastPass prior to 2.5.1 allows secure wipe bypass. Additional Analyst Notes: - CVE Program Container: References: - http://blog.c22.cc/2013/09/05/a-sneak-peak-into-android-secure-containers-2/ - https://blog.c22.cc/advisories/cve-2013-51135114-lastpass-android-container-pin-and-auto-wipe-security-feature-bypass/ - https://www.securityfocus.com/archive/1/529783
CVE ID: CVE-2013-5116 State: PUBLISHED Published: 2020-01-31T14:20:07 Last Updated: 2024-08-06T17:06:50.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evernote prior to 5.5.1 has insecure password change Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89734 - https://packetstormsecurity.com/files/author/8433/ - https://www.securityfocus.com/bid/64320/info
CVE ID: CVE-2013-5117 State: PUBLISHED Published: 2014-03-12T14:00:00 Last Updated: 2024-08-06T17:06:50.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27602 - http://osvdb.org/96306 - http://seclists.org/fulldisclosure/2013/Sep/9 - http://www.zldnn.com/ViewArticle/Solution-for-DNNArticle-RSS-Security-Issue.aspx - http://www.securityfocus.com/bid/61788
CVE ID: CVE-2013-5118 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-17T01:11:23.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0114.html - https://www.roblest.com/#research:CVE-2013-5118
CVE ID: CVE-2013-5119 State: PUBLISHED Published: 2013-09-23T20:00:00Z Last Updated: 2024-09-16T17:33:44.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97290 - http://www.securityfocus.com/bid/62407 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0063.html
CVE ID: CVE-2013-5120 State: PUBLISHED Published: 2013-08-14T15:00:00Z Last Updated: 2024-09-16T16:13:49.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPFox before 3.6.0 (build4) allows remote attackers to execute arbitrary SQL commands via the search[gender] parameter to user/browse/view_/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61660 - http://osvdb.org/96028 - http://www.exploit-db.com/exploits/27430 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0048.html
CVE ID: CVE-2013-5121 State: PUBLISHED Published: 2013-08-14T15:00:00Z Last Updated: 2024-09-16T19:41:23.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands via the search[sort_by] parameter to user/browse/view_/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61660 - http://osvdb.org/96028 - http://www.exploit-db.com/exploits/27430 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0048.html
CVE ID: CVE-2013-5122 State: PUBLISHED Published: 2020-01-07T13:29:43 Last Updated: 2024-08-06T17:06:50.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60897 - http://www.securitytracker.com/id/1029769 - https://packetstormsecurity.com/files/cve/CVE-2013-5122
CVE ID: CVE-2013-5123 State: PUBLISHED Published: 2019-11-05T21:16:59 Last Updated: 2024-08-06T17:06:50.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-5123 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5123 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-5123 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155248.html - http://lists.fedoraproject.
13-5123 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155248.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155291.html - http://www.openwall.com/lists/oss-security/2013/08/21/17 - http://www.openwall.com/lists/oss-security/2013/08/21/18 - http://www.securityfocus.com/bid/77520
CVE ID: CVE-2013-5125 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT6001 - http://lists.apple.com/archives/security-anno
CVE ID: CVE-2013-5126 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT6001 - http://lists.apple.com/archives/security-anno
CVE ID: CVE-2013-5127 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT6001 - http://lists.apple.com/archives/security-anno
CVE ID: CVE-2013-5128 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html - http://www.securitytracker.com/id/1029054 - http://support.apple.com/kb/HT6001 - http://lists.apple.com/archives/security-anno
CVE ID: CVE-2013-5129 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:50.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/securi
html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5130 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-17T00:46:57.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
CVE ID: CVE-2013-5131 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-5132 State: PUBLISHED Published: 2013-09-08T01:00:00Z Last Updated: 2024-09-17T02:52:53.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the access point and then sending a short frame. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Sep/msg00000.html - http://support.apple.com/kb/HT5920
CVE ID: CVE-2013-5133 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:06:51.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6162
CVE ID: CVE-2013-5134 State: REJECTED Published: 2013-09-19T10:00:00Z Last Updated: 2024-09-17T00:01:57.676Z Description: No description available.
CVE ID: CVE-2013-5135 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T01:36:47.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00007.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html
CVE ID: CVE-2013-5136 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T02:15:59.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote attackers to obtain sensitive information in opportunistic circumstances by sniffing the network during an unintended cleartext VNC session. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html
CVE ID: CVE-2013-5137 State: PUBLISHED Published: 2013-09-19T10:00:00 Last Updated: 2024-08-06T17:06:51.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app and using the (1) task-completion API or (2) VoIP API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029054 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html