Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6166 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T17:29:43.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/121 - http://seclists.org/oss-sec/2013/q4/117 - http://www.openwall.com/lists/oss-security/2013/04/03/10
oss-sec/2013/q4/121 - http://seclists.org/oss-sec/2013/q4/117 - http://www.openwall.com/lists/oss-security/2013/04/03/10 - http://redmine.lighttpd.net/issues/2188 - https://code.google.com/p/chromium/issues/detail?id=238041
CVE ID: CVE-2013-6167 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T17:29:43.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/121 - https://bugzilla.mozilla.org/show_bug.cgi?id=858215 - http://seclists.org/oss-sec/2013/q4/117 -
rg/oss-sec/2013/q4/121 - https://bugzilla.mozilla.org/show_bug.cgi?id=858215 - http://seclists.org/oss-sec/2013/q4/117 - http://www.openwall.com/lists/oss-security/2013/04/03/10 - http://redmine.lighttpd.net/issues/2188
CVE ID: CVE-2013-6168 State: PUBLISHED Published: 2013-11-14T20:00:00 Last Updated: 2024-08-06T17:29:43.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88654 - http://community.zikula.org/index.php?module=News&func=display&sid=3132 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0057.html - https://www.htbridge.com/advisor
c=display&sid=3132 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0057.html - https://www.htbridge.com/advisory/HTB23178
CVE ID: CVE-2013-6169 State: PUBLISHED Published: 2013-10-17T23:00:00Z Last Updated: 2024-09-16T19:36:22.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.12/ - http://www.debian.org/security/2013/dsa-2775
CVE ID: CVE-2013-6170 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T17:29:42.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029176 - http://www.securityfocus.com/bid/62973 - http://secunia.com/advisories/55216 - http://kb.juniper.net/Inf
om/id/1029176 - http://www.securityfocus.com/bid/62973 - http://secunia.com/advisories/55216 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10548
CVE ID: CVE-2013-6171 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:29:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server. Additional Analyst Notes: - CVE Program Container: References: - http://cpanel.net/tsr-2013-0010-full-disclosure/ - http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security - https://usn.ubuntu.com/3
tsr-2013-0010-full-disclosure/ - http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security - https://usn.ubuntu.com/3556-2/ - http://secunia.com/advisories/54808 - http://www.dovecot.org/list/dovecot-news/2013-November/000264.html
CVE ID: CVE-2013-6172 State: PUBLISHED Published: 2013-11-05T18:00:00 Last Updated: 2024-08-06T17:29:42.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/ticket/1489382 - http://roundcube.net/news/2013/10/21/security-updates-095-and-087/ - http://www.interworx.com/developers/changelog/version-5-0-13-build-574-2014-02-1
3/10/21/security-updates-095-and-087/ - http://www.interworx.com/developers/changelog/version-5-0-13-build-574-2014-02-19 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00035.html - http://www.debian.org/security/2013/dsa-2787
CVE ID: CVE-2013-6173 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions in (1) xAdmin or (2) xDashboard. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtr
Dashboard. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html - http://osvdb.org/99985 - http://www.kb.cert.org/vuls/id/346982
CVE ID: CVE-2013-6174 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:43.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securit
E Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html - http://www.securityfocus.com/bid/63810 - http://www.kb.cert.org/vuls/id/346982
CVE ID: CVE-2013-6175 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to inject arbitrary web script or HTML via unspecified input to a (1) xAdmin or (2) xDashboard form. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.s
: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html - http://www.kb.cert.org/vuls/id/346982
CVE ID: CVE-2013-6176 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:43.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote authenticated users to execute arbitrary SQL commands via unspecified input to a (1) xAdmin or (2) xDashboard form. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securityt
Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html - http://www.kb.cert.org/vuls/id/346982
CVE ID: CVE-2013-6177 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allows remote authenticated users to read arbitrary files by leveraging xDashboard access. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstorms
hives.neohapsis.com/archives/bugtraq/2013-11/0095.html - http://www.securitytracker.com/id/1029384 - http://packetstormsecurity.com/files/124070/EMC-Document-Sciences-xPression-XSS-CSRF-Redirect-SQL-Injection.html - http://www.kb.cert.org/vuls/id/346982
CVE ID: CVE-2013-6178 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:29:42.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0120.html - http://www.securitytracker.com/id/1029523
CVE ID: CVE-2013-6179 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6180 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T17:29:42.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029446 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0034.html
CVE ID: CVE-2013-6181 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:29:43.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029535 - http://www.securityfocus.com/bid/64517 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0140.html - http://packetstormsecurity.com/files/124585/EMC-Watch4net-Information-Disclosure.html
CVE ID: CVE-2013-6182 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:29:43.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64520 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html - http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html - http://www.securitytracker.com/id/1029536 - http://osvdb.org
C-Replication-Manager-Unquoted-File-Path-Enumeration.html - http://www.securitytracker.com/id/1029536 - http://osvdb.org/101430
CVE ID: CVE-2013-6183 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6184 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6185 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6186 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6187 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-6188 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:29:43.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138
CVE ID: CVE-2013-6189 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T17:29:42.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, and 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1666. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029542 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041078 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?d
kb/docDisplay/?docId=emr_na-c04041078 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041078 - http://secunia.com/advisories/56263
CVE ID: CVE-2013-6190 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6191 State: PUBLISHED Published: 2013-12-17T02:00:00 Last Updated: 2024-08-06T17:29:43.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04041093 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04041093 - http://www.securitytracker.com/id/1029496
CVE ID: CVE-2013-6192 State: PUBLISHED Published: 2013-12-17T02:00:00 Last Updated: 2024-08-06T17:29:42.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04041093 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04041093 - http://www.securitytracker.com/id/1029496
CVE ID: CVE-2013-6193 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:29:42.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1*, M121*, M1536dnf, and P1*; Color LaserJet CM* and CP*; and TopShot LaserJet Pro M275 printers allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04041432 - http://www.kb.cert.org/vuls/id/882676 - http://www.securitytracker.com/id/1029497 - https://h20566.www2.h
na-c04041432 - http://www.kb.cert.org/vuls/id/882676 - http://www.securitytracker.com/id/1029497 - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04041432
CVE ID: CVE-2013-6194 State: PUBLISHED Published: 2014-01-04T02:00:00 Last Updated: 2024-08-06T17:29:43.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?do
b/docDisplay/?docId=emr_na-c03822422 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422 - http://osvdb.org/show/osvdb/101630 - http://www.exploit-db.com/exploits/31181
CVE ID: CVE-2013-6195 State: PUBLISHED Published: 2014-01-04T02:00:00 Last Updated: 2024-08-06T17:29:42.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?do
CVE ID: CVE-2013-6196 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:29:43.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Autonomy Ultraseek 5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029522 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041082 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041082 - http://jvn.jp/en/jp/JVN69700259/index.html - http
site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041082 - http://jvn.jp/en/jp/JVN69700259/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89939 - http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000126.html - http://www.securityfocus.com/bid/64458
CVE ID: CVE-2013-6197 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T17:29:43.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 - http://www.securitytracker.com/id/1029541 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 - https://exchange.xforce.ib
566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89974
CVE ID: CVE-2013-6198 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T17:29:42.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89975 - http://www.securitytracker.com/id/1029541 - http://h20566.www2.hp.com/portal/site/hpsc/temp
.com/vulnerabilities/89975 - http://www.securitytracker.com/id/1029541 - http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04052075
CVE ID: CVE-2013-6199 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6200 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T17:29:43.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04103553 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04103553
CVE ID: CVE-2013-6201 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:29:43.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04156626 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04156626